from the descriptor's value: 255 [ 776.921490][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 776.935556][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 776.965596][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 776.979684][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 777.004796][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 777.018709][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 777.043766][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 777.062964][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 777.087171][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 777.178133][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 777.192265][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 777.206503][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 777.220486][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 777.242487][T10862] usb 5-1: SerialNumber: syz [ 777.254969][ T17] usb 3-1: SerialNumber: syz [ 777.288269][T26173] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.295941][T26173] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.308426][T26160] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.316051][T26160] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.363346][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 777.373942][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 777.397872][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 777.419331][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 777.560184][T26160] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.580407][T26160] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.610285][T26173] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.653280][T26173] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 777.831176][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 777.888514][T10862] usblp 5-1:5.0: usblp1: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 778.257139][ T17] usb 5-1: USB disconnect, device number 40 [ 778.477305][T26160] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 778.726834][T26160] usb 3-1: Using ep0 maxpacket: 8 [ 778.889234][T26223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 778.896688][T26223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 778.959427][ T17] usblp1: removed [ 778.976932][ C1] usblp0: nonzero read bulk status received: -71 [ 779.140518][T10862] usb 3-1: USB disconnect, device number 38 [ 779.156172][T10862] usblp0: removed [ 779.347128][ T17] usb 5-1: new high-speed USB device number 41 using dummy_hcd 23:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:56:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0xff, 0x2, 0x3, 0x1f, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000240), 0x2}, 0x10010, 0xffffffffffffffff, 0x4}, 0x0, 0x0, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='\"\xa6\x00'}, 0x30) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10000, 0xccf, 0x200, 0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write(0xffffffffffffffff, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x8001, @local, 0xb64}, {0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1, [0x3f, 0x3, 0xddd, 0x1ff, 0x3a0, 0xea, 0x8, 0xc57]}, 0x5c) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000500)="3cf2b0f55a917f785cf8215848c78dd71d53d7453f3057efbe516d57a1aae07d407e714fe52fbc5b6a88acd7fd41ff2d5abd3883e3e9d8ea8c71517769b7d501420054e4406edc5736b48d3c38d1bc1008edac051b9a122e8f8daab8f71089653299828038ca0b086d1edd74", 0x6c}], 0x1, &(0x7f00000005c0)="ab090acd6c98a4971f7b589e00e1ff133f7f6d28155a2d106ec4569ab77324e2149f6a7e3ef6dac3dd733099f9174a2f4bd12f741b1698b9b43404c270f53d8b4ea10fca201f491fe956343eca428b4c11d12ca7f0b389e4034fee2a9187b4c5422431114355ad7ca75e3315d1850b40141c26ef37937e6ec4a3ceac83e9cf1f25fc14e9b46fb84dbf6425cf009def5542fbf1cfc510ee4e56d9b54ed94aea2642f3a121d802f7b592a3d593d7155daf1149511ee056a16eed2a749040e15039", 0xc0}, 0x24040001) 23:56:55 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:56:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x2, 0x8, 0x801}, 0x14}}, 0x0) 23:56:59 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 783.379135][ T34] audit: type=1804 audit(1607299019.540:120): pid=26377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3730382F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16384 res=1 errno=0 23:56:59 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f0000000280)) 23:56:59 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 783.506841][ T9789] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 783.506905][T12978] usb 3-1: new high-speed USB device number 40 using dummy_hcd 23:56:59 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) [ 783.599403][ T34] audit: type=1804 audit(1607299019.680:121): pid=26383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3730392F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16358 res=1 errno=0 [ 783.726951][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 783.782727][ T9789] usb 6-1: Using ep0 maxpacket: 8 [ 783.787169][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 783.809107][ T34] audit: type=1804 audit(1607299019.810:122): pid=26387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3731302F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16368 res=1 errno=0 [ 783.907520][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 783.915936][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 783.927587][ T9789] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 783.946688][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 783.950187][ T9789] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 783.975094][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 783.979126][ T9789] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 784.006040][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 784.014057][ T9789] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 784.049171][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 784.097619][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 784.099376][ T9789] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 784.111809][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 784.129221][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 784.157281][ T9789] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 784.160618][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 784.183192][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 784.196055][ T9789] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 784.203375][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 784.219531][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 784.245217][ T9789] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 784.249595][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 784.300389][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 784.320441][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 784.357813][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 784.377307][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.386111][T12978] usb 3-1: SerialNumber: syz [ 784.417496][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 784.426556][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.438380][T26370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.447190][T26370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.457258][ T9789] usb 6-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 784.467035][ T7] usb 5-1: SerialNumber: syz [ 784.474263][ T9789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.496812][ T9789] usb 6-1: SerialNumber: syz [ 784.508185][T26372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.519055][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 784.525029][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 784.538635][T26362] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.546597][T26372] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.557838][ T9789] hub 6-1:5.0: bad descriptor, ignoring hub [ 784.564030][ T9789] hub: probe of 6-1:5.0 failed with error -5 [ 784.587758][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 784.594005][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 784.720681][T26370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.734977][T26370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.771975][T26362] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.804532][T26368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.815498][T26368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 784.978075][T12978] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 785.033301][ T9789] usblp 6-1:5.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 785.179781][ T7] usblp 5-1:5.0: usblp2: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 785.198271][ C1] usblp0: nonzero read bulk status received: -71 [ 785.220231][T12978] usb 3-1: USB disconnect, device number 40 [ 785.247510][ T7] usb 5-1: USB disconnect, device number 44 [ 785.274742][ T7] usblp2: removed [ 785.357206][ T31] usb 6-1: USB disconnect, device number 10 [ 785.368046][ T31] usblp1: removed [ 785.656878][ T7] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 785.756815][T12978] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 785.916885][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 786.006949][ T9795] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 786.019199][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 786.037403][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 786.046401][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 786.062200][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 786.074677][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 786.089654][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 786.103042][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 786.115800][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 786.148004][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 786.156524][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 786.172931][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 786.185338][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 786.200087][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 786.214020][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 786.223373][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 786.240528][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 786.251781][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 786.265176][ T7] usb 5-1: SerialNumber: syz [ 786.270125][ T9795] usb 6-1: Using ep0 maxpacket: 8 [ 786.282650][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 786.338830][T26372] usblp0: removed [ 786.357984][ T7] usb 5-1: can't set config #5, error -71 23:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:02 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 786.391579][ T7] usb 5-1: USB disconnect, device number 45 [ 786.399155][ T9795] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 786.407778][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 786.423177][ T9795] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 786.433852][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:57:02 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 23:57:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 786.509518][ T9795] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 786.525296][T12978] usb 3-1: SerialNumber: syz [ 786.529008][ T34] audit: type=1804 audit(1607299022.680:123): pid=26461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3731312F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16350 res=1 errno=0 [ 786.562442][ T9795] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 786.596908][T12978] usb 3-1: can't set config #5, error -71 [ 786.609412][T12978] usb 3-1: USB disconnect, device number 41 [ 786.633810][ T9795] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 23:57:02 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 786.659047][ T9795] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 786.693679][ T9795] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 786.727183][ T9795] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:57:02 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 786.754833][ T34] audit: type=1804 audit(1607299022.910:124): pid=26485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3731322F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16053 res=1 errno=0 [ 786.827078][ T9795] usb 6-1: string descriptor 0 read error: -71 [ 786.835200][ T9795] usb 6-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 786.859337][ T9795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:57:03 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) [ 786.897098][ T9795] usb 6-1: can't set config #5, error -71 [ 786.904657][ T9795] usb 6-1: USB disconnect, device number 11 [ 786.955775][ T34] audit: type=1804 audit(1607299023.110:125): pid=26490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723738323333363338322F73797A6B616C6C65722E6E61674747742F3731332F75502217F9B5D18C0F80C2864F3CFD037F8866FF8113D026555E67808FC0452B0CC9A95E6B12218AAB2DFCF06B220D9657E03942A99A95FD97110EC2 dev="sda1" ino=16146 res=1 errno=0 23:57:03 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(0x0, &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 786.999473][ T7] usb 5-1: new high-speed USB device number 46 using dummy_hcd 23:57:03 executing program 0: mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1000001, 0x30, 0xffffffffffffffff, 0x82000000) 23:57:03 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(0x0, &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 787.064568][ T34] audit: type=1804 audit(1607299023.220:126): pid=26496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/714/file0" dev="sda1" ino=16099 res=1 errno=0 [ 787.090313][T12978] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 787.217420][ T34] audit: type=1804 audit(1607299023.380:127): pid=26502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/715/file0" dev="sda1" ino=16146 res=1 errno=0 [ 787.246838][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 787.307543][ T9795] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 787.336997][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 787.367529][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 787.379529][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 787.427579][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 787.454554][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 787.469512][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 787.481766][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 787.506829][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 787.521344][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 787.546866][ T9795] usb 6-1: Using ep0 maxpacket: 8 [ 787.552691][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 787.583773][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 787.611263][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 787.633639][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 787.666984][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 787.682021][ T9795] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 787.697181][ T9795] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 787.705918][ T9795] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 787.737637][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 787.776998][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 787.786520][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 787.801081][ T9795] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 787.816332][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 787.833081][ T7] usb 5-1: SerialNumber: syz [ 787.840764][ T9795] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 787.854461][ T9795] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.868665][ T9795] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 787.872360][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.883347][ T9795] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 787.903465][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.937075][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 787.946923][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 787.955306][T12978] usb 3-1: SerialNumber: syz [ 787.998272][T26471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 787.998290][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 788.005484][T26471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.041609][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 788.057564][ T9795] usb 6-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 788.066643][ T9795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.097627][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 788.103636][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 788.121971][ T9795] usb 6-1: SerialNumber: syz [ 788.180642][T26478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.217712][ T9795] hub 6-1:5.0: bad descriptor, ignoring hub [ 788.222233][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.224533][ T9795] hub: probe of 6-1:5.0 failed with error -5 [ 788.248219][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.322521][T26471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.339744][T26471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.455466][T26478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 788.510911][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 788.578199][ T7] usb 5-1: USB disconnect, device number 46 [ 788.607016][ T7] usblp0: removed [ 788.621083][T12978] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 788.727939][ T9795] usblp 6-1:5.0: usblp1: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 789.046970][ T7] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 789.286915][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 789.407450][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 789.416189][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 789.439477][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 789.455797][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 789.470931][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 789.485264][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 789.499066][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 789.586925][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 789.601603][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 789.622507][ T7] usb 5-1: SerialNumber: syz [ 789.659196][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.670951][T26475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 789.722848][ T7] usb 5-1: can't set config #5, error -71 [ 789.744931][ T7] usb 5-1: USB disconnect, device number 47 23:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(0x0, &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:57:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:09 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 793.083714][ T9789] usb 3-1: USB disconnect, device number 42 [ 793.105843][ T9789] usblp0: removed [ 793.218462][ T34] audit: type=1804 audit(1607299029.380:128): pid=26578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/716/file0" dev="sda1" ino=16382 res=1 errno=0 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:57:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='aio\x00', 0x2841c09, &(0x7f00000002c0)='%.!#\'\\3\x00') sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 793.335372][ T34] audit: type=1804 audit(1607299029.490:129): pid=26586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/717/file0" dev="sda1" ino=16382 res=1 errno=0 [ 793.367345][ T7] usb 6-1: reset high-speed USB device number 12 using dummy_hcd 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 793.486887][T12978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 793.511741][ T34] audit: type=1804 audit(1607299029.670:130): pid=26592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/718/file0" dev="sda1" ino=16382 res=1 errno=0 [ 793.617111][ T7] usb 6-1: Using ep0 maxpacket: 8 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 793.656845][ T9789] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 793.680110][ T34] audit: type=1804 audit(1607299029.840:131): pid=26595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir782336382/syzkaller.nagGGt/719/file0" dev="sda1" ino=16382 res=1 errno=0 [ 793.731633][T12978] usb 5-1: Using ep0 maxpacket: 8 23:57:09 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 793.763631][T26573] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 793.867547][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 793.876127][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 793.917497][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 793.927884][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 793.964463][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 794.009303][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 794.067521][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 794.076091][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 794.087015][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 794.098752][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 794.101897][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 794.110453][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 794.150078][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 794.166962][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 794.181038][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 794.195933][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 794.277083][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 794.290743][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 794.312287][ T9789] usb 3-1: SerialNumber: syz [ 794.327406][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 794.337700][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 794.345816][T12978] usb 5-1: SerialNumber: syz [ 794.348195][T26579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.375787][T26579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.388209][T26576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.395704][T26576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.438063][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 794.445281][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 794.447543][T12978] hub 5-1:5.0: bad descriptor, ignoring hub [ 794.487181][T12978] hub: probe of 5-1:5.0 failed with error -5 [ 794.648087][T26579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.669790][T26576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.693418][T26576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.703816][T26579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 794.947593][T12978] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 794.968101][ T9789] usblp 3-1:5.0: usblp2: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 795.027744][T12978] usb 5-1: USB disconnect, device number 48 [ 795.041777][T12978] usblp0: removed [ 795.289484][ T7] usb 3-1: USB disconnect, device number 43 [ 795.305793][ T7] usblp2: removed [ 795.517071][T12978] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 795.756802][T12978] usb 5-1: Using ep0 maxpacket: 8 23:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:12 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 23:57:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='aio\x00', 0x2841c09, &(0x7f00000002c0)='%.!#\'\\3\x00') sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 795.878733][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 795.912874][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 795.968608][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 796.020322][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 796.063891][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 796.106222][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 796.143892][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:57:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:12 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) 23:57:12 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='aio\x00', 0x2841c09, &(0x7f00000002c0)='%.!#\'\\3\x00') sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 796.277115][T12978] usb 5-1: string descriptor 0 read error: -71 [ 796.283791][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 796.317029][ T17] usb 3-1: new high-speed USB device number 44 using dummy_hcd 23:57:12 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) [ 796.344174][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 796.391556][ T9795] usb 6-1: USB disconnect, device number 12 [ 796.407499][T12978] usb 5-1: can't set config #5, error -71 [ 796.424423][ T9795] usblp1: removed [ 796.451835][T12978] usb 5-1: USB disconnect, device number 49 23:57:12 executing program 1: r0 = memfd_create(&(0x7f00000003c0)='e\x00\x04temnam\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x93\xa9\xac\x1f\xf40\xdd$\x98\xcf\xebVt\x7fA\xeb3\xbd\xdeS\xf7u\x8f\xeb\x05b\x17%qv\x11\x03*\x88GQ\xd6!hvO\x87\xee\x85\x87\x92\x0e\xc3\xf4z\xa0:\xd2\xa7zeM\x06\x9b\xa8\x87\x01\x94~\x11\xf0-\xec\x1eK\xb8\xbc\x1e\x9e\\\x9c\x88\xe6\x06\x98\xd8\x04C\xa3$i?\xfd\xc9\x8foQ\xa3a@\xf9\xfa!\xb6\xc2m[\x11(\x870\f\xb4|\x7f\x96\xc0\xb2\x8ak\xd2SfE\xa9\xc0\xf8\x98\xc0;@\x8fN\xa86\x1c\xc6\bn\f\xc9\x06X\xa9\xf0H\x88h\xee\x84J\xf6q\xa4NAIN\xe5&\xe9+\xbclE\xe3\xd9}\xc7\xe9\x82@\x02\xb40xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) [ 796.566899][ T17] usb 3-1: Using ep0 maxpacket: 8 23:57:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000700)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc008561b, &(0x7f00000004c0)={0x980900}) [ 796.689161][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 796.711632][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 23:57:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000700)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc008561b, &(0x7f00000004c0)={0x980900}) [ 796.748745][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 796.777172][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 23:57:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 796.811139][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 796.816829][T12978] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 796.860228][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 796.935200][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 796.964588][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.067478][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 797.086803][T12978] usb 5-1: Using ep0 maxpacket: 8 [ 797.096250][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 797.140914][ T17] usb 3-1: SerialNumber: syz [ 797.178256][T26649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.185824][T26649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.208288][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 797.217759][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 797.226685][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 797.241569][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 797.253926][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 797.277589][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 797.314502][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 797.381320][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 797.431684][T26649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.457375][T26649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.464614][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.597606][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 797.611560][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 797.634094][T12978] usb 5-1: SerialNumber: syz [ 797.669468][T26662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.681320][T26662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.708610][T12978] hub 5-1:5.0: bad descriptor, ignoring hub [ 797.716195][T12978] hub: probe of 5-1:5.0 failed with error -5 [ 797.752126][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 797.915642][T26662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 797.932114][T26662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 798.898114][ T17] usb 3-1: USB disconnect, device number 44 [ 798.899533][T12978] usblp 5-1:5.0: usblp1: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 798.927761][ T17] usblp0: removed [ 799.137174][T12978] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 799.376826][T12978] usb 5-1: Using ep0 maxpacket: 8 23:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:15 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000700)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc008561b, &(0x7f00000004c0)={0x980900}) 23:57:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x1}, 0x10) ftruncate(r0, 0x200002) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={[], 0x6, 0xbaf5, 0xaef}) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='aio\x00', 0x2841c09, &(0x7f00000002c0)='%.!#\'\\3\x00') sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 23:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:15 executing program 5: read$midi(0xffffffffffffffff, 0x0, 0x0) [ 799.557030][T12978] usb 5-1: device firmware changed [ 799.562870][T12978] usb 5-1: USB disconnect, device number 50 23:57:15 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000700)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc008561b, &(0x7f00000004c0)={0x980900}) [ 799.617585][T12978] usblp1: removed 23:57:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x290800, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x8001, 0x4, 0x4, 0x9, 0x7, 0xfe}, 0x9c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) clock_gettime(0x7, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x1, 0x3f, {}, {0x4, 0x1, 0x1, 0x80, 0x51, 0x4, "6e71eabc"}, 0x0, 0x4, @fd=r4, 0x0, 0x0, r4}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 23:57:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x8, 0x6, 0x401}, 0x14}}, 0x0) 23:57:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x290800, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x8001, 0x4, 0x4, 0x9, 0x7, 0xfe}, 0x9c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) clock_gettime(0x7, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x1, 0x3f, {}, {0x4, 0x1, 0x1, 0x80, 0x51, 0x4, "6e71eabc"}, 0x0, 0x4, @fd=r4, 0x0, 0x0, r4}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 23:57:16 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) [ 799.926998][ T9795] usb 3-1: new high-speed USB device number 45 using dummy_hcd 23:57:16 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) [ 800.056986][T12978] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 800.176970][ T9795] usb 3-1: Using ep0 maxpacket: 8 [ 800.306821][T12978] usb 5-1: Using ep0 maxpacket: 8 [ 800.319277][ T9795] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 800.334973][ T9795] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 800.372310][ T9795] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 800.392680][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 800.414337][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 800.429589][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 800.451489][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 800.477158][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 800.496572][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 800.510323][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 800.524285][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 800.538955][ T9795] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.555847][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 800.569790][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 800.583626][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.658015][ T9795] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 800.674489][ T9795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 800.688035][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 800.708577][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 800.728301][ T9795] usb 3-1: SerialNumber: syz [ 800.743129][T12978] usb 5-1: SerialNumber: syz [ 800.768498][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.776058][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.788627][T26755] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.796139][T26755] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 800.830851][ T9795] hub 3-1:5.0: bad descriptor, ignoring hub [ 800.837831][T12978] hub 5-1:5.0: bad descriptor, ignoring hub [ 800.843934][T12978] hub: probe of 5-1:5.0 failed with error -5 [ 800.859391][ T9795] hub: probe of 3-1:5.0 failed with error -5 [ 801.033699][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.047356][T26755] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.067322][T26755] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.075259][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 801.341570][ T9795] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 801.353254][T12978] usblp 5-1:5.0: usblp1: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 801.408127][T12978] usb 5-1: USB disconnect, device number 51 [ 801.425847][T12978] usblp1: removed [ 801.595665][T26810] udc-core: couldn't find an available UDC or it's busy [ 801.603311][T26810] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 801.662026][ T7] usb 3-1: USB disconnect, device number 45 [ 801.685321][ T7] usblp0: removed [ 801.886819][T12978] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 802.126885][T12978] usb 5-1: Using ep0 maxpacket: 8 23:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:18 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 23:57:18 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000040)) 23:57:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 802.247341][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 802.256202][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 802.341811][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 802.397816][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 802.458660][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 802.481991][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 802.503024][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:57:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:18 executing program 0: select(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:57:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) 23:57:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x6fa10300, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000027002908000000000000000004af3fb86a31aea1dc995200"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x736e, &(0x7f00000002c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13a90100e4ffffff, 0xfffffff4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd01000}]) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x9, 0x8) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x74000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46802) io_setup(0x736e, &(0x7f00000002c0)) mkdir(&(0x7f0000000200)='./file0\x00', 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cfe03f9", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250600000008002c000400000008003200ff01000005002d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008014}, 0x22000850) [ 802.566816][ T9789] usb 3-1: new high-speed USB device number 46 using dummy_hcd 23:57:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10000, 0xccf, 0x200, 0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write(0xffffffffffffffff, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x8001, @local, 0xb64}, {0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1, [0x0, 0x3, 0xddd, 0x1ff, 0x3a0, 0xea, 0x8, 0xc57]}, 0x5c) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000500)="3cf2b0f55a917f785cf8215848c78dd71d53d7453f3057efbe516d57a1aae07d407e714fe52fbc5b6a88acd7fd41ff2d5abd3883e3e9d8ea8c71517769b7d501420054e4406edc5736b48d3c38d1bc1008edac051b9a122e8f8daab8f71089653299828038ca0b086d1edd74d4514a54", 0x70}], 0x1, &(0x7f00000005c0)="ab090acd6c98a4971f7b589e00e1ff133f7f6d28155a2d106ec4569ab77324e2149f6a7e3ef6dac3dd733099f9174a2f4bd12f741b1698b9b43404c270f53d8b4ea10fca201f491fe956343eca428b4c11d12ca7f0b389e4034fee2a9187b4c5422431114355ad7ca75e3315d1850b40141c26ef37937e6ec4a3ceac83e9cf1f25fc14e9b46fb84dbf6425cf009def5542fbf1cfc510ee4e56d9b54ed94aea2642f3a121d802f7b592a3d593d7155daf1149511ee056a16eed2a749040e15039", 0xc0}, 0x24040001) [ 802.632161][T26839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 802.636942][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 802.690023][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 802.777177][T12978] usb 5-1: can't set config #5, error -71 [ 802.825892][T12978] usb 5-1: USB disconnect, device number 52 [ 802.866845][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 803.002473][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 803.023458][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 23:57:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x6fa10300, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000027002908000000000000000004af3fb86a31aea1dc995200"], 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x736e, &(0x7f00000002c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13a90100e4ffffff, 0xfffffff4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd01000}]) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x9, 0x8) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x74000000) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46802) io_setup(0x736e, &(0x7f00000002c0)) mkdir(&(0x7f0000000200)='./file0\x00', 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cfe03f9", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250600000008002c000400000008003200ff01000005002d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008014}, 0x22000850) [ 803.098786][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 803.166801][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 803.223968][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 803.268420][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 803.277004][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 803.327518][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 803.394567][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 803.396875][T12978] usb 5-1: new high-speed USB device number 53 using dummy_hcd 23:57:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x40}}, 0x0) [ 803.547566][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 803.583624][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 803.633443][ T9789] usb 3-1: SerialNumber: syz [ 803.667089][T12978] usb 5-1: Using ep0 maxpacket: 8 [ 803.691536][T26828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.706671][T26828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.727764][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 803.734448][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 803.787011][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 803.795594][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 803.829147][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 803.889252][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 803.927303][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 803.965517][T26828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.970676][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 803.982001][T26828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.029721][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 804.127681][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 804.143513][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 804.158501][T12978] usb 5-1: SerialNumber: syz [ 804.178329][T26847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.185802][T26847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.217805][T12978] hub 5-1:5.0: bad descriptor, ignoring hub [ 804.223840][T12978] hub: probe of 5-1:5.0 failed with error -5 [ 804.246320][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 804.427141][T26847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.434579][T26847] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 804.451663][T26828] udc-core: couldn't find an available UDC or it's busy [ 804.476374][T26828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 804.651650][ T9789] usb 3-1: USB disconnect, device number 46 [ 804.703178][ T9789] usblp0: removed [ 804.763311][T12978] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 804.822025][T12978] usb 5-1: USB disconnect, device number 53 [ 804.849981][T12978] usblp0: removed 23:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:21 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) 23:57:21 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000840), 0x4) 23:57:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) [ 805.330615][T12978] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 805.430784][ T9795] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 805.576971][T12978] usb 5-1: Using ep0 maxpacket: 8 [ 805.686818][ T9795] usb 3-1: Using ep0 maxpacket: 8 [ 805.698097][T12978] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 805.717318][T12978] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 805.757368][T12978] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 805.770262][T12978] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 805.789381][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 805.802638][T12978] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 805.823799][T12978] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 805.844992][ T9795] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 805.853453][ T9795] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 805.869492][ T9795] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 805.882484][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 23:57:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x2, [@var, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "ec"}, @fwd, @func, @typedef, @enum]}}, 0x0, 0x8e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:57:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 23:57:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 805.900266][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 805.912723][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 805.930041][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 805.963456][ T9795] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 806.007030][T12978] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 806.044419][T12978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:57:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 23:57:22 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fee000/0x12000)=nil, 0x4) 23:57:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 806.127637][T12978] usb 5-1: can't set config #5, error -71 [ 806.147512][ T9795] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 806.162806][T12978] usb 5-1: USB disconnect, device number 54 [ 806.191373][ T9795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 806.233076][ T9795] usb 3-1: SerialNumber: syz [ 806.278372][T26951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.285585][T26951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.337808][ T9795] hub 3-1:5.0: bad descriptor, ignoring hub [ 806.345771][ T9795] hub: probe of 3-1:5.0 failed with error -5 [ 806.540435][T26951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.580078][T26951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 806.666944][T12978] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 806.848359][ T9795] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 806.859997][T12978] usb 5-1: device descriptor read/64, error 18 [ 807.051995][T26951] udc-core: couldn't find an available UDC or it's busy [ 807.073745][T26951] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 807.137066][T12978] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 807.208561][ T9795] usb 3-1: USB disconnect, device number 47 [ 807.231047][ T9795] usblp0: removed [ 807.326981][T12978] usb 5-1: device descriptor read/64, error 18 [ 807.446974][T12978] usb usb5-port1: attempt power cycle 23:57:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) 23:57:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@fwd, @func, @typedef]}}, 0x0, 0x3e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:57:23 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x80001) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) [ 807.957138][ T7] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 808.156833][T12978] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 808.196932][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 808.317438][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 808.326442][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 808.342399][T12978] usb 5-1: device descriptor read/8, error -61 [ 808.349924][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 808.365666][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 808.380404][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 808.394245][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 808.430748][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 808.444447][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 808.537451][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 808.557107][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 808.565412][ T7] usb 3-1: SerialNumber: syz [ 808.616834][T12978] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 808.631814][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 808.657396][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 808.667818][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 808.673857][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 808.797853][T12978] usb 5-1: device descriptor read/8, error -61 [ 808.920555][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 808.931346][T12978] usb usb5-port1: unable to enumerate USB device [ 808.940973][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:25 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 23:57:25 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vhost-net\x00', 0x2, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 23:57:25 executing program 5: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0) 23:57:25 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) getrusage(0x1, &(0x7f0000000540)) 23:57:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 809.188129][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 23:57:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x54}}, 0x0) [ 809.507548][ T7] usb 3-1: USB disconnect, device number 48 [ 809.520780][ T7] usblp0: removed [ 809.619948][ T9789] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 809.818723][ T9789] usb 5-1: device descriptor read/64, error 18 [ 809.856796][ T7] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 810.089901][ T9789] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 810.109755][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 810.227664][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 810.243125][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 810.277778][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 810.296895][ T9789] usb 5-1: device descriptor read/64, error 18 [ 810.309865][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 810.325470][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 810.340401][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 810.354417][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 810.367941][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 810.416931][ T9789] usb usb5-port1: attempt power cycle [ 810.457522][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 810.471612][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 810.492642][ T7] usb 3-1: SerialNumber: syz [ 810.519156][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 810.526461][T27024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 810.557718][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 810.564743][ T7] hub: probe of 3-1:5.0 failed with error -5 23:57:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x22}) 23:57:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) [ 810.676969][ T7] usblp: can't set desired altsetting 0 on interface 0 [ 810.737511][ T7] usb 3-1: USB disconnect, device number 49 [ 811.126959][ T9789] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 811.166902][ T7] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 811.317519][ T9789] usb 5-1: device descriptor read/8, error -61 [ 811.406990][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 811.527460][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 811.535944][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 811.552281][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 811.564995][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 811.580858][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 811.594393][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 811.609521][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 811.623795][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 811.626948][ T9789] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 811.716961][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 811.726314][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 811.741669][ T7] usb 3-1: SerialNumber: syz [ 811.768258][T27109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.775535][T27109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 811.808127][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 811.814128][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 811.843437][ T9789] usb 5-1: device descriptor read/8, error -61 [ 811.967078][ T9789] usb usb5-port1: unable to enumerate USB device [ 812.035375][T27109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 812.053867][T27109] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:28 executing program 0: socketpair(0x18, 0x0, 0x5, &(0x7f0000000080)) 23:57:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0x22}) 23:57:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000ec"], 0x28}}, 0x0) 23:57:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:28 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vim2m\x00', 0x2, 0x0) 23:57:28 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='),)\x00') [ 812.307893][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 812.686823][ T9789] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 812.886883][ T9789] usb 5-1: device descriptor read/64, error 18 [ 813.087414][T27109] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 813.176773][ T9789] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 813.386953][ T9789] usb 5-1: device descriptor read/64, error 18 [ 813.400331][T27109] usb 3-1: Using ep0 maxpacket: 8 [ 813.506968][ T9789] usb usb5-port1: attempt power cycle [ 813.539557][T27153] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.551084][T27153] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 813.626775][ C1] usblp0: nonzero read bulk status received: -71 23:57:29 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:29 executing program 1: select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) 23:57:29 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) dup3(r2, r1, 0x0) [ 813.850457][ T31] usb 3-1: USB disconnect, device number 50 [ 813.882628][ T31] usblp0: removed [ 814.216963][ T9789] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 814.283143][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 814.386965][ T9789] usb 5-1: device descriptor read/8, error -61 [ 814.556881][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 814.667201][ T9789] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 814.676937][ T31] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 814.685329][ T31] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 814.698219][ T31] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 814.710805][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 814.725139][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 814.738690][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 814.756963][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 814.778811][ T31] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 814.857710][ T9789] usb 5-1: device descriptor read/8, error -61 [ 814.877082][ T31] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 814.890508][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 814.911594][ T31] usb 3-1: SerialNumber: syz [ 814.969357][T27181] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 814.979772][ T9789] usb usb5-port1: unable to enumerate USB device [ 814.989865][T27181] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.007915][ T31] hub 3-1:5.0: bad descriptor, ignoring hub [ 815.014105][ T31] hub: probe of 3-1:5.0 failed with error -5 23:57:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0xff, 0x2, 0x3, 0x1f, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x0, r1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10000, 0x0, 0x200, 0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write(0xffffffffffffffff, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f0800010002010002080003800500", 0x22) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x8001, @local, 0xb64}, {0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1, [0x0, 0x3, 0xddd, 0x1ff, 0x3a0, 0xea, 0x8, 0xc57]}, 0x5c) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000500)="3cf2b0f55a917f785cf8215848c78dd71d53d7453f3057efbe516d57a1aae07d407e714fe52fbc5b6a88acd7fd41ff2d5abd3883e3e9d8ea8c71", 0x3a}], 0x1, &(0x7f00000005c0)="ab090acd6c98a4971f7b589e00e1ff133f7f6d28155a2d106ec4569ab77324e2149f6a7e3ef6dac3dd733099f9174a2f4bd12f741b1698b9b43404c270f53d8b4ea10fca201f491fe956343eca428b4c11d12ca7f0b389e4034fee2a9187b4c5422431114355ad7ca75e3315d1850b40141c26ef37937e6ec4a3ceac83e9cf1f25fc14e9b46fb84dbf6425cf009def5542fbf1cfc510ee4e56d9b54ed94aea2642f3a121d802f7b592a3d593d7155daf1149511ee056a16eed2a749040", 0xbd}, 0x24040001) 23:57:31 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000a80)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 23:57:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syslog(0x0, 0x0, 0x0) [ 815.213198][T27181] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 815.237796][T27181] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:31 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) 23:57:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 815.548038][ T31] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 815.566972][ T9859] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 815.806917][ T9859] usb 5-1: Using ep0 maxpacket: 8 [ 815.884496][ T31] usb 3-1: USB disconnect, device number 51 [ 815.923906][ T31] usblp0: removed [ 815.928242][ T9859] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 815.943490][ T9859] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 815.979836][ T9859] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 816.010515][ T9859] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 816.055661][ T9859] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 816.089022][ T9859] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 816.113991][ T9859] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 816.217431][ T9859] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 816.243450][ T9859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 816.277904][ T31] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 816.304176][ T9859] usb 5-1: SerialNumber: syz [ 816.348209][T27213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.355899][T27213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.387776][ T9859] hub 5-1:5.0: bad descriptor, ignoring hub [ 816.395813][ T9859] hub: probe of 5-1:5.0 failed with error -5 [ 816.536895][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 816.597438][T27213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.605390][T27213] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 816.667480][ T31] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 816.675966][ T31] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 816.692684][ T31] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 816.703748][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 816.720908][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 816.732513][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 816.749671][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 816.779055][ T31] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 816.839078][ T9859] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 816.881194][ T31] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 816.915284][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:57:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0xff, 0x2, 0x3, 0x1f, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x0, r1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10000, 0x0, 0x200, 0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write(0xffffffffffffffff, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f0800010002010002080003800500", 0x22) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x8001, @local, 0xb64}, {0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1, [0x0, 0x3, 0xddd, 0x1ff, 0x3a0, 0xea, 0x8, 0xc57]}, 0x5c) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000500)="3cf2b0f55a917f785cf8215848c78dd71d53d7453f3057efbe516d57a1aae07d407e714fe52fbc5b6a88acd7fd41ff2d5abd3883e3e9d8ea8c71", 0x3a}], 0x1, &(0x7f00000005c0)="ab090acd6c98a4971f7b589e00e1ff133f7f6d28155a2d106ec4569ab77324e2149f6a7e3ef6dac3dd733099f9174a2f4bd12f741b1698b9b43404c270f53d8b4ea10fca201f491fe956343eca428b4c11d12ca7f0b389e4034fee2a9187b4c5422431114355ad7ca75e3315d1850b40141c26ef37937e6ec4a3ceac83e9cf1f25fc14e9b46fb84dbf6425cf009def5542fbf1cfc510ee4e56d9b54ed94aea2642f3a121d802f7b592a3d593d7155daf1149511ee056a16eed2a749040", 0xbd}, 0x24040001) 23:57:33 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x10000000000000cb, 0x0, 0xffffffffffffff69, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0xff, 0x2, 0x3, 0x1f, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x0, r1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10000, 0x0, 0x200, 0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write(0xffffffffffffffff, &(0x7f0000000140)="2400000058001f000307f4f9002304000a04f55f0800010002010002080003800500", 0x22) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x8001, @local, 0xb64}, {0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1, [0x0, 0x3, 0xddd, 0x1ff, 0x3a0, 0xea, 0x8, 0xc57]}, 0x5c) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000500)="3cf2b0f55a917f785cf8215848c78dd71d53d7453f3057efbe516d57a1aae07d407e714fe52fbc5b6a88acd7fd41ff2d5abd3883e3e9d8ea8c71", 0x3a}], 0x1, &(0x7f00000005c0)="ab090acd6c98a4971f7b589e00e1ff133f7f6d28155a2d106ec4569ab77324e2149f6a7e3ef6dac3dd733099f9174a2f4bd12f741b1698b9b43404c270f53d8b4ea10fca201f491fe956343eca428b4c11d12ca7f0b389e4034fee2a9187b4c5422431114355ad7ca75e3315d1850b40141c26ef37937e6ec4a3ceac83e9cf1f25fc14e9b46fb84dbf6425cf009def5542fbf1cfc510ee4e56d9b54ed94aea2642f3a121d802f7b592a3d593d7155daf1149511ee056a16eed2a749040", 0xbd}, 0x24040001) 23:57:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) read$midi(r0, &(0x7f00000001c0)=""/32, 0x20) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:57:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 816.936601][ T31] usb 3-1: SerialNumber: syz [ 816.989522][ T31] usb 3-1: can't set config #5, error -71 [ 817.027923][ T31] usb 3-1: USB disconnect, device number 52 [ 817.486812][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 817.607753][T27213] usb 5-1: reset high-speed USB device number 67 using dummy_hcd [ 817.746896][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 817.846987][T27213] usb 5-1: Using ep0 maxpacket: 8 [ 817.877240][ T31] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 817.907042][ T31] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 817.927213][ T31] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 817.936643][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 817.988997][T27280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 817.996332][T27280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 818.004431][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 818.033105][ T31] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 818.076802][ C1] usblp0: nonzero read bulk status received: -71 [ 818.088461][ T31] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 818.102856][ T31] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 818.197832][ T31] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 818.223353][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 818.239395][ T31] usb 3-1: SerialNumber: syz [ 818.307349][T27282] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 818.307358][ T7] usb 5-1: USB disconnect, device number 67 [ 818.308932][ T7] usblp0: removed [ 818.325346][T27282] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 818.360169][ T31] hub 3-1:5.0: bad descriptor, ignoring hub [ 818.366279][ T31] hub: probe of 3-1:5.0 failed with error -5 [ 818.563242][T27282] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 818.579514][T27282] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:34 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={[0x101]}, 0x8}) 23:57:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x2, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "ec"}, @fwd, @func, @typedef, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x86}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:57:34 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000700)) 23:57:34 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0xfffffe66}}], 0x1, 0x0, 0x0) [ 818.828600][ T31] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 23:57:35 executing program 5: clock_gettime(0x4, &(0x7f0000005900)) [ 819.147084][T12978] usb 3-1: USB disconnect, device number 53 [ 819.165252][T12978] usblp0: removed [ 819.177068][ T7] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 819.426955][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 819.497485][T12978] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 819.547851][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 819.558441][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 819.592257][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 819.605864][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 819.620670][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 819.636214][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 819.686801][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 819.772547][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 819.797972][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 819.826907][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 819.834976][ T7] usb 5-1: SerialNumber: syz [ 819.888448][T27330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.896032][T27330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 819.905356][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 819.923235][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 819.948755][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 819.968344][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 819.974452][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 819.997931][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 820.019250][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 820.058579][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 820.097036][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 820.137136][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 820.192875][T27330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.212023][T27330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 820.227013][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa 23:57:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) 23:57:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18c6}, 0x40) 23:57:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:36 executing program 0: sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) [ 820.236104][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 820.252897][T12978] usb 3-1: SerialNumber: syz [ 820.294824][T12978] usb 3-1: can't set config #5, error -71 [ 820.313542][T12978] usb 3-1: USB disconnect, device number 54 23:57:36 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/hwrng\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)) 23:57:36 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 23:57:36 executing program 1: openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat '}, 0x1d) [ 820.468163][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 820.559138][T27390] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 820.768715][T12978] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 820.787734][ T31] usb 5-1: USB disconnect, device number 68 [ 820.812544][ T31] usblp0: removed [ 821.056808][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 821.136777][ T31] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 821.180455][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 821.211448][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 821.256217][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 821.285786][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 821.326963][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 821.357153][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 821.388035][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 821.408524][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.426970][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 821.517489][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 821.531090][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 821.551146][T12978] usb 3-1: SerialNumber: syz [ 821.567477][ T31] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 821.575897][ T31] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 821.578130][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.613913][ T31] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 821.625729][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.649878][ T31] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 821.668839][ T31] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 821.677887][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 821.686701][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 821.701029][ T31] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 821.756745][ T31] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.846963][ T31] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 821.856255][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:57:38 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 23:57:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002940)={0x0, r2+10000000}) 23:57:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/245, &(0x7f00000000c0)=0xf5) [ 821.893520][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.898897][ T31] usb 5-1: SerialNumber: syz [ 821.945653][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 821.957077][ T31] usb 5-1: can't set config #5, error -71 [ 821.988027][ T31] usb 5-1: USB disconnect, device number 69 [ 822.006972][T27429] IPVS: length: 245 != 8 [ 822.052441][T27433] IPVS: length: 245 != 8 [ 822.228397][T12978] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 822.430728][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 822.547918][T12978] usb 3-1: USB disconnect, device number 55 [ 822.564695][T12978] usblp0: removed [ 822.686984][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 822.806946][ T31] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 822.815463][ T31] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 822.866848][ T31] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 822.876117][ T31] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 822.896278][ T31] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 822.896881][T12978] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 822.911957][ T31] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 822.927644][ T31] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.017586][ T31] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 823.040311][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 823.053846][ T31] usb 5-1: SerialNumber: syz [ 823.088373][T27430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.095636][T27430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.127694][ T31] hub 5-1:5.0: bad descriptor, ignoring hub [ 823.133750][ T31] hub: probe of 5-1:5.0 failed with error -5 [ 823.167345][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 823.287553][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 823.296235][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 823.312077][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 823.330247][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 823.345436][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 823.351419][T27430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.361374][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 823.374672][T27430] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.379309][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 823.395454][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.516948][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 823.526432][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 823.566759][T12978] usb 3-1: SerialNumber: syz [ 823.601843][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 823.624994][T27379] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:39 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$BLKBSZSET(r0, 0x40041271, 0x0) 23:57:39 executing program 5: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '{*\x00'}, 0xf) 23:57:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) [ 823.652693][ T31] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 823.696901][T12978] usb 3-1: can't set config #5, error -71 [ 823.712561][T12978] usb 3-1: USB disconnect, device number 56 23:57:40 executing program 0: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, r2+30000000}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 823.794537][ T34] audit: type=1400 audit(1607299059.950:132): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="{*" pid=27478 comm="syz-executor.5" 23:57:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x4c010) 23:57:40 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000002240)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/34, 0xfe73) [ 824.207006][T12978] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 824.297308][T27430] usb 5-1: reset high-speed USB device number 70 using dummy_hcd [ 824.467127][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 824.546928][T27430] usb 5-1: Using ep0 maxpacket: 8 [ 824.597481][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 824.606061][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 824.634338][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 824.651424][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 824.689470][T27491] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.708621][T27491] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.709367][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 824.766268][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 824.800230][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 824.810471][ C0] usblp0: nonzero read bulk status received: -71 [ 824.827880][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 824.917041][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 824.926367][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 824.936825][T12978] usb 3-1: SerialNumber: syz [ 824.949480][ T17] usb 5-1: USB disconnect, device number 70 [ 824.958332][T27486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 824.965767][T27486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 825.003881][ T17] usblp0: removed [ 825.018909][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 825.034079][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 825.236654][T27486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 825.251684][T27486] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:41 executing program 1: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) 23:57:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x80080, 0x0) close(r0) 23:57:41 executing program 0: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, r2+30000000}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 825.515051][T12978] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 826.106923][ T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 826.167251][T27486] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 826.306917][ T31] usb 5-1: device descriptor read/64, error 18 [ 826.406971][T27486] usb 3-1: Using ep0 maxpacket: 8 [ 826.559121][T27544] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 826.574380][T27544] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 826.586940][ T31] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 826.636751][ C0] usblp0: nonzero read bulk status received: -71 [ 826.776766][ T31] usb 5-1: device descriptor read/64, error 18 [ 826.812501][ T17] usb 3-1: USB disconnect, device number 57 [ 826.823175][ T17] usblp0: removed [ 826.897786][ T31] usb usb5-port1: attempt power cycle 23:57:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:43 executing program 1: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file0\x00') lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) 23:57:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x80080, 0x0) close(r0) 23:57:43 executing program 0: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, r2+30000000}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:57:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x80080, 0x0) close(r0) 23:57:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x80080, 0x0) close(r0) [ 827.607875][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd 23:57:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 827.686911][ T17] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 827.776838][ T31] usb 5-1: device descriptor read/8, error -61 [ 827.956875][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 828.047559][ T31] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 828.087461][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 828.095941][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 828.137472][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 828.168158][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 828.191440][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 828.232467][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 828.250822][ T31] usb 5-1: device descriptor read/8, error -61 [ 828.284390][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 828.314470][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 828.382256][ T31] usb usb5-port1: unable to enumerate USB device [ 828.437435][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 828.446603][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 828.485619][ T17] usb 3-1: SerialNumber: syz [ 828.544892][T27579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 828.560858][T27579] raw-gadget gadget: fail, usb_ep_enable returned -22 23:57:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000240), 0x4) 23:57:44 executing program 0: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x0, r2+30000000}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:57:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 828.587663][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 828.593764][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 828.824144][T27579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 828.845677][T27579] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 829.098476][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 829.176827][ T31] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 829.366809][ T31] usb 5-1: device descriptor read/64, error 18 [ 829.637066][ T31] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 829.711151][T27579] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 829.836896][ T31] usb 5-1: device descriptor read/64, error 18 [ 829.969843][ T31] usb usb5-port1: attempt power cycle [ 829.986907][T27579] usb 3-1: Using ep0 maxpacket: 8 [ 830.139265][T27632] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 830.148091][T27632] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 830.196921][ C1] usblp0: nonzero read bulk status received: -71 [ 830.367699][T12978] usb 3-1: USB disconnect, device number 58 [ 830.397488][T12978] usblp0: removed [ 830.677557][ T31] usb 5-1: new high-speed USB device number 77 using dummy_hcd 23:57:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:47 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'changeprofile ', '\x00'}, 0xf) 23:57:47 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000036c0)='ns/ipc\x00') 23:57:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 830.857629][ T31] usb 5-1: device descriptor read/8, error -61 23:57:47 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') 23:57:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x801) 23:57:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) poll(0x0, 0x0, 0x204) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) [ 831.136810][ T31] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 831.267057][ T17] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 831.306858][ T31] usb 5-1: device descriptor read/8, error -61 [ 831.438867][ T31] usb usb5-port1: unable to enumerate USB device [ 831.516760][ T17] usb 3-1: Using ep0 maxpacket: 8 23:57:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:47 executing program 0: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x38) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x170, 0x170, 0x180, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={[], [], @multicast2}, 'macvlan1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}, 0x0) 23:57:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/162, 0xfffffffffffffede}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/94, 0x5e}, {&(0x7f00000014c0)=""/81, 0x51}, {&(0x7f0000001540)=""/50, 0x32}], 0x9}}, {{&(0x7f0000001600)=@qipcrtr, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001680)=""/213, 0xd5}, {&(0x7f0000001780)=""/44, 0x2c}, {&(0x7f00000017c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/112, 0x70}], 0x6, &(0x7f0000002900)=""/100, 0x64}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002980)=""/232, 0xe8}, {&(0x7f0000002a80)=""/180, 0xb4}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x3, &(0x7f0000003b80)=""/196, 0xc4}}, {{&(0x7f0000003c80)=@alg, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003d00)=""/97, 0x61}, {&(0x7f0000003d80)=""/167, 0xa7}, {&(0x7f0000003e40)=""/86, 0x56}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/71, 0x47}, {&(0x7f0000004f40)=""/127, 0x7f}, {&(0x7f0000004fc0)=""/104, 0x68}, {&(0x7f0000005040)=""/120, 0x78}], 0x8, &(0x7f0000005100)=""/94, 0x5e}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/28, 0x1c}, {&(0x7f00000061c0)=""/150, 0x96}, {&(0x7f0000006280)=""/48, 0x30}, {&(0x7f00000062c0)=""/62, 0x3e}], 0x5, &(0x7f0000006340)}}, {{&(0x7f0000006380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000006640)=[{&(0x7f0000006400)=""/167, 0xa7}, {&(0x7f00000064c0)=""/10, 0xa}, {&(0x7f0000006500)=""/153, 0x99}, {&(0x7f00000065c0)=""/117, 0x75}], 0x4, &(0x7f0000006680)=""/4096, 0x1000}}, {{&(0x7f0000007680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007c40)=[{&(0x7f0000007700)=""/42, 0x2a}, {&(0x7f0000007740)=""/246, 0xf6}, {&(0x7f0000007840)=""/5, 0x5}, {&(0x7f0000007880)=""/73, 0x49}, {&(0x7f0000007900)=""/107, 0x6b}, {&(0x7f0000007980)=""/207, 0xcf}, {&(0x7f0000007a80)=""/56, 0x38}, {&(0x7f0000007ac0)=""/137, 0x89}, {&(0x7f0000007b80)=""/133, 0x85}], 0x9, &(0x7f0000008240)=""/24, 0x18}}, {{&(0x7f0000007d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007d80)=""/253, 0xfd}], 0x1, &(0x7f0000007ec0)=""/11, 0xb}}, {{&(0x7f0000007f00)=@ax25={{0x3, @netrom}, [@default, @default, @null, @rose, @netrom, @netrom, @remote, @bcast]}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f80)=""/53, 0x35}], 0x1}}], 0x9, 0x0, &(0x7f0000008180)) 23:57:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x1) [ 831.647005][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 831.683109][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 831.731950][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 831.761073][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 831.778569][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 831.793541][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 831.830237][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 831.845224][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 831.937014][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 831.951103][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 831.976650][ T17] usb 3-1: SerialNumber: syz [ 832.018241][T27663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 832.026158][T27663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 832.077850][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 832.084235][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 832.287448][T27663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 832.295249][T27663] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 832.302717][ T9789] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 832.506862][ T9789] usb 5-1: device descriptor read/64, error 18 [ 832.611210][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 832.786946][ T9789] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 832.976841][ T9789] usb 5-1: device descriptor read/64, error 18 [ 833.101054][ T9789] usb usb5-port1: attempt power cycle [ 833.377241][T27663] usb 3-1: reset high-speed USB device number 59 using dummy_hcd [ 833.647948][T27663] usb 3-1: Using ep0 maxpacket: 8 [ 833.819137][T27717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 833.830526][T27717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 833.836880][ T9789] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 833.886833][ C1] usblp0: nonzero read bulk status received: -71 [ 834.017599][ T9789] usb 5-1: device descriptor read/8, error -61 [ 834.055925][T12978] usb 3-1: USB disconnect, device number 59 [ 834.073425][T12978] usblp0: removed [ 834.286835][ T9789] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 834.467638][ T9789] usb 5-1: device descriptor read/8, error -61 23:57:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x10002) 23:57:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa3adffa8c539f282}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:57:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002940)={0x0, r1+10000000}) [ 834.587040][ T9789] usb usb5-port1: unable to enumerate USB device 23:57:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x141, 0x0) 23:57:50 executing program 5: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) ftruncate(r0, 0x200000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff}) read(r0, &(0x7f0000000040)=""/4096, 0x20001040) 23:57:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:57:51 executing program 5: openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80a02, 0x0) 23:57:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001780)=""/57, 0x39}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2122, &(0x7f0000003d00)={0x77359400}) [ 834.947134][T12978] usb 3-1: new high-speed USB device number 60 using dummy_hcd 23:57:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{&(0x7f0000000400)=@isdn, 0xb4, 0x0}}], 0x1, 0x20, 0x0) [ 835.196889][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 835.226943][ T9789] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 835.317744][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 835.332515][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 835.365312][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 835.400370][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 835.429499][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 835.446948][ T9789] usb 5-1: device descriptor read/64, error 18 [ 835.463547][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 835.518896][T12978] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 835.566820][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 835.677633][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 835.700039][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 835.716846][ T9789] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 835.734062][T12978] usb 3-1: SerialNumber: syz [ 835.758516][T27746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 835.766433][T27746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 835.837875][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 835.844103][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 835.936838][ T9789] usb 5-1: device descriptor read/64, error 18 [ 836.041181][T27746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 836.057801][ T9789] usb usb5-port1: attempt power cycle [ 836.070337][T27746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 836.321744][T12978] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 836.776920][ T9789] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 836.977274][ T9789] usb 5-1: device descriptor read/8, error -61 [ 837.084474][T27746] usb 3-1: reset high-speed USB device number 60 using dummy_hcd [ 837.246945][ T9789] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 837.346880][T27746] usb 3-1: Using ep0 maxpacket: 8 [ 837.448486][ T9789] usb 5-1: device descriptor read/8, error -61 [ 837.508449][T27792] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 837.520913][T27792] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 837.566935][ T9789] usb usb5-port1: unable to enumerate USB device [ 837.576760][ C1] usblp0: nonzero read bulk status received: -71 [ 837.751116][ T9789] usb 3-1: USB disconnect, device number 60 [ 837.765918][ T9789] usblp0: removed 23:57:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:54 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 23:57:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 23:57:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000001c0)) 23:57:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:57:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 23:57:54 executing program 5: clock_adjtime(0x0, &(0x7f0000000280)={0x7fffffff}) 23:57:54 executing program 1: unshare(0x20020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file0\x00') lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x1) 23:57:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/142, 0x8e}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000400)=""/71, 0x47}], 0x8, &(0x7f0000000600)=""/103, 0x67}, 0x8}, {{&(0x7f0000000680)=@tipc=@id, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/187, 0xbb}, {&(0x7f0000000a80)=""/170, 0xaa}], 0x7, &(0x7f0000000b80)=""/85, 0x55}, 0x3}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/136, 0x88}], 0x1, &(0x7f0000000d80)=""/48, 0x30}, 0x40}], 0x3, 0x20, &(0x7f0000003400)) 23:57:54 executing program 5: r0 = getpid() setpriority(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000019c0)='nbd\x00') process_vm_readv(r0, &(0x7f0000001600)=[{&(0x7f0000001140)=""/227, 0xe3}], 0x1, &(0x7f0000001800)=[{&(0x7f0000001640)=""/142, 0x8e}], 0x1, 0x0) 23:57:54 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) [ 838.596883][ T9789] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 838.657007][ T17] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 838.796900][ T9789] usb 5-1: device descriptor read/64, error 18 [ 838.906827][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 839.036932][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 839.045744][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 839.073294][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 839.083806][ T9789] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 839.093088][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 839.105036][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 839.117757][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 839.155293][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 839.194439][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 839.286883][ T9789] usb 5-1: device descriptor read/64, error 18 [ 839.298158][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 839.315632][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 839.335036][ T17] usb 3-1: SerialNumber: syz [ 839.388154][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.395726][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.419738][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 839.425952][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 839.437713][ T9789] usb usb5-port1: attempt power cycle [ 839.649336][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.658227][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 839.902756][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 839.998464][ T17] usb 3-1: USB disconnect, device number 61 [ 840.020494][ T17] usblp0: removed [ 840.166898][ T9789] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 840.367681][ T9789] usb 5-1: device descriptor read/8, error -61 [ 840.446952][ T17] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 840.646941][ T9789] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 840.696983][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 840.817535][ T9789] usb 5-1: device descriptor read/8, error -61 [ 840.824605][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 840.840175][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 840.853817][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 840.866604][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 840.881467][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 840.895321][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 840.910428][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 840.924673][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 840.942488][ T9789] usb usb5-port1: unable to enumerate USB device [ 841.037009][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 841.046910][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 841.055555][ T17] usb 3-1: SerialNumber: syz [ 841.099164][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 841.117581][T27825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 841.148029][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 841.155032][ T17] hub: probe of 3-1:5.0 failed with error -5 23:57:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:57:57 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') 23:57:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}]}, 0x38}}, 0x0) 23:57:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:57:57 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) 23:57:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 841.381193][ T17] usblp: can't set desired altsetting 0 on interface 0 23:57:57 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}) 23:57:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 23:57:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x88, 0x40, 0x0, 0x0) [ 841.437754][ T17] usb 3-1: USB disconnect, device number 62 23:57:57 executing program 1: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)) 23:57:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x107, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x9c, 0x0, @opaque="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"}}}}}, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 23:57:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000200)=0x54) [ 841.744271][ T4914] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 841.917161][ T17] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 841.939249][ T4914] usb 5-1: device descriptor read/64, error 18 [ 842.176776][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 842.217887][ T4914] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 842.297688][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 842.313909][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 842.349713][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 842.378986][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 842.405891][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 842.426800][ T4914] usb 5-1: device descriptor read/64, error 18 [ 842.435365][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 842.470407][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 842.492999][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 842.547081][ T4914] usb usb5-port1: attempt power cycle [ 842.596985][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 842.615906][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 842.636835][ T17] usb 3-1: SerialNumber: syz [ 842.668157][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 842.675806][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 842.747682][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 842.754252][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 842.952595][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 842.961062][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 843.188410][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 843.257675][ T4914] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 843.271459][ T17] usb 3-1: USB disconnect, device number 63 [ 843.283735][ T17] usblp0: removed [ 843.437713][ T4914] usb 5-1: device descriptor read/8, error -61 [ 843.716858][ T4914] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 843.746848][ T17] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 843.907316][ T4914] usb 5-1: device descriptor read/8, error -61 [ 844.020975][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 844.038317][ T4914] usb usb5-port1: unable to enumerate USB device [ 844.157011][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 844.165826][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 844.176105][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 844.185891][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 844.198280][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 844.208909][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 844.222002][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 844.232894][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 844.327603][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 844.337438][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 844.345517][ T17] usb 3-1: SerialNumber: syz 23:58:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:00 executing program 1: pipe2$9p(0x0, 0x6800) 23:58:00 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100)='fuse\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x5c}]}) creat(&(0x7f00000020c0)='./file0/file0\x00', 0x0) 23:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@remote, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) 23:58:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 844.383268][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 844.410024][T27903] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 844.473973][ T17] usb 3-1: can't set config #5, error -71 [ 844.490617][ T17] usb 3-1: USB disconnect, device number 64 23:58:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001900)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) 23:58:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000010c0), 0x4) 23:58:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 844.578937][T27971] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000200)) 23:58:00 executing program 0: syz_mount_image$fuse(&(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '^'}}]}}) 23:58:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) [ 844.771879][T27994] fuse: Bad value for 'fd' [ 844.794058][T27994] fuse: Bad value for 'fd' [ 844.907021][ T4914] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 844.987434][ T17] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 845.107021][ T4914] usb 5-1: device descriptor read/64, error 18 [ 845.226897][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 845.347646][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 845.356092][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 845.377268][ T4914] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 845.403040][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 845.416045][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 845.434575][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 845.445972][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 845.458755][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 845.469833][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 845.567466][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 845.596829][ T4914] usb 5-1: device descriptor read/64, error 18 [ 845.613060][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 845.641944][ T17] usb 3-1: SerialNumber: syz [ 845.678244][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 845.685618][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 845.717460][ T4914] usb usb5-port1: attempt power cycle [ 845.767746][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 845.773971][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 845.971585][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 845.988235][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 846.235718][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 846.287329][ T17] usb 3-1: USB disconnect, device number 65 [ 846.304711][ T17] usblp0: removed [ 846.437141][ T4914] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 846.637342][ T4914] usb 5-1: device descriptor read/8, error -61 [ 846.806857][ T17] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 846.906841][ T4914] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 847.066822][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 847.080639][ T4914] usb 5-1: device descriptor read/8, error -61 [ 847.186903][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 847.202595][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 847.224160][ T4914] usb usb5-port1: unable to enumerate USB device [ 847.231176][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 847.247441][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 847.262392][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 847.275817][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 847.290769][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 847.304948][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 847.396952][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 847.407777][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 847.416094][ T17] usb 3-1: SerialNumber: syz [ 847.458837][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.466361][T27979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 847.497723][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 847.503847][ T17] hub: probe of 3-1:5.0 failed with error -5 23:58:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:03 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x200034d}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:58:03 executing program 0: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2, 0x0) 23:58:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000640), &(0x7f0000000680)=0x4) 23:58:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 847.606858][ T17] usblp: can't set desired altsetting 0 on interface 0 [ 847.658550][ T17] usb 3-1: USB disconnect, device number 66 23:58:03 executing program 0: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) [ 847.703328][ T34] audit: type=1800 audit(1607299083.861:133): pid=28051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16340 res=0 errno=0 23:58:03 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) 23:58:04 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) clone(0x2102005ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') exit(0x0) fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 23:58:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x2, 0x0, &(0x7f0000000200)) 23:58:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0xfaf, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) [ 848.026797][ T4914] usb 5-1: new high-speed USB device number 99 using dummy_hcd 23:58:04 executing program 1: pselect6(0x40, &(0x7f0000002140), 0x0, 0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240), 0x8}) [ 848.116923][ T17] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 848.226814][ T4914] usb 5-1: device descriptor read/64, error 18 [ 848.376897][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 848.506880][ T4914] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 848.515254][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 848.538503][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 848.561511][ T34] audit: type=1800 audit(1607299084.721:134): pid=28051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="/" dev="fuse" ino=1 res=0 errno=0 [ 848.586508][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 848.601250][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 848.617819][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 848.631855][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 848.656561][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 848.678426][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 848.746806][ T4914] usb 5-1: device descriptor read/64, error 18 [ 848.778755][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 848.801075][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 848.820923][ T17] usb 3-1: SerialNumber: syz [ 848.848737][T28057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 848.863342][T28057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 848.877128][ T4914] usb usb5-port1: attempt power cycle [ 848.953704][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 848.962721][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 849.150882][T28057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.181863][T28057] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 849.416992][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 849.478212][ T17] usb 3-1: USB disconnect, device number 67 [ 849.504366][ T17] usblp0: removed [ 849.617207][ T4914] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 849.817686][ T4914] usb 5-1: device descriptor read/8, error -61 [ 849.967014][ T17] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 850.086978][ T4914] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 850.236883][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 850.266918][ T4914] usb 5-1: device descriptor read/8, error -61 [ 850.356989][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 850.365377][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 850.382745][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 850.396342][ T4914] usb usb5-port1: unable to enumerate USB device [ 850.402943][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 850.422430][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 850.436440][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 850.451607][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 850.465609][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 850.568022][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 850.577359][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 850.627293][ T17] usb 3-1: SerialNumber: syz 23:58:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:06 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x200034d}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:58:06 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:58:06 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) 23:58:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 850.703103][ T17] usb 3-1: can't set config #5, error -71 [ 850.712134][ T17] usb 3-1: USB disconnect, device number 68 [ 850.751357][ T34] audit: type=1800 audit(1607299086.911:135): pid=28130 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16364 res=0 errno=0 23:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x12, 0x0, &(0x7f0000000200)) 23:58:07 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000006a80)='fuse\x00', &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b40)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}}) 23:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @multicast2}, @phonet, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}) [ 851.000169][T28149] fuse: Bad value for 'fd' 23:58:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:58:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:58:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 851.176879][ T17] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 851.184840][ T4914] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 851.387041][ T4914] usb 5-1: device descriptor read/64, error 18 [ 851.420986][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 851.538692][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 851.567365][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 851.601860][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 851.620605][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 851.651412][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 851.669695][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 851.685151][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 851.699443][ T4914] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 851.708223][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 851.807555][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 851.824185][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 851.852891][ T17] usb 3-1: SerialNumber: syz [ 851.898462][T28136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.905947][T28136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 851.918494][ T4914] usb 5-1: device descriptor read/64, error 18 [ 851.978828][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 851.984857][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 852.047455][ T4914] usb usb5-port1: attempt power cycle [ 852.180363][T28136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 852.209699][T28136] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 852.470101][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 852.537580][ T17] usb 3-1: USB disconnect, device number 69 [ 852.563098][ T17] usblp0: removed [ 852.776887][ T4914] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 852.976963][ T4914] usb 5-1: device descriptor read/8, error -61 [ 853.050791][ T17] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 853.266815][ T4914] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 853.336757][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 853.477327][ T4914] usb 5-1: device descriptor read/8, error -61 [ 853.483574][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 853.499430][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 853.512155][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 853.525233][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 853.540086][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 853.554626][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 853.573452][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 853.593297][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 853.615471][ T4914] usb usb5-port1: unable to enumerate USB device [ 853.707529][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 853.734672][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:58:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:09 executing program 1: socket$inet(0x2, 0x0, 0xffff) 23:58:09 executing program 0: add_key$keyring(&(0x7f0000000200)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 23:58:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:09 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x200034d}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:58:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff0500"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 853.760752][ T17] usb 3-1: SerialNumber: syz [ 853.813641][ T17] usb 3-1: can't set config #5, error -71 [ 853.853747][ T17] usb 3-1: USB disconnect, device number 70 23:58:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='cpu.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) [ 853.870133][ T34] audit: type=1800 audit(1607299090.031:136): pid=28208 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16065 res=0 errno=0 23:58:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x3, 0x0, &(0x7f0000000200)) 23:58:10 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f000000aa80), 0x4) 23:58:10 executing program 0: write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x80000, 0x0, &(0x7f0000003840)) 23:58:10 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) 23:58:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}}) [ 854.216770][ T4914] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 854.347012][ T17] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 854.461905][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 854.587127][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 854.595767][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 854.606259][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 854.653155][ T4914] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 854.701179][ T4914] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 854.727709][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 854.736440][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 854.777536][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 854.807034][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 854.826815][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 854.841634][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.865565][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 854.882822][ T4914] usb 5-1: SerialNumber: syz [ 854.893311][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 854.909971][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 854.923796][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 855.016957][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 855.026133][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 855.077912][ T17] usb 3-1: SerialNumber: syz [ 855.098098][T28217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 855.105515][T28217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 855.197600][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 855.203701][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 855.414419][T28217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 855.425817][T28217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 855.668358][ T17] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 855.727840][ T17] usb 3-1: USB disconnect, device number 71 [ 855.746978][ T17] usblp0: removed [ 856.050313][T28274] udc-core: couldn't find an available UDC or it's busy [ 856.062448][T28274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 856.236803][ T17] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 856.496866][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 856.627477][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 856.635867][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 856.645930][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 856.684325][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 856.699876][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 856.713077][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 856.728095][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 856.742396][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:58:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:13 executing program 0: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x480040, 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[{0x0}, {0x0, 0x0, 0x1000}], 0xa11000, &(0x7f00000006c0)={[{@acl='acl'}, {@max_inline={'max_inline', 0x3d, [0x36, 0x0]}}], [{@subj_type={'subj_type', 0x3d, '(}$^\xde\'#[\xb9]\x9f\'#(-'}}, {@euid_lt={'euid<'}}, {@smackfsdef={'smackfsdef'}}, {@fsname={'fsname', 0x3d, '/dev/bsg\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@obj_type={'obj_type', 0x3d, '/dev/bsg\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 23:58:13 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 23:58:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:13 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x200034d}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 856.837531][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 856.847914][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 856.873684][ T17] usb 3-1: SerialNumber: syz [ 856.916893][ T17] usb 3-1: can't set config #5, error -71 [ 856.943413][ T17] usb 3-1: USB disconnect, device number 72 [ 856.986028][ T34] audit: type=1800 audit(1607299093.141:137): pid=28287 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16274 res=0 errno=0 23:58:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff0500"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) [ 857.097572][ T4914] usb 5-1: USB disconnect, device number 107 23:58:13 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x9, 0x1800}, {0x3, 0x1000}], 0x2, 0x0) [ 857.290688][T28299] overlayfs: filesystem on './bus' not supported as upperdir 23:58:13 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 23:58:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) 23:58:13 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 857.527092][ T17] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 857.607050][ T4914] usb 5-1: new high-speed USB device number 108 using dummy_hcd 23:58:13 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) [ 857.737092][ T17] usb 3-1: device descriptor read/64, error 18 23:58:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 857.808719][T28323] overlayfs: failed to resolve './file0': -2 [ 857.847088][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 857.977607][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 857.986213][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 858.006775][ T17] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 858.016385][ T4914] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 858.040808][ T4914] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 858.137336][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 858.146398][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 858.197083][ T17] usb 3-1: device descriptor read/64, error 18 [ 858.208241][ T4914] usb 5-1: SerialNumber: syz [ 858.317211][ T17] usb usb3-port1: attempt power cycle [ 859.046904][ T17] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 859.227568][ T17] usb 3-1: device descriptor read/8, error -61 [ 859.385660][T28344] udc-core: couldn't find an available UDC or it's busy [ 859.394234][T28344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 859.506973][ T17] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 859.696964][ T17] usb 3-1: device descriptor read/8, error -61 [ 859.821095][ T17] usb usb3-port1: unable to enumerate USB device 23:58:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 23:58:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x400400, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:58:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 23:58:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 860.280759][T28351] overlayfs: failed to resolve './file0': -2 23:58:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff0500"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 860.437322][ T17] usb 5-1: USB disconnect, device number 108 [ 860.586839][T12978] usb 3-1: new high-speed USB device number 77 using dummy_hcd 23:58:16 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x6, 0x0, 0x0) [ 860.786838][T12978] usb 3-1: device descriptor read/64, error 18 23:58:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:17 executing program 0: pipe2$9p(&(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000002a40)={0x28, 0x7, 0x0, {0x1f, '/proc/thread-self/attr/current\x00'}}, 0x28) write$9p(r0, &(0x7f0000005d80)="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", 0x1000) 23:58:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x400400, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 860.974647][ T17] usb 5-1: new high-speed USB device number 109 using dummy_hcd 23:58:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000680)=""/136, 0x26, 0x88, 0x1}, 0x20) 23:58:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000399fa1084f17316ae2ca010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 861.056897][T12978] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 861.226890][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 861.267090][T12978] usb 3-1: device descriptor read/64, error 18 [ 861.351371][ T17] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 861.365628][ T17] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 861.387933][T12978] usb usb3-port1: attempt power cycle [ 861.413750][ T17] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 861.416858][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 861.461563][ T17] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 861.567557][ T17] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 861.584893][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 861.614696][ T17] usb 5-1: SerialNumber: syz [ 861.696772][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 861.977597][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=ca.e2 [ 861.991632][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.003196][ T7] usb 2-1: Product: syz [ 862.011222][ T7] usb 2-1: Manufacturer: syz [ 862.016458][ T7] usb 2-1: SerialNumber: syz [ 862.025969][ T7] usb 2-1: config 0 descriptor?? [ 862.070839][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 862.096935][T12978] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 862.277761][T12978] usb 3-1: device descriptor read/8, error -61 [ 862.546873][T12978] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 862.716963][T12978] usb 3-1: device descriptor read/8, error -61 [ 862.778408][T28418] udc-core: couldn't find an available UDC or it's busy [ 862.785734][T28418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 862.838005][T12978] usb usb3-port1: unable to enumerate USB device 23:58:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:19 executing program 0: socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c74396c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80677eeba68562eaeae2bcd87cef90000005e69aa79e603c82caa501891595c44aa4b09d2f7b072f07707819ce25f6127a536c2356996ff278b40a75342e8853239389425c67455"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX], 0x32600) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 23:58:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 863.157979][ T7] gspca_stk1135: reg_w 0x7 err -71 [ 863.164146][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.205434][ T7] gspca_stk1135: Sensor write failed [ 863.233754][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.270183][ T7] gspca_stk1135: Sensor write failed [ 863.285247][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.311056][ T7] gspca_stk1135: Sensor read failed [ 863.329384][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.346520][ T7] gspca_stk1135: Sensor read failed [ 863.364778][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 863.386644][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.410880][ T7] gspca_stk1135: Sensor read failed [ 863.431802][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.456342][ T7] gspca_stk1135: Sensor read failed [ 863.479153][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.500896][ T7] gspca_stk1135: Sensor write failed [ 863.518274][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 863.536239][ T7] gspca_stk1135: Sensor write failed [ 863.557036][ T7] stk1135: probe of 2-1:0.0 failed with error -71 [ 863.565037][ T7] usb 2-1: USB disconnect, device number 4 23:58:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x400400, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:58:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:58:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 863.810181][ T17] usb 5-1: USB disconnect, device number 109 [ 863.932477][ T9859] usb 3-1: new high-speed USB device number 81 using dummy_hcd 23:58:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 864.026764][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd 23:58:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:58:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) [ 864.166780][ T9859] usb 3-1: device descriptor read/64, error 18 [ 864.296759][ T17] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 864.306832][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 864.436983][ T9859] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 864.576895][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 864.588351][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=ca.e2 [ 864.606874][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.615316][ T7] usb 2-1: Product: syz 23:58:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000399fa1084f17316ae2ca010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 864.632682][ T7] usb 2-1: Manufacturer: syz [ 864.641056][ T9859] usb 3-1: device descriptor read/64, error 18 [ 864.654139][ T7] usb 2-1: SerialNumber: syz [ 864.673574][ T7] usb 2-1: config 0 descriptor?? [ 864.706809][ T17] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 864.706827][ T7] usb 2-1: can't set config #0, error -71 [ 864.715665][ T17] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 864.766976][ T9859] usb usb3-port1: attempt power cycle [ 864.783016][ T7] usb 2-1: USB disconnect, device number 5 [ 864.793199][ T17] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 864.824411][ T17] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 864.860549][ T17] usb 5-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 864.890673][ T17] usb 5-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 864.989250][ T17] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 865.036867][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 865.062015][ T17] usb 5-1: SerialNumber: syz [ 865.139437][ T17] hub 5-1:5.0: bad descriptor, ignoring hub [ 865.145480][ T17] hub: probe of 5-1:5.0 failed with error -5 [ 865.157240][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 865.406796][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 865.476934][ T9859] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 865.648080][ T9859] usb 3-1: device descriptor read/8, error -61 [ 865.687499][ T7] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=ca.e2 [ 865.698479][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.706483][ T7] usb 2-1: Product: syz [ 865.717496][ T7] usb 2-1: Manufacturer: syz [ 865.722512][ T7] usb 2-1: SerialNumber: syz [ 865.750427][ T7] usb 2-1: config 0 descriptor?? [ 865.788406][ T7] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 865.916816][ T9859] usb 3-1: new high-speed USB device number 84 using dummy_hcd 23:58:22 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 866.087127][ T9859] usb 3-1: device descriptor read/8, error -61 [ 866.206998][ T9859] usb usb3-port1: unable to enumerate USB device [ 866.259533][T28499] udc-core: couldn't find an available UDC or it's busy [ 866.266995][T28499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 866.566909][ T9859] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 866.816856][ T9859] usb 3-1: Using ep0 maxpacket: 8 [ 866.936906][ T9859] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 866.945975][ T9859] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 866.956260][ T9859] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 866.965992][ T9859] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 866.983334][ T9859] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 866.998576][ T9859] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 867.013992][ T9859] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 867.028746][ T9859] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 867.117457][ T9859] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 867.126522][ T9859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 867.148349][ T9859] usb 3-1: SerialNumber: syz [ 867.168119][T28507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 867.175860][T28507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 867.227627][ T9859] hub 3-1:5.0: bad descriptor, ignoring hub [ 867.233784][ T9859] hub: probe of 3-1:5.0 failed with error -5 23:58:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x400400, 0x0) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:58:23 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_open_procfs(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) pipe(0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:58:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) [ 867.435236][T28507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 867.462408][T28507] raw-gadget gadget: fail, usb_ep_enable returned -22 23:58:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000840)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, &(0x7f0000000000)={r1}) 23:58:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, &(0x7f0000000340)) 23:58:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) [ 867.607319][T12978] usb 5-1: reset high-speed USB device number 110 using dummy_hcd [ 867.739998][ T9859] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 867.856910][T12978] usb 5-1: Using ep0 maxpacket: 8 [ 868.057013][ T9789] usb 3-1: USB disconnect, device number 85 [ 868.071703][ T9789] usblp0: removed [ 868.406846][ T9789] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 868.646717][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 868.796951][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 868.805474][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 868.836698][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 868.856726][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 868.856906][ T7] gspca_stk1135: reg_w 0x351 err -71 [ 868.874885][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 868.887465][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 868.898768][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 868.904864][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 868.920176][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 868.920379][ T7] gspca_stk1135: Sensor write failed [ 868.944848][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 868.951370][ T7] gspca_stk1135: Sensor write failed [ 868.963467][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 868.971130][ T7] gspca_stk1135: Sensor read failed [ 868.976547][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 868.990292][ T7] gspca_stk1135: Sensor read failed [ 868.995513][ T7] gspca_stk1135: Detected sensor type unknown (0x0) [ 869.014084][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 869.023521][ T7] gspca_stk1135: Sensor read failed [ 869.033554][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 869.037128][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 869.041603][ T7] gspca_stk1135: Sensor read failed [ 869.057649][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 869.070387][ T7] gspca_stk1135: Sensor write failed [ 869.073398][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 869.075805][ T7] gspca_stk1135: serial bus timeout: status=0x00 [ 869.098285][ T7] gspca_stk1135: Sensor write failed [ 869.103821][ T7] stk1135: probe of 2-1:0.0 failed with error -71 [ 869.106704][ T9789] usb 3-1: SerialNumber: syz [ 869.119524][ T7] usb 2-1: USB disconnect, device number 6 [ 869.122741][T28580] udc-core: couldn't find an available UDC or it's busy [ 869.157933][T28580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 869.179007][T28507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 869.237049][ T9789] usb 3-1: can't set config #5, error -71 [ 869.245957][ T9789] usb 3-1: USB disconnect, device number 86 23:58:25 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="17", 0x7ffff000}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='cgroup.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) 23:58:25 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 23:58:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 23:58:25 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x55}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x3]}, 0x47}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) getpid() write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) socketpair(0x0, 0x800, 0xfffffffe, 0x0) [ 869.686971][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd 23:58:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:26 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="19", 0x1}, {&(0x7f0000000100)='[', 0x1}, {&(0x7f0000000200)="91", 0x1}], 0x3}, 0x0) recvmsg(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f0000009840)=""/3, 0x3}, {&(0x7f0000009880)=""/255, 0xff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f000000be40)=""/220, 0xdc}, 0x0) 23:58:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 23:58:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) [ 870.527159][ T4914] usb 5-1: USB disconnect, device number 110 23:58:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="19", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f0000009840)=""/3, 0x3}], 0x1}, 0x0) 23:58:26 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="17", 0x7ffff000}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='cgroup.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) 23:58:26 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 23:58:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x900}, 0x1c) 23:58:26 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2405, 0x807400) [ 870.776994][ T9789] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 870.926842][ T4914] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 871.053102][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 871.176735][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 871.207369][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 871.220994][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 871.248060][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 871.282026][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 871.297373][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 871.310222][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 871.348815][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 871.364485][ T4914] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 871.392885][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 871.409155][ T4914] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 871.433646][ T4914] usb 5-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 871.455277][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 871.484095][ T4914] usb 5-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 871.504162][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 871.637601][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 871.647716][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 871.663674][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 871.682062][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 871.746760][ T9789] usb 3-1: SerialNumber: syz [ 871.759485][ T4914] usb 5-1: SerialNumber: syz [ 871.794126][T28633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 871.807935][T28633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 871.827593][ T4914] hub 5-1:5.0: bad descriptor, ignoring hub [ 871.833779][ T4914] hub: probe of 5-1:5.0 failed with error -5 [ 871.867766][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 871.874201][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 872.071101][T28633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 872.099086][T28633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 872.350880][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 872.987309][T28633] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 872.998279][T28694] udc-core: couldn't find an available UDC or it's busy [ 873.005854][T28694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 873.226781][T28633] usb 3-1: Using ep0 maxpacket: 8 [ 873.368859][T28690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 873.376548][T28690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 873.446691][ C0] usblp0: nonzero read bulk status received: -71 [ 873.611911][ T4914] usb 3-1: USB disconnect, device number 87 [ 873.630993][ T4914] usblp0: removed 23:58:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="19", 0x1}, {&(0x7f0000000100)='[', 0x1}, {&(0x7f0000000200)="91", 0x1}], 0x3}, 0x0) recvmsg(r0, &(0x7f000000bf40)={0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f0000009840)=""/3, 0x3}, {&(0x7f0000009880)=""/255, 0xff}], 0x2, &(0x7f000000be40)=""/220, 0xdc}, 0x0) 23:58:30 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ff0000/0xc000)=nil, 0xc000) 23:58:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x900}, 0x1c) 23:58:30 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 23:58:30 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:30 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2}, 0xc) munmap(&(0x7f0000007000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) [ 874.557003][ T9789] usb 5-1: USB disconnect, device number 111 23:58:30 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000840)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a0, &(0x7f0000000680)) 23:58:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000000019386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23:58:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x900}, 0x1c) 23:58:30 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:58:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x1) [ 874.796738][ T4914] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 874.936726][ T9789] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 875.046853][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 875.167511][ T4914] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 875.175991][ T4914] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 875.193342][ T9789] usb 5-1: Using ep0 maxpacket: 8 [ 875.226822][ T4914] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 875.236374][ T4914] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 875.261495][ T4914] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 875.276453][ T4914] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 875.327504][ T9789] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 875.336276][ T9789] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 875.358707][ T4914] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 875.387077][ T9789] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 875.405979][ T4914] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 875.438509][ T9789] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 875.486884][ T9789] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 875.507945][ T9789] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 875.538500][ T9789] usb 5-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 875.567450][ T4914] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 875.598259][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 875.620679][ T4914] usb 3-1: SerialNumber: syz [ 875.648372][T28722] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 875.655809][T28722] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 875.700495][ T9789] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 875.710878][ T4914] hub 3-1:5.0: bad descriptor, ignoring hub [ 875.724993][ T4914] hub: probe of 3-1:5.0 failed with error -5 [ 875.741795][ T9789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 875.772939][ T9789] usb 5-1: SerialNumber: syz [ 875.808204][T28727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 875.827487][ T9789] hub 5-1:5.0: bad descriptor, ignoring hub [ 875.833813][ T9789] hub: probe of 5-1:5.0 failed with error -5 [ 875.925118][T28722] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 875.941350][T28722] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 876.171157][ T4914] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 876.981510][T28785] udc-core: couldn't find an available UDC or it's busy [ 876.999186][T28785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 877.167279][T28722] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 877.416752][T28722] usb 3-1: Using ep0 maxpacket: 8 [ 877.578994][T28779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.586511][T28779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.646753][ C1] usblp0: nonzero read bulk status received: -71 [ 877.698056][ T4914] usb 3-1: USB disconnect, device number 88 [ 877.719635][ T4914] usblp0: removed 23:58:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x900}, 0x1c) 23:58:34 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x1, 0x0) 23:58:34 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) 23:58:34 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 23:58:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:34 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x0, 0x13c}, 0x10) 23:58:34 executing program 1: r0 = socket$inet(0x2, 0x8001, 0x0) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000180)=@in, 0xc, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, &(0x7f0000000240)=""/213, 0xd5}, 0x0) 23:58:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe2a}}, 0x0) [ 878.756903][ T9859] usb 5-1: USB disconnect, device number 112 23:58:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 23:58:35 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 23:58:35 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7e, 0x0) ioctl$TCGETX(r0, 0x5451, 0x0) [ 879.056718][ T9859] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 879.186764][ T7] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 879.300548][ T9859] usb 5-1: Using ep0 maxpacket: 8 [ 879.380510][ T7] usb 3-1: device descriptor read/64, error 18 [ 879.417950][ T9859] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 879.452484][ T9859] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 879.472721][ T9859] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 879.516857][ T9859] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 879.526111][ T9859] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 879.594417][ T9859] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 879.632754][ T9859] usb 5-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 879.696760][ T7] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 879.768048][ T9859] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 879.804520][ T9859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.820156][ T9859] usb 5-1: SerialNumber: syz [ 879.848007][T28814] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.868170][ T9859] hub 5-1:5.0: bad descriptor, ignoring hub [ 879.874342][ T9859] hub: probe of 5-1:5.0 failed with error -5 [ 879.896752][ T7] usb 3-1: device descriptor read/64, error 18 [ 880.016954][ T7] usb usb3-port1: attempt power cycle [ 880.726824][ T7] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 880.897353][ T7] usb 3-1: device descriptor read/8, error -61 [ 880.987350][T28855] udc-core: couldn't find an available UDC or it's busy [ 880.995134][T28855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 881.166835][ T7] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 881.337481][ T7] usb 3-1: device descriptor read/8, error -61 [ 881.457014][ T7] usb usb3-port1: unable to enumerate USB device 23:58:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 23:58:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:58:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7}, 0x7) r2 = accept(r0, 0x0, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000300)) 23:58:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x540a, 0x0) 23:58:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 23:58:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 882.147124][ T4914] usb 5-1: USB disconnect, device number 113 23:58:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 23:58:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002300)=[{0x0, 0x0, 0x0}], 0x49249249249251f, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:58:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 23:58:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) write$P9_RAUTH(r1, 0x0, 0x0) 23:58:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x5409, 0x0) 23:58:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 882.546828][ T4914] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 882.596823][ T9859] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 882.786807][ T9859] usb 3-1: device descriptor read/64, error 18 [ 882.786838][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 882.927428][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 882.936438][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 882.956747][ T4914] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 882.992387][ T4914] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 883.005368][ T4914] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 883.018803][ T4914] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 883.033843][ T4914] usb 5-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 883.056791][ T9859] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 883.126818][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 883.136001][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 883.152586][ T4914] usb 5-1: SerialNumber: syz [ 883.188090][T28874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 883.207469][ T4914] hub 5-1:5.0: bad descriptor, ignoring hub [ 883.219497][ T4914] hub: probe of 5-1:5.0 failed with error -5 [ 883.256736][ T9859] usb 3-1: device descriptor read/64, error 18 [ 883.380744][ T9859] usb usb3-port1: attempt power cycle [ 884.096728][ T9859] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 884.277390][ T9859] usb 3-1: device descriptor read/8, error -61 [ 884.314930][T28920] udc-core: couldn't find an available UDC or it's busy [ 884.323263][T28920] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 884.546677][ T9859] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 884.717292][ T9859] usb 3-1: device descriptor read/8, error -61 [ 884.850409][ T9859] usb usb3-port1: unable to enumerate USB device 23:58:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000800) 23:58:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2e) r1 = syz_open_procfs(0x0, &(0x7f0000004400)='comm\x00') dup2(r0, r1) connect(r1, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80) 23:58:41 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x40, 0x0) 23:58:41 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:58:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x8c4) 23:58:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) [ 885.477590][ T9859] usb 5-1: USB disconnect, device number 114 23:58:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) 23:58:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 23:58:41 executing program 1: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) 23:58:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) [ 885.786832][ T9789] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 885.926677][ T9859] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 886.026698][ T9789] usb 5-1: Using ep0 maxpacket: 8 [ 886.116783][ T9859] usb 3-1: device descriptor read/64, error 18 [ 886.147441][ T9789] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 886.156092][ T9789] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 886.199032][ T9789] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 886.217985][ T9789] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 886.242522][ T9789] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 886.284839][ T9789] usb 5-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 886.303933][ T9789] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 886.386756][ T9859] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 886.406900][ T9789] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 886.416509][ T9789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 886.452894][ T9789] usb 5-1: SerialNumber: syz [ 886.508595][T28940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 886.573476][ T9789] hub 5-1:5.0: bad descriptor, ignoring hub [ 886.576823][ T9859] usb 3-1: device descriptor read/64, error 18 [ 886.587359][ T9789] hub: probe of 5-1:5.0 failed with error -5 [ 886.706782][ T9859] usb usb3-port1: attempt power cycle [ 887.416685][ T9859] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 887.598248][ T9859] usb 3-1: device descriptor read/8, error -61 [ 887.684146][T28979] udc-core: couldn't find an available UDC or it's busy [ 887.692298][T28979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 887.866687][ T9859] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 888.037679][ T9859] usb 3-1: device descriptor read/8, error -61 [ 888.156907][ T9859] usb usb3-port1: unable to enumerate USB device 23:58:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:44 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 23:58:44 executing program 3: r0 = socket(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:58:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 23:58:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r0, r1) write$P9_RLCREATE(r1, 0x0, 0x0) 23:58:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20004050) 23:58:45 executing program 3: r0 = creat(&(0x7f0000000740)='./file0\x00', 0x0) write$char_raw(r0, 0xfffffffffffffffd, 0x0) 23:58:45 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000) 23:58:45 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 888.997283][ T4914] usb 5-1: reset high-speed USB device number 115 using dummy_hcd 23:58:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x48850) 23:58:45 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup2(r1, r0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r3) dup(r2) ioctl$KDFONTOP_SET(r3, 0x4b60, 0x0) [ 889.076680][ T9859] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 889.246761][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 889.276842][ T9859] usb 3-1: device descriptor read/64, error 18 [ 889.388668][T28996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.546720][ T9859] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 889.746675][ T9859] usb 3-1: device descriptor read/64, error 18 [ 889.866876][ T9859] usb usb3-port1: attempt power cycle [ 890.549094][T29035] udc-core: couldn't find an available UDC or it's busy [ 890.559816][T29035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 890.577747][ T9859] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 890.750483][ T9859] usb 3-1: device descriptor read/8, error -61 [ 891.031331][ T9859] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 891.207231][ T9859] usb 3-1: device descriptor read/8, error -61 [ 891.326813][ T9859] usb usb3-port1: unable to enumerate USB device 23:58:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:48 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x5450, 0x0) 23:58:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 23:58:48 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r0, 0x5450, 0x719000) 23:58:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5409, 0x0) 23:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000009280)={0x0, 0x0, &(0x7f0000009240)={0x0}}, 0x0) 23:58:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x1262, 0x0) [ 891.926857][ T9859] usb 5-1: USB disconnect, device number 115 23:58:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000080)) 23:58:48 executing program 5: r0 = socket$nl_generic(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x88, 0x66, 0x0, &(0x7f0000000000)) 23:58:48 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 23:58:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24040080) [ 892.229723][ T9859] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 892.249964][ T9789] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 892.459810][ T9789] usb 3-1: device descriptor read/64, error 18 [ 892.486732][ T9859] usb 5-1: Using ep0 maxpacket: 8 [ 892.607322][ T9859] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 892.619298][ T9859] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 892.646106][ T9859] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 892.671377][ T9859] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 892.711534][ T9859] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.736721][ T9789] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 892.747269][ T9859] usb 5-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 892.778712][ T9859] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.887361][ T9859] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 892.901458][ T9859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 892.927890][ T9859] usb 5-1: SerialNumber: syz [ 892.951529][ T9789] usb 3-1: device descriptor read/64, error 18 [ 892.957961][T29051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.982179][ T9859] hub 5-1:5.0: bad descriptor, ignoring hub [ 892.992118][ T9859] hub: probe of 5-1:5.0 failed with error -5 [ 893.087628][ T9789] usb usb3-port1: attempt power cycle [ 893.826768][ T9789] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 894.006803][ T9789] usb 3-1: device descriptor read/8, error -61 [ 894.109479][T29094] udc-core: couldn't find an available UDC or it's busy [ 894.117048][T29094] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 894.296655][ T9789] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 894.476702][ T9789] usb 3-1: device descriptor read/8, error -61 [ 894.598594][ T9789] usb usb3-port1: unable to enumerate USB device 23:58:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}}, 0x4000) 23:58:51 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x41) 23:58:51 executing program 3: r0 = inotify_init1(0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:58:51 executing program 0: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) 23:58:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:51 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b5b2e75c8aafd83) 23:58:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) tkill(r2, 0x1000000000016) 23:58:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETX(r0, 0x5450, 0x0) 23:58:51 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6, &(0x7f00000000c0)=0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x1, 0x131ac1) fcntl$setsig(r0, 0xa, 0x0) 23:58:51 executing program 1: r0 = socket(0x11, 0xa, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 23:58:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGEFFECTS(r0, 0x5452, &(0x7f0000000080)=""/70) [ 895.407166][ T7] usb 5-1: reset high-speed USB device number 116 using dummy_hcd [ 895.494261][ T9859] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 895.646664][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 895.707269][ T9859] usb 3-1: device descriptor read/64, error 18 [ 895.727312][ T7] usb 5-1: device firmware changed [ 895.732733][ T7] usb 5-1: USB disconnect, device number 116 [ 895.981803][ T9859] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 896.096809][ T7] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 896.176809][ T9859] usb 3-1: device descriptor read/64, error 18 [ 896.307357][ T9859] usb usb3-port1: attempt power cycle [ 896.336683][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 896.467464][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 896.476048][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 896.495711][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 896.509922][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 896.533572][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 896.554012][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.574438][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.616701][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.707812][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 896.722003][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 896.744861][ T7] usb 5-1: SerialNumber: syz [ 896.778214][T29109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 896.797565][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 896.803877][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 897.007539][T29109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.027436][ T9859] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 897.197160][ T9859] usb 3-1: device descriptor read/8, error -61 [ 897.247965][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 897.466628][ T9859] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 897.637878][ T9859] usb 3-1: device descriptor read/8, error -61 [ 897.757012][ T9859] usb usb3-port1: unable to enumerate USB device [ 897.867368][T29109] usb 5-1: reset high-speed USB device number 117 using dummy_hcd [ 898.136764][T29109] usb 5-1: Using ep0 maxpacket: 8 [ 898.279006][T29163] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 898.637073][T12978] usb 5-1: USB disconnect, device number 117 [ 898.659725][T12978] usblp0: removed 23:58:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) dup2(r0, r1) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "9cc48d6b270f1200051c25c8994d98d94e0000000005ffffffe400"}) 23:58:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:58:55 executing program 1: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:58:55 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4044040) 23:58:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:55 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_RLOCK(r0, 0x0, 0x0) 23:58:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 23:58:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 23:58:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:58:55 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:58:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x49, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x5c) [ 899.366919][T12978] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 899.390734][ T4914] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 899.566657][T12978] usb 3-1: device descriptor read/64, error 18 [ 899.653355][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 899.787495][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 899.795926][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 899.806223][ T4914] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 899.816933][ T4914] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 899.828352][ T4914] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 899.836835][T12978] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 899.839105][ T4914] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.857123][ T4914] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.867899][ T4914] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 899.956769][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 899.966041][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 899.982523][ T4914] usb 5-1: SerialNumber: syz [ 900.026615][T12978] usb 3-1: device descriptor read/64, error 18 [ 900.027903][T29196] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.077528][ T4914] hub 5-1:5.0: bad descriptor, ignoring hub [ 900.083518][ T4914] hub: probe of 5-1:5.0 failed with error -5 [ 900.146793][T12978] usb usb3-port1: attempt power cycle [ 900.279764][T29196] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 900.540302][ T4914] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 118 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 900.856681][T12978] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 901.027388][T12978] usb 3-1: device descriptor read/8, error -61 [ 901.177057][T29196] usb 5-1: reset high-speed USB device number 118 using dummy_hcd [ 901.306684][T12978] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 901.426606][T29196] usb 5-1: Using ep0 maxpacket: 8 [ 901.477618][T12978] usb 3-1: device descriptor read/8, error -61 [ 901.569028][T29241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 901.596816][T12978] usb usb3-port1: unable to enumerate USB device [ 901.916785][ T9859] usb 5-1: USB disconnect, device number 118 [ 901.925070][ T9859] usblp0: removed 23:58:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x6, 0x0) dup3(r0, r1, 0x0) getpeername$unix(r1, 0x0, &(0x7f00000000c0)) 23:58:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 23:58:58 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5450, r0) 23:58:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x20040801) 23:58:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:58:58 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$unix(0x1, 0x1000000000000001, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 23:58:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x6c1) r2 = dup(r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 23:58:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004009) 23:58:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 23:58:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40008c0) 23:58:58 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0x5421, 0x748000) syncfs(r1) [ 902.706815][T10862] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 902.716689][ T4914] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 902.906732][T10862] usb 3-1: device descriptor read/64, error 18 [ 902.962814][ T4914] usb 5-1: Using ep0 maxpacket: 8 [ 903.086724][ T4914] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 903.095266][ T4914] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 903.113360][ T4914] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 903.127507][ T4914] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 903.168146][ T4914] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 903.193862][T10862] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 903.201697][ T4914] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.220498][ T4914] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 903.234960][ T4914] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 903.336783][ T4914] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 903.353563][ T4914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 903.370228][ T4914] usb 5-1: SerialNumber: syz [ 903.401675][T10862] usb 3-1: device descriptor read/64, error 18 [ 903.409534][T29280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.447510][ T4914] hub 5-1:5.0: bad descriptor, ignoring hub [ 903.453632][ T4914] hub: probe of 5-1:5.0 failed with error -5 [ 903.556766][T10862] usb usb3-port1: attempt power cycle [ 903.670613][T29280] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 903.920827][ T4914] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 904.276733][T10862] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 904.456908][T10862] usb 3-1: device descriptor read/8, error -61 [ 904.577365][T29280] usb 5-1: reset high-speed USB device number 119 using dummy_hcd [ 904.736716][T10862] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 904.816933][T29280] usb 5-1: Using ep0 maxpacket: 8 [ 904.926844][T10862] usb 3-1: device descriptor read/8, error -61 [ 904.958772][T29320] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 905.046798][T10862] usb usb3-port1: unable to enumerate USB device [ 905.336263][T10862] usb 5-1: USB disconnect, device number 119 [ 905.350748][T10862] usblp0: removed 23:59:01 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)) 23:59:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x0) 23:59:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:59:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5450, 0x0) 23:59:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00ffff00751401236131418500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, 0x0) 23:59:02 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x9) dup2(r2, r1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x18, &(0x7f0000000240), 0x4) 23:59:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100000000000940, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:59:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) 23:59:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:59:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x890b, &(0x7f0000000000)) 23:59:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 906.116773][T12978] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 906.147576][T10862] usb 5-1: new high-speed USB device number 120 using dummy_hcd 23:59:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 23:59:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000000)=0x80) dup2(r0, r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 906.316637][T12978] usb 3-1: device descriptor read/64, error 18 [ 906.396769][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 906.537383][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 906.546480][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 906.586087][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 906.586711][T12978] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 906.634439][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 906.681179][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.727556][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 906.742410][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 906.806640][T12978] usb 3-1: device descriptor read/64, error 18 [ 906.837307][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 906.846451][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 906.863141][T10862] usb 5-1: SerialNumber: syz [ 906.898069][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.913107][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.930616][T12978] usb usb3-port1: attempt power cycle [ 906.958308][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 906.964697][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 907.160805][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.172761][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.418805][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 907.468734][T10862] usb 5-1: USB disconnect, device number 120 [ 907.484246][T10862] usblp0: removed [ 907.656652][T12978] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 907.826774][T12978] usb 3-1: device descriptor read/8, error -61 [ 907.986633][T10862] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 908.096752][T12978] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 908.236764][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 908.266906][T12978] usb 3-1: device descriptor read/8, error -61 [ 908.356801][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 908.376610][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 908.385627][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 908.387039][T12978] usb usb3-port1: unable to enumerate USB device [ 908.408100][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 908.425655][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 908.443139][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 908.458179][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 908.547992][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 908.557814][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 908.566146][T10862] usb 5-1: SerialNumber: syz [ 908.598773][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.612040][T29355] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.637552][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 908.646383][T10862] hub: probe of 5-1:5.0 failed with error -5 23:59:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:59:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20044004) 23:59:05 executing program 1: r0 = creat(&(0x7f0000000740)='./file0\x00', 0x0) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, 0x0) 23:59:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80) dup2(r1, r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:59:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 908.852714][T10862] usblp: can't set desired altsetting 0 on interface 0 [ 908.930017][T10862] usb 5-1: USB disconnect, device number 121 23:59:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8953, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00'}) 23:59:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000580)) 23:59:05 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:59:05 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44010) 23:59:05 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 909.206616][T12978] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 909.386803][T10862] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 909.456752][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 909.576675][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.585246][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 909.626607][T12978] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 909.656687][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 909.657139][T12978] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 909.776807][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 909.780903][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 909.804404][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 909.811602][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 909.829853][T12978] usb 3-1: SerialNumber: syz [ 909.884987][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 909.926592][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 909.963276][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.979320][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 909.993661][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.086728][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 910.096212][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 910.112928][T10862] usb 5-1: SerialNumber: syz [ 910.148039][T29449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.155675][T29449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.197783][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 910.203991][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 910.408434][T29449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.416441][T29449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.691382][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 910.727153][T10862] usb 5-1: USB disconnect, device number 122 [ 910.738267][T10862] usblp0: removed [ 911.013778][T29503] udc-core: couldn't find an available UDC or it's busy [ 911.021893][T29503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 911.226782][T10862] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 911.476713][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 911.596760][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 911.605783][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 911.643323][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 911.661562][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 911.686639][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 911.701082][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 911.715456][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 911.826659][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 911.836155][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 911.858009][T10862] usb 5-1: SerialNumber: syz 23:59:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:08 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8810) 23:59:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x114740, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000100)='FROZEN\x00', 0x7) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0xfff9, @empty}, @phonet={0x23, 0xff, 0x7, 0x73}, @llc={0x1a, 0x2, 0x7f, 0x2, 0x1, 0x3f, @local}, 0x31f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='ip6gre0\x00', 0x7fff, 0x0, 0x100}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x33) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 23:59:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:59:08 executing program 5: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 911.899147][T29449] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.936802][T10862] usb 5-1: can't set config #5, error -71 [ 911.977202][T10862] usb 5-1: USB disconnect, device number 123 23:59:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 912.047346][ T4914] usb 3-1: USB disconnect, device number 125 23:59:08 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xfa+\x8ev\xab%-D\x14/\xe2\xf6\xf1[\x8a\xbc\x1f\xbc\x96R[\'\x03\xba\x1a\xee\x83\x9f\xe3\x90X\xac\x96\xb4\x13O;\xf2\xba\tl\x1fq\x9c\xa0\x1b\xfe\xc1\xbe\xe6\x92\xfdM\x059f\xf9+\xe8\xc0\xc9\xfe}g\x85IX\xde\xba\xca\xdb\x04q\xfe\x0esjI\xb1\x93\xfc\n\x00$4\xe1\x18@F\xf7\x8a/e\xdb:\x87\x0e\x1ev\xe4\\\xebU\x03\x81\xda\n\x1d~\xc4\xce\xda\xe9J\xa3\xa03\"\xed\fY\xb0J\xacr\xa2\x19\xcb\xcaz\xe54W\xe3\x81\xea\x85\xcdL]q3B\x00D\x9d\x81P\xb2\x92\xec\xe2m\x1a \v\xd9\x99\xd7:A\x84\x98\xa4\xbe\x16W\b\\2\xd789/T\x16]\xbd\xd7\x7fH\rw!D\"(\xc1q\xf6O\xd3', 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:59:08 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:08 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a1, 0x0) 23:59:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstatfs(r0, &(0x7f0000000180)=""/121) 23:59:08 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4040084) 23:59:08 executing program 3: r0 = memfd_create(&(0x7f0000000380)='batadv0\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001400)={0x0, "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"}) [ 912.486808][T10862] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 912.636724][ T4914] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 912.726648][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 912.853257][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 912.886623][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 912.886701][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 912.886720][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 912.956900][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 912.979034][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 913.007515][ T4914] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 913.015912][ T4914] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 913.032778][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 913.066584][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 913.083765][ T4914] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 913.110629][ T4914] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 913.213060][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 913.222986][ T4914] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 913.238912][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.258515][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.267517][ T4914] usb 3-1: SerialNumber: syz [ 913.272242][T10862] usb 5-1: SerialNumber: syz [ 913.319401][T29529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.345018][T29529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.387625][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 913.401022][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 913.595301][T29529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.611639][T29529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 913.865727][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 913.962542][T10862] usb 5-1: USB disconnect, device number 124 [ 913.988470][T10862] usblp0: removed [ 914.416589][T10862] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 914.426698][T29590] udc-core: couldn't find an available UDC or it's busy [ 914.433843][T29590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 914.696577][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 914.827376][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 914.835952][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 914.870503][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 914.884227][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 914.900912][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 914.915615][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 914.930637][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:59:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4048000) 23:59:11 executing program 5: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) 23:59:11 executing program 3: r0 = memfd_create(&(0x7f0000000380)='batadv0\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001400)={0x0, "81fd6ae1e0d735817e9f507f89aed757f8f8c7a7f400ef834f903e0268737d835d3e41836a28d05b4b8f72d7d39011d5e6d460758d450d8a3718fb724d2fe1f726caa5b5cdc502893ca278e53c1fbc02534d6a4d7d5797b5585755ae5334b15bc56bf8bad7fe974f6d9a0c1407a7e035a74d198d75dd17e6382a7d9f97b831c9608e3f8a1f55bc7ed58018f3888d66f6a75363283cad65c9c97de7adae669b1fb94daad69fd47720b408b369b61f97ac9c4cad92c919948984927fbc77cd34bffc1c91b4cd06c2fd2414df58519d61aa2122163078303666e96ddf3b65e74d444c879a0e12be29b11cc864f3241cd4849c1005754603df34e86500c4b64d00aedddd40e5941954234d7a468a0bdc326196faed407d20d2498444917879d06dfd0616e57080fde6d53feb788e3a55e5c13688b72bd70c7dd300ca48f406edcb7ef9ff06ce61617d01181a867c0ba55b1c9a360a172d08a5974719c193016cac9e9e3f8bad0695f33acd8baf49275b4922e023c0a91be071dc1fd05ac728230633cb7d01e257cd984a7461a64a602f52e529ab6d5c3425b8aeaa4af23fa2bb9f914984056f453255ea7629e5096057b4370cf1d9765802642f247efdb9878591d13df856bf0b9d48ce594c24ef17c100f2db98beaa7790c62f1ea30a2fc934350264058b9fdd651795e5c99fad697e8aa0cf93e2b91c678a5d633ae24b350e0c29"}) 23:59:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x4c03, &(0x7f0000000100)) [ 915.027258][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 915.036918][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 915.064457][T10862] usb 5-1: SerialNumber: syz [ 915.106781][T10862] usb 5-1: can't set config #5, error -71 [ 915.137651][T10862] usb 5-1: USB disconnect, device number 125 23:59:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 23:59:11 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 23:59:11 executing program 3: r0 = memfd_create(&(0x7f0000000380)='batadv0\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001400)={0x0, "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"}) 23:59:11 executing program 0: r0 = epoll_create1(0x0) close(r0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) readv(r0, 0x0, 0x0) [ 915.467150][ T9789] usb 3-1: USB disconnect, device number 126 23:59:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 23:59:11 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 915.616618][T10862] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 915.857335][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 915.986683][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 915.995429][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 916.013777][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 916.046608][ T9789] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 916.066634][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 916.083857][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 916.099538][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 916.113914][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 916.206738][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 916.217035][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.226176][T10862] usb 5-1: SerialNumber: syz [ 916.267977][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.275324][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.297535][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 916.305178][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 916.311616][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 916.476818][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 916.486369][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 916.504577][ T9789] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 916.507724][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.522109][ T9789] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 916.543338][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.646829][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 916.656203][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.665953][ T9789] usb 3-1: SerialNumber: syz [ 916.780003][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 916.858193][T10862] usb 5-1: USB disconnect, device number 126 [ 916.882598][T10862] usblp0: removed [ 917.386625][T10862] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 917.646582][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 917.777321][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 917.786068][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 917.803970][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 917.818000][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 917.833840][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 917.848331][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 917.864937][T29665] udc-core: couldn't find an available UDC or it's busy [ 917.872261][T29665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 917.887555][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.997252][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 918.006708][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 918.014836][T10862] usb 5-1: SerialNumber: syz [ 918.068883][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.076115][T29608] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.107444][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 918.113509][T10862] hub: probe of 5-1:5.0 failed with error -5 23:59:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:14 executing program 3: r0 = memfd_create(&(0x7f0000000380)='batadv0\x00', 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001400)={0x0, "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"}) 23:59:14 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x15, 0x1}, 0x14}}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:59:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001080)={&(0x7f0000000080), 0xc, &(0x7f0000001040)={0x0, 0x784}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 23:59:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 918.206970][T10862] usblp: can't set desired altsetting 0 on interface 0 [ 918.277165][T10862] usb 5-1: USB disconnect, device number 127 [ 918.746742][T10862] usb 5-1: new high-speed USB device number 2 using dummy_hcd 23:59:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff05007498090400001207010300090501"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) 23:59:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20000010) [ 918.917154][T12978] usb 3-1: USB disconnect, device number 127 [ 918.996796][T10862] usb 5-1: Using ep0 maxpacket: 8 23:59:15 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') fstat(r0, &(0x7f00000001c0)) 23:59:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x9, &(0x7f0000000000)={@in={{0x2, 0x0, @empty}}}, 0xd8) [ 919.126650][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.143984][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 919.192983][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 919.224886][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.276652][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.291952][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 919.307352][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 919.406801][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 919.415927][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.438444][T12978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 919.443709][T10862] usb 5-1: SerialNumber: syz [ 919.491793][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.511021][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.547465][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 919.553626][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 919.676544][T12978] usb 3-1: Using ep0 maxpacket: 8 [ 919.754766][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.768373][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.796760][T12978] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 919.806682][T12978] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 919.815475][T12978] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 919.838008][T12978] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 919.852201][T12978] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 919.866301][T12978] usb 3-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 919.957230][T12978] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 919.966910][T12978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.975093][T12978] usb 3-1: SerialNumber: syz [ 920.027656][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 920.037398][T12978] hub 3-1:5.0: bad descriptor, ignoring hub [ 920.046036][T12978] hub: probe of 3-1:5.0 failed with error -5 [ 920.117271][T10862] usb 5-1: USB disconnect, device number 2 [ 920.162093][T10862] usblp0: removed [ 920.586763][T10862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 920.826600][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 920.967346][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 920.976035][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 921.010861][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 921.046909][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 921.062951][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 921.078213][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 921.092681][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 921.137443][T29755] udc-core: couldn't find an available UDC or it's busy [ 921.144614][T29755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 921.207659][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 921.217430][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 921.225567][T10862] usb 5-1: SerialNumber: syz 23:59:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}, 0x20000068) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x240040c5) 23:59:17 executing program 3: r0 = eventfd(0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) 23:59:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454ca, 0x400000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:59:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:17 executing program 1: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x2308351a93ae83c5) [ 921.258739][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.266083][T29687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.316902][T10862] usb 5-1: can't set config #5, error -71 [ 921.352081][T10862] usb 5-1: USB disconnect, device number 3 [ 921.857211][T10862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 922.116584][T10862] usb 5-1: Using ep0 maxpacket: 8 23:59:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff05007498090400001207010300090501"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket(0x11, 0x3, 0x0) tkill(r2, 0x1000000000016) 23:59:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 23:59:18 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40043, 0x0) 23:59:18 executing program 5: r0 = epoll_create(0x7ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:59:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) 23:59:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) [ 922.247223][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 922.272697][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 23:59:18 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7}, 0xfffffebd) write$P9_RRENAMEAT(r0, &(0x7f0000000180)={0x7}, 0x7) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r1 = gettid() socket$inet6_udplite(0xa, 0x2, 0x88) tkill(r1, 0x1000000000016) 23:59:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) dup2(r0, r1) ioctl$TIOCSLCKTRMIOS(r1, 0x541b, &(0x7f0000000000)) [ 922.350537][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 922.410761][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 23:59:18 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) [ 922.457080][ T9859] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 922.473845][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 922.514765][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 922.544912][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 922.647282][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 922.660312][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 922.677813][T10862] usb 5-1: SerialNumber: syz [ 922.716675][ T9859] usb 3-1: Using ep0 maxpacket: 8 [ 922.722518][T29775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.744127][T29775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.780258][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 922.790641][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 922.983009][T29775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.994276][T29775] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 923.267744][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 923.317262][T10862] usb 5-1: USB disconnect, device number 4 [ 923.336345][T10862] usblp0: removed [ 923.826716][T10862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 923.978195][T29853] udc-core: couldn't find an available UDC or it's busy [ 923.985277][T29853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 924.096671][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 924.217284][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 924.226016][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 924.242980][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 924.259954][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 924.275412][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 924.289787][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 924.303005][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 924.406854][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 924.416127][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 924.433836][T10862] usb 5-1: SerialNumber: syz 23:59:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:20 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 924.516790][T10862] usb 5-1: can't set config #5, error -71 [ 924.531899][T10862] usb 5-1: USB disconnect, device number 5 [ 924.976710][T10862] usb 5-1: new high-speed USB device number 6 using dummy_hcd 23:59:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2500, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000000)={'wg0\x00'}) 23:59:21 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 23:59:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x8884, &(0x7f0000000240)=@in={0x2, 0x4e21, @loopback}, 0x80) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:59:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff05007498090400001207010300090501"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:21 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$char_raw(r0, 0x0, 0x4600) [ 925.216598][T10862] usb 5-1: Using ep0 maxpacket: 8 23:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000804) [ 925.337069][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 925.355787][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 23:59:21 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) read$char_usb(r0, 0x0, 0x0) 23:59:21 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}}, 0x20}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x15) 23:59:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r0) r2 = gettid() socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) [ 925.395815][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 23:59:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x5411, &(0x7f0000000080)={'gretap0\x00', 0x0}) [ 925.480373][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 925.533880][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 925.587341][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 925.635116][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 925.781185][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 925.812236][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 925.844362][T10862] usb 5-1: SerialNumber: syz [ 925.860645][ T9789] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 925.917965][T29865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 925.925376][T29865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 925.980381][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 926.006586][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 926.109697][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 926.179927][T29865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.214796][T29865] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 926.468987][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 926.517418][T10862] usb 5-1: USB disconnect, device number 6 [ 926.528261][T10862] usblp0: removed [ 927.066585][T10862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 927.326618][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 927.392031][T29932] udc-core: couldn't find an available UDC or it's busy [ 927.405034][T29932] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 927.457334][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 927.465728][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 927.489535][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 927.503595][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 927.519654][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 927.534633][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 927.549418][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:59:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x29, 0x12, 0x0, 0x7) 23:59:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) tkill(r1, 0x1000000000016) 23:59:23 executing program 5: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 23:59:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) [ 927.647305][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 927.671469][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.720558][T10862] usb 5-1: SerialNumber: syz [ 927.776753][T10862] usb 5-1: can't set config #5, error -71 [ 927.801374][T10862] usb 5-1: USB disconnect, device number 7 [ 928.222277][T10862] usb 5-1: new high-speed USB device number 8 using dummy_hcd 23:59:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010005, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$P9_RWSTAT(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket(0xa, 0x3, 0x40) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) tkill(r1, 0x1000000000016) 23:59:24 executing program 5: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x4, 0x7) 23:59:24 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket(0x10, 0x2, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 23:59:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) [ 928.486550][T10862] usb 5-1: Using ep0 maxpacket: 8 23:59:24 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) [ 928.546856][ T7] usb 3-1: USB disconnect, device number 2 23:59:24 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) [ 928.610921][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 928.634436][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 928.688698][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 928.721105][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 928.721120][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 928.721135][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 928.721159][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 928.817273][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 928.817291][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 928.817302][T10862] usb 5-1: SerialNumber: syz [ 928.847904][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.848328][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 928.867508][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 928.867573][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 928.926698][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 929.071884][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.093699][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.166623][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 929.296633][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 929.305652][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 929.328821][ T7] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 929.343781][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 929.368020][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 929.376640][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 929.432571][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 929.432616][T10862] usb 5-1: USB disconnect, device number 8 [ 929.461263][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 929.480694][T10862] usblp0: removed [ 929.576657][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 929.592817][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.626655][ T7] usb 3-1: SerialNumber: syz [ 929.657929][T29971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.678453][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 929.684457][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 929.987395][T10862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 930.236552][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 930.367256][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 930.375805][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 930.393345][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 930.407284][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 930.422724][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 930.437490][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 930.451688][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 930.547277][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 930.558014][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 930.566131][T10862] usb 5-1: SerialNumber: syz [ 930.635081][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 930.655133][T29945] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 930.677614][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 930.683821][T10862] hub: probe of 5-1:5.0 failed with error -5 23:59:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000002940)=0x5e) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}}, 0x0) 23:59:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) 23:59:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) tkill(r1, 0x1000000000016) 23:59:26 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) [ 930.776750][T10862] usblp: can't set desired altsetting 0 on interface 0 [ 930.800633][T30019] udc-core: couldn't find an available UDC or it's busy [ 930.824959][T30019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 930.841281][T10862] usb 5-1: USB disconnect, device number 9 [ 931.286615][T10862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 931.556742][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 931.687733][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 931.697974][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 931.706765][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 931.717552][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 931.746563][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 931.771041][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 931.782668][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 23:59:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:28 executing program 0: r0 = inotify_init() ioctl$int_out(r0, 0x2, &(0x7f0000000080)) 23:59:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x64}}, 0x20004000) 23:59:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x402, 0x0) 23:59:28 executing program 5: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) write$P9_RMKNOD(r2, 0x0, 0x0) [ 931.907303][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 931.916408][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 931.974323][T10862] usb 5-1: SerialNumber: syz [ 932.016817][ T9859] usb 3-1: USB disconnect, device number 3 [ 932.032004][T30039] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18) 23:59:28 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x123142, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) write$P9_RWRITE(r1, 0x0, 0x0) [ 932.059464][T30039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 932.087561][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 932.097758][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 932.299644][T30039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 932.317007][T30039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 932.331569][ T17] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 932.595873][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 932.607337][ T17] usb 3-1: Using ep0 maxpacket: 8 [ 932.677395][T10862] usb 5-1: USB disconnect, device number 10 [ 932.722532][T10862] usblp0: removed [ 932.736744][ T17] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 932.745756][ T17] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 932.790680][ T17] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 932.817049][ T17] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 932.831032][ T17] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 932.845364][ T17] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 932.856062][ T17] usb 3-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 932.956761][ T17] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 932.966720][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 932.975012][ T17] usb 3-1: SerialNumber: syz [ 933.007920][T30064] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 933.028843][ T17] hub 3-1:5.0: bad descriptor, ignoring hub [ 933.042075][ T17] hub: probe of 3-1:5.0 failed with error -5 [ 933.166675][T10862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 933.426646][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 933.557215][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 933.565994][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 933.587966][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 933.607570][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 933.642160][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 933.655661][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 933.671197][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 933.767190][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 933.781532][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 933.795007][T10862] usb 5-1: SerialNumber: syz 23:59:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:30 executing program 3: process_vm_writev(0x0, 0xfffffffffffffffd, 0x100000000, &(0x7f0000000100)=[{&(0x7f0000000180)=""/182, 0x34b}], 0x1208, 0x0) 23:59:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:59:30 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$TIOCL_SELLOADLUT(r0, 0x5451, 0x0) 23:59:30 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 933.866843][T10862] usb 5-1: can't set config #5, error -71 [ 933.874748][T10862] usb 5-1: USB disconnect, device number 11 [ 934.138341][T30118] udc-core: couldn't find an available UDC or it's busy [ 934.145863][T30118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 934.446978][T10862] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 934.696575][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 934.816643][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 934.825670][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 934.843173][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 934.863207][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 934.876429][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 934.892944][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 934.907268][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 935.007322][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 935.017176][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 935.025922][T10862] usb 5-1: SerialNumber: syz [ 935.078660][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.086397][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.117395][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 935.123933][T10862] hub: probe of 5-1:5.0 failed with error -5 23:59:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:31 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/235) 23:59:31 executing program 1: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0) 23:59:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x5450, 0x0) 23:59:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 23:59:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 23:59:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 935.307166][ T7] usb 3-1: USB disconnect, device number 4 [ 935.321083][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.352423][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.606658][ T9789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 935.635306][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 935.690936][T10862] usb 5-1: USB disconnect, device number 12 [ 935.737293][T10862] usblp0: removed [ 935.866573][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 935.996590][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 936.005611][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 936.014515][ T9789] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 936.026326][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 936.068609][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 936.081890][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 936.121436][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 936.214639][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 936.226644][T10862] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 936.237802][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 936.270506][ T9789] usb 3-1: SerialNumber: syz [ 936.307908][T30151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.327495][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 936.333465][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 936.502587][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 936.657231][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 936.665973][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 936.677874][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 936.687510][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 936.699511][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 936.710204][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 936.720357][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 936.836740][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 936.846556][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 936.854758][T10862] usb 5-1: SerialNumber: syz [ 936.908890][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.916321][T30125] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x50) 23:59:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup2(r0, r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) 23:59:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:59:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKDISCARD(r1, 0x1277, 0x0) [ 936.972202][T10862] usb 5-1: can't set config #5, error -71 [ 936.979944][T10862] usb 5-1: USB disconnect, device number 13 [ 937.435665][T30218] udc-core: couldn't find an available UDC or it's busy [ 937.452378][T30218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 937.463904][T10862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 937.726568][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 937.877537][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 937.892538][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 937.904513][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 937.920246][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 937.936095][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 937.953812][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 937.967745][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 938.077253][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 938.087216][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 938.095214][T10862] usb 5-1: SerialNumber: syz [ 938.127852][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.142450][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.167532][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 938.173740][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 938.369771][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.383637][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:34 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000180)="b6e687e6397173ff9114ca28bf5e89f06235011a", 0x14) 23:59:34 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) 23:59:34 executing program 3: r0 = gettid() exit(0x0) sched_rr_get_interval(r0, 0x0) 23:59:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x8840) 23:59:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 23:59:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5427, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x5451, 0x0) [ 938.627603][ T4914] usb 3-1: USB disconnect, device number 5 [ 938.634389][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 938.727320][T10862] usb 5-1: USB disconnect, device number 14 [ 938.753787][T10862] usblp0: removed [ 939.038621][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 939.186677][T10862] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 939.296690][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 939.417224][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 939.425714][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 939.436528][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 939.462105][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 939.483950][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 939.502698][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 939.514695][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.526296][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.568142][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 939.581037][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 939.616780][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 939.617273][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 939.626149][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 939.642069][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.662931][ T7] usb 3-1: SerialNumber: syz [ 939.687926][T30247] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.707363][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 939.714912][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 939.737092][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 939.772456][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 939.800973][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.897450][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 939.907611][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.916237][T10862] usb 5-1: SerialNumber: syz [ 939.964400][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.978628][T30210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 939.997658][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 940.003790][T10862] hub: probe of 5-1:5.0 failed with error -5 23:59:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:36 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) 23:59:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x200440d5) 23:59:36 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000100)) 23:59:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0) [ 940.076791][T10862] usblp: can't set desired altsetting 0 on interface 0 [ 940.127247][T10862] usb 5-1: USB disconnect, device number 15 [ 940.546531][T10862] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 940.816647][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 940.823964][T30313] udc-core: couldn't find an available UDC or it's busy [ 940.823986][T30313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 940.946619][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 940.955428][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 940.975115][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 940.988297][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 941.006747][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 941.024416][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 941.037688][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 941.136628][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 941.151353][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 941.187909][T10862] usb 5-1: SerialNumber: syz [ 941.217986][T30304] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.227991][T30304] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.257420][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 941.263518][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 941.478081][T30304] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.485609][T30304] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 941.721096][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 941.770892][T10862] usb 5-1: USB disconnect, device number 16 [ 941.794216][T10862] usblp0: removed 23:59:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:38 executing program 5: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 23:59:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004840) 23:59:38 executing program 3: r0 = epoll_create(0x8000000003) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 23:59:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, 0x0, 0x0) 23:59:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101006) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKGETSIZE64(r1, 0x80081272, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:59:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$GIO_UNIMAP(r0, 0x4b66, 0x0) [ 941.967673][ T4914] usb 3-1: USB disconnect, device number 6 [ 942.296623][ T4914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 942.306545][T10862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 942.556558][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 942.561775][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 942.686680][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 942.695975][ T4914] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 942.706881][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 942.720262][ T4914] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 942.739433][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 942.761749][ T4914] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 942.812239][ T4914] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 942.823896][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 942.862998][ T4914] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 942.880546][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 942.922884][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 942.933442][ T4914] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 942.980341][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.994045][ T4914] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 943.097182][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 943.107467][ T4914] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 943.121441][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 943.134484][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:59:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:39 executing program 1: sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xe5a91bddaafba5de) 23:59:39 executing program 3: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) 23:59:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x3f86172a2c1c411}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x48010) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0x5450, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) [ 943.153850][ T4914] usb 3-1: SerialNumber: syz [ 943.163473][T10862] usb 5-1: SerialNumber: syz [ 943.200191][T30351] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 943.211603][T10862] usb 5-1: can't set config #5, error -71 [ 943.239266][T10862] usb 5-1: USB disconnect, device number 17 [ 943.257430][ T4914] hub 3-1:5.0: bad descriptor, ignoring hub [ 943.263578][ T4914] hub: probe of 3-1:5.0 failed with error -5 23:59:39 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 943.696663][T10862] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 943.946630][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 944.066575][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 944.075551][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 944.126505][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 944.135780][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 944.196906][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 944.226524][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 944.256491][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 944.366675][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 944.386167][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 944.400292][T30408] udc-core: couldn't find an available UDC or it's busy [ 944.419381][T30408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 944.433821][T10862] usb 5-1: SerialNumber: syz [ 944.488136][T30393] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.524361][T30393] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.567520][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 944.578111][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 944.781700][T30393] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.796054][T30393] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 945.057068][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 23:59:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:41 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x0) 23:59:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) 23:59:41 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 23:59:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/70) [ 945.576944][T10862] usb 3-1: USB disconnect, device number 7 [ 945.686879][T30393] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 945.876680][ T9859] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 945.936527][T30393] usb 5-1: Using ep0 maxpacket: 8 [ 946.078769][T30420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.086374][T30420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.126590][ T9859] usb 3-1: Using ep0 maxpacket: 8 [ 946.196461][ C1] usblp0: nonzero read bulk status received: -71 [ 946.247204][ T9859] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 946.255694][ T9859] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 946.292163][ T9859] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 946.323224][ T9859] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 946.356164][ T9859] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 946.396085][ T9859] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 946.430968][ T9859] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 946.464179][ T7] usb 5-1: USB disconnect, device number 18 [ 946.500227][ T7] usblp0: removed [ 946.537203][ T9859] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 946.555598][ T9859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 946.626992][ T9859] usb 3-1: SerialNumber: syz [ 946.647885][T30433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 946.667438][ T9859] hub 3-1:5.0: bad descriptor, ignoring hub [ 946.673468][ T9859] hub: probe of 3-1:5.0 failed with error -5 23:59:43 executing program 5: r0 = socket(0x11, 0x803, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x14048080) 23:59:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 23:59:43 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:59:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:43 executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={0x0}}, 0x0) 23:59:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) [ 947.256828][T30486] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 947.376602][T10862] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 947.636699][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 947.767019][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 947.775501][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 947.787196][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 947.807578][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 947.809129][T30496] udc-core: couldn't find an available UDC or it's busy [ 947.823088][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 947.838017][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 947.853343][T30496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 947.863838][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 948.006673][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 948.016031][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 948.024202][T10862] usb 5-1: SerialNumber: syz [ 948.068729][T30475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.087647][T30475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.117577][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 948.124328][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 948.320344][T30475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.337437][T30475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.570680][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 23:59:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x14, &(0x7f0000000100)={0x0, 0x1, [], [@calipso={0x7, 0x8}]}, 0x18) 23:59:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffe8f}}, 0x0) 23:59:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:59:45 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 23:59:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f0000000280)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) dup2(r1, r0) write$P9_RMKDIR(r0, 0x0, 0x0) 23:59:45 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = dup2(r0, r0) ioctl$BLKFRASET(r1, 0x5451, 0x0) 23:59:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000018000000000caec0000000000000006"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) [ 949.017078][T26512] usb 3-1: USB disconnect, device number 8 23:59:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40004) [ 949.206877][T30475] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 949.396687][T26512] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 949.460155][T30475] usb 5-1: Using ep0 maxpacket: 8 [ 949.598480][T30508] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.620307][T30508] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.636772][T26512] usb 3-1: Using ep0 maxpacket: 8 [ 949.696486][ C0] usblp0: nonzero read bulk status received: -71 [ 949.760508][T26512] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 949.770541][T26512] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 949.831834][T26512] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 949.876515][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 949.912208][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 949.927519][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 949.950936][T26512] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 949.984656][ T9859] usb 5-1: USB disconnect, device number 19 [ 950.028333][ T9859] usblp0: removed [ 950.056727][T26512] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 950.066638][T26512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 950.074733][T26512] usb 3-1: SerialNumber: syz [ 950.107939][T30522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.115780][T30522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.147451][T26512] hub 3-1:5.0: bad descriptor, ignoring hub [ 950.153590][T26512] hub: probe of 3-1:5.0 failed with error -5 23:59:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0xc0) 23:59:46 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 950.355024][T30522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.365598][T30522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.607689][T26512] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 950.773365][T10862] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 951.026612][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 951.156651][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 951.165635][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 951.190357][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 951.204509][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 951.220581][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 951.235446][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 951.250558][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 951.366696][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 951.366898][T30522] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 951.382816][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 951.422983][T10862] usb 5-1: SerialNumber: syz [ 951.469849][T30576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.505127][T30576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.537590][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 951.544079][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 951.680470][T30522] usb 3-1: Using ep0 maxpacket: 8 [ 951.740235][T30576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.750783][T30576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.848792][T30590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.865510][T30590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 951.936543][ C1] usblp0: nonzero read bulk status received: -71 [ 951.977783][T10862] usblp 5-1:5.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 23:59:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x400000001000) 23:59:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24048880) 23:59:48 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(r0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:59:48 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, &(0x7f0000002080)) [ 952.117057][ T7] usb 3-1: USB disconnect, device number 9 [ 952.130687][ T7] usblp0: removed 23:59:48 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, 0x0) 23:59:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'lo\x00'}) 23:59:48 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) dup2(r0, r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 952.296969][T26512] usb 5-1: USB disconnect, device number 20 [ 952.314303][T26512] usblp1: removed 23:59:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x10e, 0x5, 0x0, 0x3) [ 952.616530][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 952.646693][T26512] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 952.862125][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 952.887199][T26512] usb 5-1: Using ep0 maxpacket: 8 [ 952.987746][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 952.996352][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 953.010974][T26512] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 953.022993][T26512] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 953.038822][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 953.054273][T26512] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 953.080055][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 953.101219][T26512] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 953.129573][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 953.149070][T26512] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 953.175660][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 953.199180][T26512] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 953.223846][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 953.246872][T26512] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 953.357209][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 953.366330][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 953.376285][T26512] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 953.402122][T26512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:59:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000001080)='./file0\x00', 0x40040, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:59:49 executing program 3: semget$private(0x0, 0x3, 0x400) [ 953.433326][ T7] usb 3-1: SerialNumber: syz [ 953.446322][T26512] usb 5-1: SerialNumber: syz [ 953.498281][T30628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.505754][T30628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.523986][T26512] usb 5-1: can't set config #5, error -71 [ 953.574470][T26512] usb 5-1: USB disconnect, device number 21 [ 953.581827][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 953.608066][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 953.784500][T30628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.805079][T30628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.986665][T26512] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 954.057820][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 954.226601][T26512] usb 5-1: Using ep0 maxpacket: 8 [ 954.347187][T26512] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 954.356219][T26512] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 954.406495][T26512] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 954.437080][T26512] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 954.468826][T26512] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 954.503876][T26512] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 954.566532][T26512] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 954.687119][T26512] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 954.696305][T26512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 954.717551][T30628] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 954.724873][T26512] usb 5-1: SerialNumber: syz [ 954.787894][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.823020][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.867508][T26512] hub 5-1:5.0: bad descriptor, ignoring hub [ 954.876261][T26512] hub: probe of 5-1:5.0 failed with error -5 [ 954.966564][T30628] usb 3-1: Using ep0 maxpacket: 8 [ 955.074047][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.087860][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.128599][T30684] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.145977][T30684] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.226412][ C0] usblp0: nonzero read bulk status received: -71 [ 955.338861][T26512] usblp 5-1:5.0: usblp1: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 955.390528][T26512] usb 3-1: USB disconnect, device number 10 [ 955.406204][T26512] usblp0: removed [ 955.660406][ T7] usb 5-1: USB disconnect, device number 22 [ 955.683833][ T7] usblp1: removed 23:59:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 956.016541][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 956.263056][ T9789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 956.266573][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 956.393106][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 956.406491][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 956.415430][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 956.440409][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 956.452621][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 956.496441][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 956.524760][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.543432][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 956.642700][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 956.667866][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 956.688225][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 956.696482][ T7] usb 5-1: SerialNumber: syz [ 956.701048][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 956.720032][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 956.739428][T30665] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 956.765716][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 956.814287][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 956.818182][ T7] usb 5-1: can't set config #5, error -71 [ 956.859101][ T7] usb 5-1: USB disconnect, device number 23 [ 956.872703][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 956.930404][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 956.966479][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 957.087105][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 957.100356][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.129402][ T9789] usb 3-1: SerialNumber: syz [ 957.178470][T30724] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 957.190878][T30724] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 957.237743][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 957.243885][ T9789] hub: probe of 3-1:5.0 failed with error -5 23:59:53 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80002, 0x0) write$P9_RLERROR(r0, 0x0, 0x10) 23:59:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x1a, 0x0, &(0x7f0000000000)) 23:59:53 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x5450, 0x0) 23:59:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:53 executing program 1: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'veth0_to_bond\x00'}) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x890c, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) 23:59:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:53 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) close(r0) epoll_create1(0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 957.440225][T30724] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 957.465447][T30724] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:53 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 23:59:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x20004000) [ 957.720936][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 957.775244][T10862] usb 5-1: new high-speed USB device number 24 using dummy_hcd 23:59:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x444c0) [ 957.977258][ T9789] usb 3-1: USB disconnect, device number 11 [ 958.022934][ T9789] usblp0: removed [ 958.046679][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 958.166687][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 958.179394][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 958.221231][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 958.287494][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 958.329642][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 958.357860][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 958.376727][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 958.476675][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 958.486128][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 958.498316][ T9789] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 958.516256][T10862] usb 5-1: SerialNumber: syz [ 958.557956][T30753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 958.566007][T30753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 958.597702][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 958.604205][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 958.766764][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 958.800140][T30753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 958.812717][T30753] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 958.896632][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 958.905591][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 958.921607][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 958.937750][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 958.952181][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 958.966134][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 958.980543][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 959.061057][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 959.077198][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 959.086317][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 23:59:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, 0x0) 23:59:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) 23:59:55 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 959.147034][ T9789] usb 3-1: SerialNumber: syz [ 959.186690][ T9789] usb 3-1: can't set config #5, error -71 [ 959.198862][ T9789] usb 3-1: USB disconnect, device number 12 [ 959.686938][T30753] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 959.706493][ T9789] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 959.926574][T30753] usb 5-1: Using ep0 maxpacket: 8 [ 959.946516][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 960.068780][T30829] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.076178][T30829] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.084370][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 960.094397][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 960.103613][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 960.114555][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 960.126181][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 960.140845][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 960.153145][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 960.165405][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 960.178771][ C1] usblp0: nonzero read bulk status received: -71 [ 960.277214][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 960.286931][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 960.294940][ T9789] usb 3-1: SerialNumber: syz [ 960.327809][T30827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.335331][T30827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.348928][ T4914] usb 5-1: USB disconnect, device number 24 [ 960.371847][ T4914] usblp0: removed [ 960.417519][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 960.424174][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 960.620436][T30827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 960.634461][T30827] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 23:59:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 23:59:57 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEY(r0, 0x5451, 0x0) 23:59:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = dup3(r0, r1, 0x0) getpeername$unix(r2, 0x0, &(0x7f00000000c0)) 23:59:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 960.863092][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 960.957486][ T9789] usb 3-1: USB disconnect, device number 13 [ 960.973223][ T9789] usblp0: removed 23:59:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000250000000800030055972028d43febc33d38e3c4edcf0a7c0ad4", @ANYRES32=0x0, @ANYBLOB="0a000600ffff"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004005}, 0x0) 23:59:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001200)) 23:59:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup(r0) r2 = gettid() ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) tkill(r2, 0x7) [ 961.326546][ T7] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 961.426570][ T9789] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 961.576447][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 961.707090][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 961.715856][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 961.726583][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 961.771238][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 961.816745][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 961.864621][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 961.877417][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 961.887640][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 961.896979][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 961.924297][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 961.927533][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 961.952258][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 961.982984][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 962.011484][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 962.043015][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 962.071301][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 962.097619][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 962.116852][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 962.124897][ T7] usb 5-1: SerialNumber: syz [ 962.177229][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 962.186326][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 962.198903][T30881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 962.214378][T30881] raw-gadget gadget: fail, usb_ep_enable returned -22 23:59:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 23:59:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 23:59:58 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000140)={'syztnl1\x00', 0x0}) 23:59:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x21, &(0x7f00000009c0), 0x4) [ 962.236518][ T9789] usb 3-1: SerialNumber: syz [ 962.237293][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 962.270073][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 962.336927][ T9789] usb 3-1: can't set config #5, error -71 [ 962.371044][ T9789] usb 3-1: USB disconnect, device number 14 [ 962.439996][T30881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 962.470337][T30881] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 962.758528][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 962.826514][ T9789] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 963.086490][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 963.216581][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 963.230445][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 963.247468][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 963.264314][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 963.275686][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 963.291889][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 963.316769][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 963.338811][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 963.426904][T30881] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 963.444418][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 963.458253][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 963.498549][ T9789] usb 3-1: SerialNumber: syz [ 963.542588][T30920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.567229][T30920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.627479][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 963.634004][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 963.696445][T30881] usb 5-1: Using ep0 maxpacket: 8 [ 963.833068][T30920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.851646][T30933] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.868758][T30920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.882476][T30933] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 963.946424][ C1] usblp0: nonzero read bulk status received: -71 [ 964.124290][ T4914] usb 5-1: USB disconnect, device number 25 [ 964.131350][ T9789] usblp 3-1:5.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 964.172151][ T4914] usblp0: removed [ 964.207048][ T9789] usb 3-1: USB disconnect, device number 15 [ 964.228645][ T9789] usblp1: removed 00:00:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:00 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) 00:00:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff3e80e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 00:00:00 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000000200)={'team_slave_1\x00', @ifru_mtu}) [ 964.706584][ T9789] usb 3-1: new high-speed USB device number 16 using dummy_hcd 00:00:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800) fcntl$setownex(r0, 0xf, &(0x7f0000000b40)) 00:00:01 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:00:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) [ 964.966657][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 965.007355][ T17] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 965.087162][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 965.095561][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 965.139411][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 965.153415][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 965.172109][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 965.183968][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 965.201858][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 965.215353][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 965.256591][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 965.332092][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 965.352452][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 965.363942][ T9789] usb 3-1: SerialNumber: syz [ 965.396802][ T17] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 965.405192][ T17] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 965.457570][ T17] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 965.486731][ T9789] usb 3-1: can't set config #5, error -71 [ 965.498018][ T9789] usb 3-1: USB disconnect, device number 16 [ 965.512009][ T17] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 965.524523][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 965.580751][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 965.637012][ T17] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 965.757294][ T17] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 965.774342][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 965.802078][ T17] usb 5-1: SerialNumber: syz [ 965.847956][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 965.855303][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 965.897426][ T17] hub 5-1:5.0: bad descriptor, ignoring hub [ 965.903575][ T17] hub: probe of 5-1:5.0 failed with error -5 [ 966.101034][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.112024][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 00:00:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff84, &(0x7f0000000240)={0x0}}, 0x4000000) 00:00:02 executing program 5: r0 = creat(&(0x7f0000000900)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r0, r1) fallocate(r1, 0x0, 0x0, 0x3) 00:00:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8015) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 00:00:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) close(r0) socket(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 00:00:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 966.351339][ T17] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 966.596603][ T9789] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 966.667080][ T17] usb 5-1: USB disconnect, device number 26 [ 966.685921][ T17] usblp0: removed [ 966.849113][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 966.987237][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 966.995730][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 967.020993][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 967.035738][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 967.056511][ T17] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 967.079083][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 967.109149][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 967.151756][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 967.166024][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 967.267235][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 967.276318][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 967.294275][ T9789] usb 3-1: SerialNumber: syz [ 967.301902][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 967.327904][T31015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.337434][T31015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.368290][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 967.374327][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 967.427156][ T17] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 967.436721][ T17] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 967.445930][ T17] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 967.463868][ T17] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 967.483770][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 967.498155][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 967.512976][ T17] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 967.571378][T31015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.583343][T31015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.607961][ T17] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 967.626488][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 967.634853][ T17] usb 5-1: SerialNumber: syz [ 967.678637][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.686011][T30974] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.717444][ T17] hub 5-1:5.0: bad descriptor, ignoring hub [ 967.723629][ T17] hub: probe of 5-1:5.0 failed with error -5 00:00:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:00:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0xe}, &(0x7f0000000140)=0x20) 00:00:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0) 00:00:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x1b5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$packet(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 967.796453][ T17] usblp: can't set desired altsetting 0 on interface 0 00:00:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000580), 0x8, 0x0) dup2(r0, r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x5452, &(0x7f0000000040)={'syztnl1\x00', 0x0}) [ 967.855106][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 967.874464][ T17] usb 5-1: USB disconnect, device number 27 00:00:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, 0x0, 0x0) [ 967.919975][ T9789] usb 3-1: USB disconnect, device number 17 [ 967.927875][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 967.959910][ T9789] usblp0: removed 00:00:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040000) [ 967.976971][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:00:04 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$FITHAW(r0, 0x541b) 00:00:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8084) 00:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x5451, 0x0) [ 968.346519][ T17] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 968.406747][ T9789] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 968.606551][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 968.656505][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 968.726579][ T17] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 968.748721][ T17] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 968.773364][ T17] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 968.785788][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 968.799720][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 968.811256][ T17] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 968.830813][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 968.861121][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 968.898953][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 968.932878][ T17] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 968.956183][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 968.980123][ T17] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 969.003743][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 969.024244][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 969.044767][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 969.107036][ T17] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 969.116259][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 969.132510][ T17] usb 5-1: SerialNumber: syz [ 969.157958][T31076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.165189][T31076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.177053][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 969.186588][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 969.206946][ T9789] usb 3-1: SerialNumber: syz [ 969.237421][ T17] hub 5-1:5.0: bad descriptor, ignoring hub [ 969.239523][T31015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.243393][ T17] hub: probe of 5-1:5.0 failed with error -5 00:00:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 969.346713][ T9789] usb 3-1: can't set config #5, error -71 [ 969.363861][ T9789] usb 3-1: USB disconnect, device number 18 [ 969.442129][T31076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.462091][T31076] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.761034][ T17] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 969.818957][ T9789] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 970.086659][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 970.265232][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 970.274356][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 970.292080][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 970.306026][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 970.321510][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 970.335991][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 970.351536][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 970.365883][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 970.457167][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 970.476709][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 970.484939][ T9789] usb 3-1: SerialNumber: syz [ 970.517865][T31123] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 970.525523][T31123] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 970.547325][T31076] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 970.597685][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 970.603815][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 970.786502][T31076] usb 5-1: Using ep0 maxpacket: 8 [ 970.830693][T31123] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 970.846309][T31123] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 970.948798][T31135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 970.956262][T31135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 971.026460][ C1] usblp0: nonzero read bulk status received: -71 [ 971.087325][ T9789] usblp 3-1:5.0: usblp1: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 971.137168][ T9789] usb 3-1: USB disconnect, device number 19 [ 971.171764][ T9789] usblp1: removed [ 971.193333][ T17] usb 5-1: USB disconnect, device number 28 [ 971.233901][ T17] usblp0: removed 00:00:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:07 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 00:00:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:00:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:00:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x800) [ 971.707717][ T9789] usb 3-1: new high-speed USB device number 20 using dummy_hcd 00:00:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x20080000) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) shutdown(r0, 0x0) 00:00:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x8912, &(0x7f0000000000)={0x0, 0x0, [], 0x0, 0x0}) 00:00:08 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x400082, 0x0) 00:00:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 00:00:08 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000000)={&(0x7f0000000180), 0x3e, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}}, 0x0) 00:00:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x200000) [ 971.957092][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 972.077132][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 972.085698][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 972.106642][ T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 972.110824][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 972.163058][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 972.205389][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 972.238850][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 972.274015][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 972.308730][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 972.346602][ T7] usb 5-1: Using ep0 maxpacket: 8 00:00:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 972.426561][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 972.435657][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 972.467332][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 972.467580][ T9789] usb 3-1: can't set config #5, error -71 [ 972.475844][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 972.475859][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 972.475905][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 972.475919][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 972.475940][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 972.487395][ T9789] usb 3-1: USB disconnect, device number 20 [ 972.592796][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 972.697179][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 972.726545][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 972.734777][ T7] usb 5-1: SerialNumber: syz [ 972.767871][T31183] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.775402][T31183] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.807513][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 972.817423][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 972.956468][ T9789] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 973.009766][T31183] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 973.024565][T31183] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 973.216508][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 973.262706][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 973.350171][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 973.360443][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 973.377863][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 973.391365][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 973.406658][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 973.421444][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 973.438059][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 973.454014][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 973.557230][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 973.586525][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 973.595175][ T9789] usb 3-1: SerialNumber: syz [ 973.637964][T31210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 973.657488][T31210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 973.707439][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 973.713442][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 973.877831][T31183] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 973.935251][T31210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 973.946913][T31210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.136551][T31183] usb 5-1: Using ep0 maxpacket: 8 [ 974.298781][T31230] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.308112][T31230] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.348600][ T9789] usblp 3-1:5.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 974.376442][ C1] usblp0: nonzero read bulk status received: -71 [ 974.432020][ T9789] usb 3-1: USB disconnect, device number 21 [ 974.458694][ T9789] usblp1: removed [ 974.531461][ T7] usb 5-1: USB disconnect, device number 29 [ 974.550130][ T7] usblp0: removed [ 974.836539][ T9789] usb 3-1: new high-speed USB device number 22 using dummy_hcd 00:00:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x5427) 00:00:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00009646ff26caffffff0000c1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, 0x0, 0x0) 00:00:11 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:00:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 975.086523][ T9789] usb 3-1: Using ep0 maxpacket: 8 00:00:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:00:11 executing program 5: r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:00:11 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 00:00:11 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000100)={'gretap0\x00', 0x0}) [ 975.227099][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 975.236104][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 975.288917][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 975.322706][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 00:00:11 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) 00:00:11 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vga_arbiter\x00', 0x181842, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) [ 975.387752][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 00:00:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 975.456470][ T7] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 975.467712][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 975.545934][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 975.597925][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 975.676475][ T9789] usb 3-1: string descriptor 0 read error: -71 [ 975.676504][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 975.676515][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 975.696756][ T9789] usb 3-1: can't set config #5, error -71 [ 975.704695][ T9789] usb 3-1: USB disconnect, device number 22 [ 975.727837][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 975.857072][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 975.870346][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 975.898684][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 975.930739][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 975.958339][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 975.981887][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 976.004699][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 976.071424][ T9789] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 976.118343][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 976.156511][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 976.164978][ T7] usb 5-1: SerialNumber: syz [ 976.208052][T31281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.215594][T31281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.247531][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 976.253917][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 976.336459][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 976.470109][T31281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.486638][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 976.491154][T31281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.500666][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 976.543575][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 976.571850][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 976.609116][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 976.630383][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 976.665204][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 976.676744][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 976.776504][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 976.781547][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 976.790096][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 976.846522][ T9789] usb 3-1: SerialNumber: syz [ 976.888175][T31306] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.895552][T31306] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.918115][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 976.924093][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 977.106416][ C1] usblp0: nonzero read bulk status received: -71 [ 977.140659][T31306] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 977.154857][T31306] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 977.234019][T31281] udc-core: couldn't find an available UDC or it's busy [ 977.243098][T31281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 977.297085][T26512] usb 5-1: USB disconnect, device number 30 [ 977.312866][T26512] usblp0: removed [ 977.398790][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 977.449124][ T9789] usb 3-1: USB disconnect, device number 23 [ 977.469401][ T9789] usblp0: removed 00:00:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24048000) 00:00:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) 00:00:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000050) 00:00:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8953, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x0, @empty}}) 00:00:14 executing program 1: sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x5c2a7a87ac9f3fa7) 00:00:14 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:00:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:00:14 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000, 0x0) 00:00:14 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) [ 977.976393][ T9789] usb 3-1: new high-speed USB device number 24 using dummy_hcd 00:00:14 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 978.186675][T10862] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 978.216588][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 978.353048][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 978.377312][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 978.432088][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 978.446257][T10862] usb 5-1: Using ep0 maxpacket: 8 [ 978.476485][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 978.503803][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 978.528054][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 978.550489][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 978.587055][T10862] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 978.595708][T10862] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 00:00:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 978.624982][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 978.644895][T10862] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 978.692769][T10862] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 978.715064][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 978.733196][ T9789] usb 3-1: string descriptor 0 read error: -71 [ 978.743370][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 978.775222][T10862] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 978.794839][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 978.821686][T10862] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 978.856748][ T9789] usb 3-1: can't set config #5, error -71 [ 978.865253][ T9789] usb 3-1: USB disconnect, device number 24 [ 978.957166][T10862] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 978.969269][T10862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 978.988713][T10862] usb 5-1: SerialNumber: syz [ 979.027880][T31373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.046046][T31373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.087451][T10862] hub 5-1:5.0: bad descriptor, ignoring hub [ 979.094234][T10862] hub: probe of 5-1:5.0 failed with error -5 [ 979.266945][ T9789] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 979.311174][T31373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.325953][T31373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.506524][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 979.601923][T10862] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 979.639380][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 979.656146][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 979.678436][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 979.698727][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 979.731794][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 979.772295][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 979.786532][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 979.810301][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.907071][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 979.916941][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 979.925074][ T9789] usb 3-1: SerialNumber: syz [ 979.926475][ C0] usblp0: nonzero read bulk status received: -71 [ 979.967854][T31402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.975243][T31402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.007331][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 980.013890][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 980.048674][T31373] udc-core: couldn't find an available UDC or it's busy [ 980.064444][T31373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 980.127196][T10862] usb 5-1: USB disconnect, device number 31 [ 980.150349][T10862] usblp0: removed [ 980.226054][T31402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.242187][T31402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.497056][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 980.547133][ T9789] usb 3-1: USB disconnect, device number 25 [ 980.565813][ T9789] usblp0: removed 00:00:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 00:00:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCSETXW(r0, 0x5428, 0x0) 00:00:16 executing program 3: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:00:16 executing program 1: r0 = inotify_init() close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:00:16 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x0, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000001dc0)='/dev/input/event#\x00', 0x4, 0x141042) fallocate(r0, 0x0, 0x0, 0x1) 00:00:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r0, r1, 0x0, 0x2) 00:00:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8953, &(0x7f00000000c0)={0x7, 'macvlan1\x00'}) 00:00:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20008804) 00:00:16 executing program 1: r0 = inotify_init() close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:00:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8906, 0x0) 00:00:17 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = dup3(r1, r0, 0x0) write$P9_ROPEN(r2, 0x0, 0x0) [ 981.026630][ T9795] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 981.041665][ T9789] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 981.286693][ T9795] usb 5-1: Using ep0 maxpacket: 8 [ 981.306467][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 981.407803][ T9795] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 981.432305][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 981.436260][ T9795] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 981.448519][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 981.479565][ T9795] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 981.492502][ T9795] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 981.507530][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 981.511314][ T9795] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 981.536542][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 981.539984][ T9795] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 981.565965][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 981.591794][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 981.592571][ T9795] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.622184][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 00:00:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 981.653803][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 981.746502][ T9789] usb 3-1: string descriptor 0 read error: -71 [ 981.753958][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 981.781017][ T9795] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 981.787770][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.803913][ T9795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.836097][ T9795] usb 5-1: SerialNumber: syz [ 981.846516][ T9789] usb 3-1: can't set config #5, error -71 [ 981.867867][T31464] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.875153][T31464] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.884258][ T9789] usb 3-1: USB disconnect, device number 26 [ 981.907237][ T9795] hub 5-1:5.0: bad descriptor, ignoring hub [ 981.916882][ T9795] hub: probe of 5-1:5.0 failed with error -5 [ 982.138424][T31464] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.157045][T31464] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 982.277466][ T9789] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 982.390504][ T9795] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 982.546569][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 982.696630][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 982.705083][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 982.715465][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 982.716941][ C0] usblp0: nonzero read bulk status received: -71 [ 982.730570][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 982.759875][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 982.770499][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 982.782332][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 982.792514][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 982.838650][T31464] udc-core: couldn't find an available UDC or it's busy [ 982.845703][T31464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 982.896740][ T7] usb 5-1: USB disconnect, device number 32 [ 982.897178][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 982.913908][ T7] usblp0: removed [ 982.936766][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 982.950951][ T9789] usb 3-1: SerialNumber: syz [ 982.999048][T31495] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 983.014686][T31495] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 983.037221][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 983.044039][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 983.249685][T31495] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 983.261459][T31495] raw-gadget gadget: fail, usb_ep_enable returned -22 00:00:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:00:19 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) 00:00:19 executing program 1: r0 = inotify_init() close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:00:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000001400), 0x8) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:00:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0x541b, 0x960000) 00:00:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:00:19 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:00:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x14, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "f2dacac8f6e10a436e1c0953e70b3eadd791471ca6eee15053a739c6da0c5ba016d76aeff6732285ffde46f21483006ab40544f6d0fe4e58a0d1dd11dfa327edaefcdb79d386660bf93485011cd2a695"}, 0xd8) 00:00:19 executing program 1: r0 = inotify_init() close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 983.508780][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 983.577517][ T9789] usb 3-1: USB disconnect, device number 27 [ 983.613965][ T9789] usblp0: removed 00:00:19 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:00:19 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) [ 983.786547][ T7] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 984.056419][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 984.096497][ T9789] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 984.176531][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 984.256391][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 984.274361][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 984.308282][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 984.325468][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 984.340190][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 984.354150][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 984.382494][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 984.496661][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 984.506044][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 984.519255][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 984.524766][ T7] usb 5-1: SerialNumber: syz [ 984.544235][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 984.557799][T31541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.565270][T31541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.589906][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 984.597557][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 984.616534][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 984.636727][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 984.638323][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 984.653330][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 984.717262][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 00:00:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 984.756738][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 984.816682][ T9789] usb 3-1: string descriptor 0 read error: -71 [ 984.821522][T31541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.822927][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 984.847448][T31541] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.885519][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 984.946883][ T9789] usb 3-1: can't set config #5, error -71 [ 984.973139][ T9789] usb 3-1: USB disconnect, device number 28 [ 985.100475][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 985.389063][ T9789] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 985.636754][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 985.796733][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 985.808681][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 985.831182][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 985.845264][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 985.867228][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 985.882145][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 985.897951][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 985.912794][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 986.007189][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 986.016278][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 986.037559][ T9789] usb 3-1: SerialNumber: syz [ 986.077821][T31589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.107297][T31589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.137325][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 986.143544][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 986.341069][T31589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.355936][T31589] raw-gadget gadget: fail, usb_ep_enable returned -22 00:00:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:00:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 00:00:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000800) 00:00:25 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x148}}, 0x0) 00:00:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x5452, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {}, 0x0, {0x2, 0x0, @broadcast}}) [ 989.498589][ T7] usb 5-1: USB disconnect, device number 33 [ 989.509065][ T7] usblp0: removed [ 989.519999][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E 00:00:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4004) [ 989.617260][ T9789] usb 3-1: USB disconnect, device number 29 [ 989.648770][ T9789] usblp0: removed 00:00:25 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 00:00:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') r2 = dup3(r0, r1, 0x0) r3 = dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24044040) 00:00:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 00:00:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 00:00:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 990.076452][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 990.106411][ T9789] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 990.326495][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 990.366393][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 990.446522][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 990.454913][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 990.507014][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 990.511316][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 990.516115][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 990.534779][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 990.564178][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 990.588367][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 990.603410][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 990.613361][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 990.613377][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 990.613393][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 990.613407][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 990.613423][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 990.737013][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 990.746249][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 990.803085][ T9789] usb 3-1: SerialNumber: syz [ 990.848368][T31647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 990.855575][T31647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 990.882642][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 990.924599][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 990.934684][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 991.007180][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 991.018160][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 991.029607][ T7] usb 5-1: SerialNumber: syz [ 991.057842][T31646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.065188][T31646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.117315][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 991.123637][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 991.134464][T31647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.161048][T31647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.340134][T31646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.351442][T31646] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 991.417732][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 991.477359][ T9789] usb 3-1: USB disconnect, device number 30 [ 991.502786][ T9789] usblp0: removed [ 991.617618][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 991.996562][ T9789] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 992.266594][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 992.386650][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 992.395570][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 992.413668][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 992.428002][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 992.443398][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 992.457834][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 992.473455][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 992.488060][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 992.586715][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 992.606432][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 992.614997][ T9789] usb 3-1: SerialNumber: syz [ 992.686625][ T9789] usb 3-1: can't set config #5, error -71 [ 992.703802][ T9789] usb 3-1: USB disconnect, device number 31 00:00:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:00:32 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 00:00:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x240040d4) 00:00:32 executing program 3: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:00:32 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x5450, 0x0) 00:00:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) [ 995.989051][ T7] usb 5-1: USB disconnect, device number 34 [ 996.013863][ T7] usblp0: removed 00:00:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:00:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) 00:00:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x4, 0x0, 0x1) 00:00:32 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x29, 0x4, 0x0, 0xe) 00:00:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:00:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$EVIOCGBITSND(r0, 0x5451, 0x0) [ 996.347005][T26512] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 996.546409][ T7] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 996.606408][T26512] usb 3-1: Using ep0 maxpacket: 8 [ 996.727139][T26512] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 996.746391][T26512] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 996.755139][T26512] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 996.786495][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 996.811850][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 996.824612][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 996.852761][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 996.887153][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 996.909633][T26512] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 996.947600][ T7] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 996.956177][ T7] usb 5-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 996.973731][ T7] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 996.987213][ T7] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 997.002417][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 997.017180][T26512] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 997.026270][T26512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 997.039237][ T7] usb 5-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 997.063154][ T7] usb 5-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.081068][T26512] usb 3-1: SerialNumber: syz [ 997.118518][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.126264][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.157948][T26512] hub 3-1:5.0: bad descriptor, ignoring hub [ 997.164596][T26512] hub: probe of 3-1:5.0 failed with error -5 [ 997.178251][ T7] usb 5-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 997.195754][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 997.222018][ T7] usb 5-1: SerialNumber: syz [ 997.257893][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.265454][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.297349][ T7] hub 5-1:5.0: bad descriptor, ignoring hub [ 997.303470][ T7] hub: probe of 5-1:5.0 failed with error -5 [ 997.393805][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.405706][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.520429][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.537235][T31747] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 997.655248][T26512] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 997.715044][T26512] usb 3-1: USB disconnect, device number 32 [ 997.735975][T26512] usblp0: removed [ 997.791406][ T7] usblp 5-1:5.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 998.196439][T26512] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 998.436412][T26512] usb 3-1: Using ep0 maxpacket: 8 [ 998.556491][T26512] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 998.565225][T26512] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 998.583203][T26512] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 998.595518][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 998.607539][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 998.620684][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 998.632381][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 998.646248][T26512] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 998.737057][T26512] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 998.751033][T26512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 998.774776][T26512] usb 3-1: SerialNumber: syz [ 998.808840][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 998.836492][T31738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 998.850503][T26512] hub 3-1:5.0: bad descriptor, ignoring hub [ 998.866972][T26512] hub: probe of 3-1:5.0 failed with error -5 [ 998.937485][ T9789] usb 5-1: USB disconnect, device number 35 [ 998.965485][ T9789] usblp0: removed [ 999.086597][T26512] usblp: can't set desired altsetting 0 on interface 0 [ 999.129243][T26512] usb 3-1: USB disconnect, device number 33 00:00:35 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:00:35 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 00:00:35 executing program 1: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x92924991f8702644) 00:00:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) dup2(r1, r0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x22, 0x0, &(0x7f0000000080)) 00:00:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:35 executing program 4: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:00:35 executing program 1: process_vm_readv(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 00:00:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)={0x3, 'xfrm0\x00'}) 00:00:35 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890c, &(0x7f0000000040)={'batadv0\x00'}) 00:00:35 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:00:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = memfd_create(&(0x7f0000000040)='team0\x00', 0x0) dup2(r1, r0) fallocate(r0, 0x0, 0x0, 0x3f) 00:00:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:00:35 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:00:36 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 00:00:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000654fd9"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, &(0x7f0000001f80)={0x0, 0x989680}) 00:00:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) [ 999.826527][ T9789] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1000.076484][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1000.206521][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1000.221579][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1000.247409][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1000.265145][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1000.287800][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1000.308456][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1000.329396][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1000.355529][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1000.467028][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1000.489925][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1000.525644][ T9789] usb 3-1: SerialNumber: syz [ 1000.567877][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1000.575586][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1000.607404][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1000.613729][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 1000.809854][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1000.822538][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1001.067766][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1001.117149][ T9789] usb 3-1: USB disconnect, device number 34 [ 1001.142905][ T9789] usblp0: removed [ 1001.646494][ T9789] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1001.896452][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1002.017144][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1002.025730][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1002.050641][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1002.069400][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1002.106472][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1002.116805][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1002.128100][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1002.140122][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1002.227294][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1002.246420][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1002.254435][ T9789] usb 3-1: SerialNumber: syz [ 1002.288574][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1002.295819][T31838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1002.327261][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1002.333268][ T9789] hub: probe of 3-1:5.0 failed with error -5 00:00:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) 00:00:38 executing program 1: r0 = socket(0x2, 0x3, 0x6) r1 = dup(r0) write$P9_RMKDIR(r1, 0x0, 0x0) 00:00:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x2, 0x0, &(0x7f0000001380)) 00:00:38 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x104}}, 0x0) 00:00:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xc, 0x0, 0x0) [ 1002.528109][ T9789] usblp: can't set desired altsetting 0 on interface 0 00:00:38 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 00:00:38 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) [ 1002.618041][ T9789] usb 3-1: USB disconnect, device number 35 00:00:38 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:00:38 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x113460, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 00:00:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$NS_GET_USERNS(r3, 0x5450, 0x0) 00:00:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x19) dup2(r1, r0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1a00000acaffffe00000f69c61fc3ba106a200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 00:00:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:00:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x400c840) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 00:00:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) dup3(r0, r1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) [ 1003.106465][ T9789] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1003.356505][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1003.484874][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1003.497201][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1003.506017][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1003.527228][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1003.544152][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1003.564643][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1003.599958][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1003.615042][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1003.717052][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1003.726227][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1003.775347][ T9789] usb 3-1: SerialNumber: syz [ 1003.817719][T31926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1003.824926][T31926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1003.904382][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1003.912427][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 1004.107170][T31926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1004.114429][T31926] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1004.370488][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1005.126930][T31926] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 1005.386474][T31926] usb 3-1: Using ep0 maxpacket: 8 [ 1005.538457][T31984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.545916][T31984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.621148][ C0] usblp0: nonzero read bulk status received: -71 [ 1005.783365][ T7] usb 3-1: USB disconnect, device number 36 [ 1005.803611][ T7] usblp0: removed 00:00:42 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0xa015) 00:00:42 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vcs\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:00:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) dup3(r0, r1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:00:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x25, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) r2 = dup3(r0, r1, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x14}, 0x1c}}, 0x0) 00:00:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40801) 00:00:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, 0x0, 0x0) 00:00:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 00:00:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000480)={@remote}, 0x14) 00:00:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) dup3(r0, r1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:00:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:00:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) [ 1006.686995][ T7] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1006.926399][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1007.046533][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1007.056072][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1007.090386][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1007.103772][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1007.148041][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1007.174244][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1007.193932][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1007.212284][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1007.306531][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1007.315961][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1007.332377][ T7] usb 3-1: SerialNumber: syz [ 1007.359587][T32014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.376691][T32014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.417227][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 1007.423361][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 1007.620218][T32014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.635598][T32014] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1007.870911][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1008.636854][T32014] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 1008.896475][T32014] usb 3-1: Using ep0 maxpacket: 8 [ 1009.068745][T32053] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1009.076221][T32053] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1009.156539][ C1] usblp0: nonzero read bulk status received: -71 [ 1009.321740][ T9789] usb 3-1: USB disconnect, device number 37 [ 1009.331834][ T9789] usblp0: removed 00:00:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:46 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:00:46 executing program 1: sysfs$2(0x2, 0x90, 0x0) 00:00:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005900), 0x0, 0x8800) 00:00:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) dup3(r0, r1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:00:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0x5451, 0x0) 00:00:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={0x0}}, 0x4800) 00:00:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f00000003c0)='Z', 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) 00:00:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f00000006c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80) 00:00:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @empty}, 0x1c) write$cgroup_int(r0, 0x0, 0x0) 00:00:46 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x10, 0x0, &(0x7f0000000000)) 00:00:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x20040000) [ 1010.203363][ T9789] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1010.456486][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1010.576945][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1010.585609][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1010.614528][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1010.642127][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1010.658525][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1010.672895][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1010.690551][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1010.704723][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1010.796551][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1010.806735][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1010.814895][ T9789] usb 3-1: SerialNumber: syz [ 1010.857989][T32082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1010.870979][T32082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1010.897268][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1010.903960][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 1011.104773][T32082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.116213][T32082] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.360341][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1011.997163][T32082] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 1012.246451][T32082] usb 3-1: Using ep0 maxpacket: 8 [ 1012.428663][T32125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1012.436014][T32125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1012.516363][ C1] usblp0: nonzero read bulk status received: -71 [ 1012.677719][ T9789] usb 3-1: USB disconnect, device number 38 [ 1012.696463][ T9789] usblp0: removed 00:00:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 00:00:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd}, 0x40) 00:00:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3c000000000000000000000007000000832b07e0000001e0000002ffffffffe0000001e0000001ac1414bb0a010102e000000200000000ac1e010100000000001100000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000011"], 0xa8}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:00:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:00:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5421, 0x0) 00:00:49 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x6, 0x5, 0x4, 0xf5, 0x0, 0x0, 0x1000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xad, 0x1, @perf_config_ext={0xffffffffffffff7c, 0x20000000}, 0x10000, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x3, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x30, 0x5, 0x1f, 0x40, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x5a014, 0xde0, 0x3, 0x4, 0x7, 0x9, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="ad0efe8db2a06b0906d90c51bcdb5b7f96635cc0f6f9f8fcad52452593e8127fa56b595d5266d07bedcd9f3057b07d7a3a2001eba630cc6a449e1ea3778499c966e336c4151ed7179c724c565332e5608c0542a15932b57db0dfa68fe07483ae105b888ba163d58fd62cd1ed5925910affa36267d5e8a1bbe226e2c05e573c1de4b16ae069ddb0023da34eb881ebbf2d0a9946e2abb9c5f669533a5bc7eb1187b11ac2c1e7fa72a03dacea9dea3e1935ea01fc02fe5fcdec26c73952c35a71ec41e9f39ea981ac27fd61756567f8105c90ec6a844c76000000000000000000", @ANYRES32, @ANYBLOB="dc6d3794566a7267bf024a025b1a9a3802c54ebdbeafedff08225c4bc19bb8376b59ed22293f28ca29a2e462ca30f2d8481c1ee95aef288ba6e2190c80e3b2bbde762ddb6e113f6278d78b740a4593010000005535a9d50453940d1dfb1b99fd6bae29f3a833"], &(0x7f00000002c0)='GPL\x00', 0x10000, 0x79, &(0x7f0000000300)=""/121, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x0, 0x9}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) 00:00:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000580)=@raw=[@ldst], &(0x7f00000005c0)='GPL\x00', 0x4, 0x85, &(0x7f0000000600)=""/133, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:00:49 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x77) 00:00:49 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000180)=@un=@file={0xa}, 0xa) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 00:00:49 executing program 1: setgroups(0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0]) setreuid(0x0, 0x0) 00:00:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x101, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 00:00:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 00:00:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev}}}}) 00:00:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x70, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1013.576445][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd 00:00:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@dev, @remote, @ipv4={[], [], @broadcast}, 0x0, 0xda, 0x0, 0x0, 0x0, 0x7000000}) [ 1013.816419][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1013.942850][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1013.956051][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1013.996589][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1014.005948][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1014.025313][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1014.051981][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1014.080472][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1014.094963][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1014.186992][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1014.208218][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1014.240061][ T7] usb 3-1: SerialNumber: syz [ 1014.297920][T32156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1014.305244][T32156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1014.337253][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 1014.343499][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 1014.546929][T32156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1014.554166][T32156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1014.800108][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1015.406868][T32156] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 1015.656851][T32156] usb 3-1: Using ep0 maxpacket: 8 [ 1015.798540][T32214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.806129][T32214] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.876379][ C1] usblp0: nonzero read bulk status received: -71 [ 1016.034654][ T7] usb 3-1: USB disconnect, device number 39 [ 1016.055987][ T7] usblp0: removed 00:00:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f0000000140)={'gre0\x00', 0x0}) 00:00:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x6, 0x5, 0x4, 0xf5, 0x0, 0x0, 0x1000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xad, 0x1, @perf_config_ext={0xffffffffffffff7c, 0x20000000}, 0x10000, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x3, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x30, 0x5, 0x1f, 0x40, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x5a014, 0xde0, 0x3, 0x4, 0x7, 0x9, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="ad0efe8db2a06b0906d90c51bcdb5b7f96635cc0f6f9f8fcad52452593e8127fa56b595d5266d07bedcd9f3057b07d7a3a2001eba630cc6a449e1ea3778499c966e336c4151ed7179c724c565332e5608c0542a15932b57db0dfa68fe07483ae105b888ba163d58fd62cd1ed5925910affa36267d5e8a1bbe226e2c05e573c1de4b16ae069ddb0023da34eb881ebbf2d0a9946e2abb9c5f669533a5bc7eb1187b11ac2c1e7fa72a03dacea9dea3e1935ea01fc02fe5fcdec26c73952c35a71ec41e9f39ea981ac27fd61756567f8105c90ec6a844c76000000000000000000", @ANYRES32, @ANYBLOB="dc6d3794566a7267bf024a025b1a9a3802c54ebdbeafedff08225c4bc19bb8376b59ed22293f28ca29a2e462ca30f2d8481c1ee95aef288ba6e2190c80e3b2bbde762ddb6e113f6278d78b740a4593010000005535a9d50453940d1dfb1b99fd6bae29f3a833"], &(0x7f00000002c0)='GPL\x00', 0x10000, 0x79, &(0x7f0000000300)=""/121, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x0, 0x9}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) 00:00:52 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x6, 0x5, 0x4, 0xf5, 0x0, 0x0, 0x1000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xad, 0x1, @perf_config_ext={0xffffffffffffff7c, 0x20000000}, 0x10000, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x3, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x30, 0x5, 0x1f, 0x40, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x5a014, 0xde0, 0x3, 0x4, 0x7, 0x9, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="ad0efe8db2a06b0906d90c51bcdb5b7f96635cc0f6f9f8fcad52452593e8127fa56b595d5266d07bedcd9f3057b07d7a3a2001eba630cc6a449e1ea3778499c966e336c4151ed7179c724c565332e5608c0542a15932b57db0dfa68fe07483ae105b888ba163d58fd62cd1ed5925910affa36267d5e8a1bbe226e2c05e573c1de4b16ae069ddb0023da34eb881ebbf2d0a9946e2abb9c5f669533a5bc7eb1187b11ac2c1e7fa72a03dacea9dea3e1935ea01fc02fe5fcdec26c73952c35a71ec41e9f39ea981ac27fd61756567f8105c90ec6a844c76000000000000000000", @ANYRES32, @ANYBLOB="dc6d3794566a7267bf024a025b1a9a3802c54ebdbeafedff08225c4bc19bb8376b59ed22293f28ca29a2e462ca30f2d8481c1ee95aef288ba6e2190c80e3b2bbde762ddb6e113f6278d78b740a4593010000005535a9d50453940d1dfb1b99fd6bae29f3a833"], &(0x7f00000002c0)='GPL\x00', 0x10000, 0x79, &(0x7f0000000300)=""/121, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x0, 0x9}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) 00:00:52 executing program 4: r0 = openat$procfs(0xffffff9c, &(0x7f0000002900)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000880)={@empty, @empty, @remote}) 00:00:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, 0x0) 00:00:52 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, 0x0) 00:00:52 executing program 0: syz_io_uring_setup(0x1997, &(0x7f0000005900)={0x0, 0xd29a}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000005980), &(0x7f00000059c0)) 00:00:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc) 00:00:52 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:00:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000004b00)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="49ae59202f17a2f680c4acf518f56f49345fec28e128c03b3ff7258d11ab03199b0d339765b315b6d4193cf2ab21a8eea121e05fe5fefc3b0b3654114a4bf5e5dee4a09c5c9d730ac381f0fea38e50bf0bcc395f530f86ef7d35515708add634ba5f7d7e4ee337695756da4d9029e926fb", 0x71}, {&(0x7f0000000180)="d292ab2117a5dc7d1ad09e62c088f8039e745dcb2fb627bc29e8ba380f6184366067cb78630255faf5c4f5d0f7f2d92496fc268b4db1b167d7da4a1a236e281af41a54af0ffc341b71a69ea17297bf", 0x4f}, {&(0x7f0000000200)="7f037ac2d1d3f3b46bcbd75dda4335fc2212a0f498b33a43db5dc1ff508828aaa12f51331f680c13c4438388e65755553cdc6dc35e799d7779fa0c95311a472462878f79d628bbbda5c87fe7d38ddd169b62e6cb50460f9aad10d31c543dec579796813e66fe53623a7e2cce0095b0ebee9cb467102ce20701d10e678cf9f3bb0a1acb9deacc52f2e180235cc784a1203c7ebc303851acf4252dad8ce28b0227903e052cc378fa68e97ab7744272f3d7c9687eca53", 0xb5}, {&(0x7f00000002c0)="40b264a727ff6dfa29d8104aa54d62fe205ec2e57a3828bb2c08e2239b69500fe71e0c4cccef89c07fc72bf46538bd59289ba13d207f1d457ced3ce9ea1af98cd4c4ece161d115b3324801bfe86393a9dff10cea8072048d8abe4ba79a52b8617654883f0d607f30d947b2b6c0f4a84379172bdcef15efc193e3809b3150b2569f0126a895322dcd864632f7e14e56a83d9873eaed1161579cdf3229ce62e7033c3e4f238c2fb1b9f641ce884e20c5a3b0b83185f3d35086e27368ae95c80bbb77c91617f524eab564cd", 0xca}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)="2f7c7cf79b4417bc43682551461b3e598d9ab4c3b4c363cf362abad523fe818487eb0ca825088d9e82ba", 0x2a}, {&(0x7f0000000480)="b9e2d345070cfd6936350f655bf09858e4ff426381d7d69cc6f08ad3223ef7a0cef2ea45ab20fe0fb0fcfd7c4b6ee5938ee2fa1ebb6e6254afd44417377a43e2b2cf0572313364c0d44aedde3d0334320ba07a04ee1ee66258b9757363c43a729a85b50c766dc84ba83c4a08b0b6b89d13700904008511154ce19531", 0x7c}, {&(0x7f0000000500)="fc71c3704ec3894d827c9543661252f5f449af30329c1ec6e05b16a203fcc11753cf139c2967c22cd3cc96", 0x2b}, {&(0x7f0000000540)="8964a10172b8820e1c7df2b533a78817a2dbd0fffa51fc6e4a792691d291ef8b4d67a7b00e8e4bb48fdc2d000dab7c927adcfef1e313020a5a0d36a6", 0x3c}, {&(0x7f0000000580)="ae35ecf32b1175e2d7a01a4b5ae50e9c290d375e7dad528881bc9313a4420693e79f06ca4ec749603ffac8088401d2f931aee27ad8085c0ae723f7121a8220c324ce331dce7c7fccd1ae488f4eb528c1f546d6cf0d46563d90ae462cbd2d9e97c00a45849417762d719f2e8e98e594922b9f015490cd85f43d16da136a3bdd10dcb3d32290a6d182fc002d4712d431b0406e10", 0x93}, {&(0x7f0000000640)="ad2a841dcb8e0289ca7f4cfb95ffc15da5d120d83c7fca7e552bcaa6fbd5e6569ab1a4a1ac519fa7bd3d55b4228da75753aa8ae6f2051b7e4cf75be5ccddb92d4ea797fdde10d536ced8d8caf87bd125a2e72f9c17ff6dc3c9723de1f6a54023f97b5c16e7780d323779df7a7e183d41069f32bb1303787586d7b474d99cac5d9769b52827fcbfc293a36535c8ae2893c448ac6c71f8e13455b783145607c3686191180a73463a296c91188bd745a50784d90182", 0xb4}, {&(0x7f0000000700)="5eeb46146bea71775c17348f8571ab5e84dfe29618445753953163e5b6b7d4ca40e85b968987fe66685c7e3a6f0964c3a74af082c3f7e654d33007cb13b2a003f50fff4ed454a1157beb7ca2fb10dd4410507c1e26019ec333d36998e6727a6247a001fa90de47cec7cfd604849811c9b75c922effd80775605a89d08b03040a141a21019027bc135c64ca1752319b426586fdad1383df4ec3324e2ca8122af26b68d0e104c76a3e417465717c1e9495b02adbc433d640557156959a23f7428eb036333af6cd4d2cda6b6d615e8edf", 0xcf}, {&(0x7f0000000800)="c2601916da0f64e0a586321bdd2f664aab454005c7a87a903392269203ca7224e004ebbb061552b31621f4387454e5a6fe0bf48ac929b80a8e330fb90e0d57f29a7c005f1582ed3eefd5", 0x4a}], 0x8}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000009c0)="8c", 0x1}], 0x1}}], 0x3, 0x8081) 00:00:53 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0c0583b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x6, 0x5, 0x4, 0xf5, 0x0, 0x0, 0x1000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xad, 0x1, @perf_config_ext={0xffffffffffffff7c, 0x20000000}, 0x10000, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x3, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x30, 0x5, 0x1f, 0x40, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x5a014, 0xde0, 0x3, 0x4, 0x7, 0x9, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="ad0efe8db2a06b0906d90c51bcdb5b7f96635cc0f6f9f8fcad52452593e8127fa56b595d5266d07bedcd9f3057b07d7a3a2001eba630cc6a449e1ea3778499c966e336c4151ed7179c724c565332e5608c0542a15932b57db0dfa68fe07483ae105b888ba163d58fd62cd1ed5925910affa36267d5e8a1bbe226e2c05e573c1de4b16ae069ddb0023da34eb881ebbf2d0a9946e2abb9c5f669533a5bc7eb1187b11ac2c1e7fa72a03dacea9dea3e1935ea01fc02fe5fcdec26c73952c35a71ec41e9f39ea981ac27fd61756567f8105c90ec6a844c76000000000000000000", @ANYRES32, @ANYBLOB="dc6d3794566a7267bf024a025b1a9a3802c54ebdbeafedff08225c4bc19bb8376b59ed22293f28ca29a2e462ca30f2d8481c1ee95aef288ba6e2190c80e3b2bbde762ddb6e113f6278d78b740a4593010000005535a9d50453940d1dfb1b99fd6bae29f3a833"], &(0x7f00000002c0)='GPL\x00', 0x10000, 0x79, &(0x7f0000000300)=""/121, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x0, 0x9}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4ea00) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)) [ 1017.017455][T10862] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1017.288599][T10862] usb 3-1: Using ep0 maxpacket: 8 [ 1017.407109][T10862] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1017.415600][T10862] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1017.433347][T10862] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1017.458720][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1017.496500][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1017.507170][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1017.518660][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1017.529603][T10862] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1017.616555][T10862] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1017.625965][T10862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1017.643202][T10862] usb 3-1: SerialNumber: syz [ 1017.668086][T32245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.675346][T32245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.697821][T10862] hub 3-1:5.0: bad descriptor, ignoring hub [ 1017.705199][T10862] hub: probe of 3-1:5.0 failed with error -5 [ 1017.921461][T32245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1017.933010][T32245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1018.197631][T10862] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1018.957763][T32245] usb 3-1: reset high-speed USB device number 40 using dummy_hcd [ 1019.226606][T32245] usb 3-1: Using ep0 maxpacket: 8 [ 1019.398721][T32291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1019.406955][T32291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1019.466335][ C1] usblp0: nonzero read bulk status received: -71 [ 1019.645058][ T9789] usb 3-1: USB disconnect, device number 40 [ 1019.676726][ T9789] usblp0: removed 00:00:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:56 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000180)="d11e5a8d57a88850d7ed5c19618d69fca172bc2de46f10d2d5dec09cb1ff9735ebcaebaecf5db3ecb20379d313c7c72bc328c4ae991a9c3a7abdac0bd59243db5c7a58645b70b9707c2d0d39d60fb4332ba89538d922f0f1831707000000e514b2acbdbfde8514315f35e940f153c2bdf690a4fd8e9dcd78e1f7bb629a4884e746a7c22f61d267c1409ad9de7810ef6b717eae8624a87b22b19f9d4da71d25e0a8b4", 0xfffffffffffffef4, 0x24000040, 0x0, 0x0) 00:00:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') openat$cgroup_devices(r0, &(0x7f0000002180)='devices.allow\x00', 0x2, 0x0) 00:00:56 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:00:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) 00:00:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 00:00:56 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') 00:00:56 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000007180), 0x8, 0x0) 00:00:56 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:00:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 00:00:56 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x4}, 0x0, &(0x7f00000001c0)={0x9}, 0x0) 00:00:56 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) [ 1020.566438][ T7] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1020.816420][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1020.936513][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1020.945184][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1020.957242][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1020.969078][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1020.997205][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1021.024249][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1021.072661][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1021.088021][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1021.177224][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1021.190968][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1021.205893][ T7] usb 3-1: SerialNumber: syz [ 1021.247864][T32322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1021.255161][T32322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1021.307209][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 1021.313371][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 1021.510286][T32322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1021.527570][T32322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1021.779890][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1022.396849][T32322] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 1022.636566][T32322] usb 3-1: Using ep0 maxpacket: 8 [ 1022.798540][T32362] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1022.806092][T32362] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1022.886369][ C1] usblp0: nonzero read bulk status received: -71 [ 1023.045498][ T9789] usb 3-1: USB disconnect, device number 41 [ 1023.060188][ T9789] usblp0: removed 00:00:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:00:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000e8c0)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)}], 0x2, 0x0) 00:00:59 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000017c0)={{}, {0x0, r0+10000000}}, 0x0) 00:00:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100008ffc00000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 00:00:59 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x202400, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 00:00:59 executing program 3: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x101603) 00:00:59 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140), 0x0) 00:00:59 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:00:59 executing program 5: syz_io_uring_setup(0x35f3, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:00:59 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x101c01) write$midi(r0, &(0x7f0000000140)="d2", 0x1) 00:00:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15bd}], 0x1}, 0x700) 00:01:00 executing program 0: mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) [ 1023.976404][ T9789] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1024.216400][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1024.338561][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1024.354312][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1024.408027][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1024.435770][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1024.468388][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1024.523241][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1024.559123][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1024.662540][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1024.778431][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1024.798193][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1024.821026][ T9789] usb 3-1: SerialNumber: syz [ 1024.847796][T32394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1024.855325][T32394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1024.897245][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1024.903396][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 1025.100488][T32394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1025.117723][T32394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1025.347473][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1025.986804][T32394] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 1026.236486][T32394] usb 3-1: Using ep0 maxpacket: 8 [ 1026.398249][T32450] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.405920][T32450] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.476380][ C1] usblp0: nonzero read bulk status received: -71 [ 1026.648437][ T7] usb 3-1: USB disconnect, device number 42 [ 1026.664541][ T7] usblp0: removed 00:01:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @enter_looper], 0x62, 0x0, &(0x7f00000001c0)="c96681300794aae977913ca8bbf4d40b926d5c0f284d67aa044bab9df29b22ab0580bd3baae10eea47ae169d7ca9311e1c088808c246ba7c6945c7c5e839778cdefd1cd0b62b16f8b615ee3ce4f38d62f180cb20f3137cdde4b09c7f8045c98fd319"}) 00:01:03 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="cb56", 0x2) 00:01:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 00:01:03 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)}], 0x2) 00:01:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15bd}], 0x1}, 0x700) 00:01:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000004b80)=ANY=[@ANYBLOB='c']) 00:01:03 executing program 1: socketpair(0x1, 0x0, 0x800, 0x0) [ 1027.281661][T32482] new mount options do not match the existing superblock, will be ignored 00:01:03 executing program 1: socket$inet6(0xa, 0x2, 0x1f) 00:01:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x0, 0x0) select(0x40, &(0x7f0000000e40), &(0x7f0000000e80)={0xa62}, &(0x7f0000000ec0), &(0x7f0000000f00)={0x0, 0xea60}) [ 1027.334475][T32487] new mount options do not match the existing superblock, will be ignored [ 1027.362625][T32491] hfs: unable to parse mount options 00:01:03 executing program 5: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000103) 00:01:03 executing program 3: r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) [ 1027.536399][ T7] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1027.782192][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1027.907130][ T7] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1027.915542][ T7] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1027.960580][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1028.002121][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1028.048489][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1028.076431][ T7] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1028.103768][ T7] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1028.143175][ T7] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1028.316962][ T7] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1028.326028][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.364999][ T7] usb 3-1: SerialNumber: syz [ 1028.407800][T32481] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.415121][T32481] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.450625][ T7] hub 3-1:5.0: bad descriptor, ignoring hub [ 1028.461920][ T7] hub: probe of 3-1:5.0 failed with error -5 [ 1028.671655][T32481] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.680746][T32481] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.920997][ T7] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1029.256361][ C1] usblp0: nonzero read bulk status received: -71 [ 1029.379595][T32481] udc-core: couldn't find an available UDC or it's busy [ 1029.391980][T32481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1029.426783][T26512] usb 3-1: USB disconnect, device number 43 [ 1029.448491][T26512] usblp0: removed 00:01:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:06 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 00:01:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 00:01:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x1000) 00:01:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000000fa00)='uid_map\x00') read$char_raw(r0, &(0x7f0000000000)={""/63785}, 0xfffffffffffffec2) 00:01:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15bd}], 0x1}, 0x700) 00:01:06 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, 0x0, 0x1000) 00:01:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0xd0) 00:01:06 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:01:06 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='maps\x00') 00:01:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket(0x10, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/1, 0x1, 0x1, 0x0, 0x0) 00:01:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x60, [{0x0, 0x0, 0x0, 0x6}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) [ 1030.340889][T32578] xt_bpf: check failed: parse error [ 1030.347637][T10862] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1030.596516][T10862] usb 3-1: Using ep0 maxpacket: 8 [ 1030.747347][T10862] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1030.769901][T10862] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1030.799528][T10862] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1030.836202][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1030.857823][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1030.877473][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1030.916399][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1030.946385][T10862] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1031.067223][T10862] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1031.080792][T10862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1031.097154][T10862] usb 3-1: SerialNumber: syz [ 1031.127769][T32560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1031.135600][T32560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1031.167329][T10862] hub 3-1:5.0: bad descriptor, ignoring hub [ 1031.174126][T10862] hub: probe of 3-1:5.0 failed with error -5 [ 1031.370099][T32560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1031.383121][T32560] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1031.627609][T10862] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1031.956378][ C0] usblp0: nonzero read bulk status received: -71 [ 1032.084180][T32560] udc-core: couldn't find an available UDC or it's busy [ 1032.092065][T32560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1032.136785][T26512] usb 3-1: USB disconnect, device number 44 [ 1032.161855][T26512] usblp0: removed 00:01:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3ff) 00:01:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) 00:01:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15bd}], 0x1}, 0x700) 00:01:08 executing program 3: setrlimit(0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffff9}) 00:01:08 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') 00:01:08 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:01:08 executing program 5: syz_emit_ethernet(0xe81, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipx={0x8137, {0xffff, 0xe73, 0x0, 0x0, {@random, @current}, {@random, @broadcast}, "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"}}}}, 0x0) 00:01:08 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x200100a, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 00:01:08 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2006c1, 0x0) 00:01:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 00:01:09 executing program 5: pselect6(0x40, &(0x7f0000001800), 0x0, &(0x7f0000001880), &(0x7f0000001900), &(0x7f0000001980)={0x0}) [ 1033.026446][ T9789] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1033.296372][ T9789] usb 3-1: Using ep0 maxpacket: 8 [ 1033.426435][ T9789] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1033.435032][ T9789] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1033.461300][ T9789] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1033.473962][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1033.514097][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1033.541044][ T9789] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1033.576377][ T9789] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1033.606479][ T9789] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1033.707091][ T9789] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1033.716886][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1033.724918][ T9789] usb 3-1: SerialNumber: syz [ 1033.757711][T32625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1033.771792][T32625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1033.817274][ T9789] hub 3-1:5.0: bad descriptor, ignoring hub [ 1033.823474][ T9789] hub: probe of 3-1:5.0 failed with error -5 [ 1034.019573][T32625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.028326][T32625] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.260494][ T9789] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1034.596384][ C1] usblp0: nonzero read bulk status received: -71 [ 1034.710329][T32625] udc-core: couldn't find an available UDC or it's busy [ 1034.718040][T32625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1034.766818][ T7] usb 3-1: USB disconnect, device number 45 [ 1034.794052][ T7] usblp0: removed 00:01:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040), 0x4) 00:01:11 executing program 0: getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 00:01:11 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/full\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 00:01:11 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2c080, 0x0) 00:01:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 00:01:11 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/full\x00', 0x100, 0x0) 00:01:11 executing program 3: semget(0x3, 0x0, 0x21) 00:01:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 00:01:11 executing program 4: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300)='freezer.state\x00', 0x2, 0x0) 00:01:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8f0) 00:01:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@var, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0383"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "16eaa1"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "91258c"}]}}, &(0x7f0000000280)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 00:01:11 executing program 4: syz_usb_connect(0x0, 0x264, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002b344ba20c71b411026c7010203010902520201040720"], &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x5, 0xd9, 0x0, 0x0, 0x1}, 0x54, &(0x7f0000000540)=ANY=[]}) 00:01:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:01:11 executing program 3: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xfffffffffffffe00}]) 00:01:11 executing program 5: syz_usb_connect(0x0, 0x264, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002b344ba20c71b411026c7010203010902520201040720950904e40808020e00f709050301000481890909050e0010000101710905040308000104000725018109da27090501100004e71a118d24d0665f723307d7e2e27b50eb00b9ad87168bb22c917370988e0ec1b4e090646b199717f4df8c2b5c5f81e2a6a7866b3c3d5653b1b4aa9933a6a2772e003f799220c2cf3619c3f9e3fd7c7a0f0cb2a546fcc251963afc4d057cea197c9d278b5265b631d2bc78a2fecddb4b353292d15aca0891144a608b7c644d02b23bca5ebfe4c98007a7a3c84b61fb6009050910400006770509050a034000018000072501020407000725018107010109050e000800a5011f6703cf655a04edefec4df0d143bce54138ab74529f4e7521b6d0ce66fb96e12f8b5cde9bb2fe3e44808fd9e104c57125b87e886c05694eae25bbae3209867137c7560161a231f78ee88672f0edc22052669c1c5fd07b938c74bd03337e3a863ecd700235de033c09050502000401010707250103f70500e8005ac5ba2f3dfb76c3506d514622f36de0637c519446ccbc8a90b60ac4a924bf754c1c360d663ca00d7a0293129542709f7283b5a971fbee046c98dbc376a0899022ee067b23afd234c866c53e37f1fd1df72166e777cc0e05c405cb7a02c91eda53cdff3e33080bae137d3fe72a36a192f9504dc0b9c2fdbc260350ba0fdff639fc6651a76c91984a5a8d3deb338ad6d1d5c2302c249ae83151bfe96dc90bf711f2c9b905b41f474feecc779c5585089e2983f4872ae44e6c8d14cfc36bfe8015"], &(0x7f0000000380)={0x0, 0x0, 0x54, &(0x7f0000000540)=ANY=[@ANYBLOB="050f5400060710020093040018100a7cc30000000f00060000c0ff0000c000000fc0000007100204ffff070a10030001000109020014100400bae75a7ac909bb6db43323cc81072a7c0b10010419000907050081764f61ea9f8a41539097e1af1ee668b1f5a5866dd93efd28f3906dc4de389d22b6e4461fadbf78476f37f6db082bca2bf1ab054074ee8a263edff09f7e2af3d67f06dea502f7a231e01bb0b4d3057607fe378e37bdc9ee2d0afa69405cc9204674c177bd5a6858c98b3dcc733e81ba1e67cc689df1d95897c02a21552bff31d1450df6f76dc3b49f32"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3401}}]}) recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/247, 0xf7, 0x1, &(0x7f00000004c0)={0x11, 0x4, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14) [ 1035.612744][T10862] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1035.886420][T10862] usb 3-1: Using ep0 maxpacket: 8 [ 1035.936349][ T9795] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1035.987302][ T7] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1036.010608][T10862] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1036.031561][T10862] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1036.073450][T10862] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1036.112640][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1036.156361][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1036.186362][ T9795] usb 5-1: Using ep0 maxpacket: 32 [ 1036.191436][T10862] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1036.235192][T10862] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1036.236385][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 1036.276351][T10862] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1036.308258][ T9795] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.331684][ T9795] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1036.397170][ T7] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 1036.406660][ T7] usb 6-1: config 4 has no interface number 0 [ 1036.408121][T10862] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1036.427533][ T7] usb 6-1: config 4 interface 228 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 1036.445554][T10862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1036.459929][ T7] usb 6-1: config 4 interface 228 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1036.479502][ T7] usb 6-1: config 4 interface 228 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1036.500361][ T7] usb 6-1: config 4 interface 228 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1036.505918][T10862] usb 3-1: SerialNumber: syz [ 1036.517248][ T9795] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=c7.26 [ 1036.537818][T32687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.557293][T32687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.558400][ T7] usb 6-1: config 4 interface 228 has no altsetting 0 [ 1036.573679][ T9795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.595792][T10862] hub 3-1:5.0: bad descriptor, ignoring hub [ 1036.615137][ T9795] usb 5-1: Product: syz [ 1036.615249][T10862] hub: probe of 3-1:5.0 failed with error -5 [ 1036.619984][ T9795] usb 5-1: Manufacturer: syz [ 1036.638086][ T9795] usb 5-1: SerialNumber: syz [ 1036.776432][ T7] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=c7.26 [ 1036.797957][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.806085][T32687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.816957][ T7] usb 6-1: Product: syz [ 1036.821227][ T7] usb 6-1: Manufacturer: syz [ 1036.826041][ T7] usb 6-1: SerialNumber: syz [ 1036.828035][T32687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.861272][T32717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1036.927683][ T9795] usb 5-1: USB disconnect, device number 36 [ 1037.077660][T10862] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1037.177405][ T7] cdc_mbim 6-1:4.228: bind() failure [ 1037.184246][ T7] option 6-1:4.228: GSM modem (1-port) converter detected [ 1037.209556][ T7] usb 6-1: USB disconnect, device number 13 [ 1037.220069][ T7] option 6-1:4.228: device disconnected [ 1037.666386][T26512] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1037.886393][T10862] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1037.906433][T26512] usb 5-1: Using ep0 maxpacket: 32 [ 1038.027257][T26512] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.056340][T26512] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1038.146488][T10862] usb 6-1: Using ep0 maxpacket: 32 [ 1038.216969][T26512] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=c7.26 [ 1038.232168][ T9795] usb 3-1: USB disconnect, device number 46 [ 1038.240369][T26512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.257175][ T9795] usblp0: removed [ 1038.277976][T10862] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 1038.290669][T26512] usb 5-1: Product: syz [ 1038.295861][T10862] usb 6-1: config 4 has no interface number 0 [ 1038.305730][T26512] usb 5-1: Manufacturer: syz [ 1038.314642][T10862] usb 6-1: config 4 interface 228 altsetting 8 endpoint 0x3 has an invalid bInterval 129, changing to 7 [ 1038.321185][T26512] usb 5-1: SerialNumber: syz [ 1038.350095][T10862] usb 6-1: config 4 interface 228 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1038.382967][T10862] usb 6-1: config 4 interface 228 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1038.408242][T10862] usb 6-1: config 4 interface 228 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1038.454008][T10862] usb 6-1: config 4 interface 228 has no altsetting 0 [ 1038.628956][T26512] usb 5-1: USB disconnect, device number 37 [ 1038.637013][T10862] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=c7.26 [ 1038.657845][T10862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.666050][T10862] usb 6-1: Product: syz [ 1038.703257][T10862] usb 6-1: Manufacturer: syz [ 1038.715769][T10862] usb 6-1: SerialNumber: syz 00:01:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:14 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='2', 0x1) 00:01:14 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000005f80)) 00:01:14 executing program 1: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 00:01:14 executing program 4: fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) 00:01:14 executing program 5: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x5}, 0x0, 0x0, 0x0) [ 1038.756703][T10862] usb 6-1: can't set config #4, error -71 [ 1038.789228][T10862] usb 6-1: USB disconnect, device number 14 00:01:15 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.\x00', 0x0, 0x0) 00:01:15 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:01:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b23000/0x1000)=nil, 0xb00}, &(0x7f0000000080)=0x10) 00:01:15 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}]}) 00:01:15 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000340)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) 00:01:15 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) [ 1039.202150][T26512] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1039.326477][T10862] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1039.334222][ T9789] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1039.386431][ T9795] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1039.466372][T26512] usb 3-1: Using ep0 maxpacket: 8 [ 1039.576387][T10862] usb 6-1: Using ep0 maxpacket: 8 [ 1039.587862][T26512] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1039.602465][T26512] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1039.606849][ T9789] usb 5-1: Using ep0 maxpacket: 8 [ 1039.624372][T26512] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1039.635821][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1039.654295][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 1039.675084][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1039.707545][T10862] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1039.717233][T10862] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1039.750389][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1039.768975][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1039.779910][T10862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.790608][ T9789] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1039.810914][ T9789] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1039.814648][T26512] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.839773][ T9795] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1039.846104][ T9789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.860168][ T9795] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1039.877325][T10862] usb 6-1: language id specifier not provided by device, defaulting to English [ 1039.892276][ T9795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.936582][ T9795] usb 2-1: language id specifier not provided by device, defaulting to English [ 1039.976498][T26512] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1039.986174][T26512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.003344][T26512] usb 3-1: SerialNumber: syz [ 1040.027686][T10862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.038465][ T341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.046073][ T341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.059273][T10862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.077158][ T9795] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.090946][T10862] usb 6-1: Product: syz [ 1040.095242][ T9795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.095258][ T9795] usb 2-1: Product: syz [ 1040.108961][T26512] hub 3-1:5.0: bad descriptor, ignoring hub [ 1040.115334][T26512] hub: probe of 3-1:5.0 failed with error -5 [ 1040.147120][T10862] usb 6-1: SerialNumber: syz [ 1040.151698][ T9795] usb 2-1: Manufacturer: 《 [ 1040.167513][ T9789] usb 5-1: string descriptor 0 read error: -22 [ 1040.168338][ T9795] usb 2-1: SerialNumber: syz [ 1040.174063][ T9789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.174082][ T9789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.312689][ T341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.327373][ T341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1040.526473][T10862] usb 6-1: 0:2 : does not exist [ 1040.565337][T10862] usb 6-1: USB disconnect, device number 15 [ 1040.578313][T26512] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1040.647516][ T9795] usb 2-1: 0:2 : does not exist [ 1040.668940][ T9789] usb 5-1: 0:2 : does not exist [ 1040.690860][ T9795] usb 2-1: USB disconnect, device number 8 [ 1040.725650][ T9789] usb 5-1: USB disconnect, device number 38 [ 1041.216383][T10862] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1041.316583][ T9795] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1041.326361][ T9789] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1041.466395][T10862] usb 6-1: Using ep0 maxpacket: 8 [ 1041.566386][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 1041.580491][ T9789] usb 5-1: Using ep0 maxpacket: 8 [ 1041.586508][T10862] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1041.600692][T10862] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1041.615041][T10862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.661891][T10862] usb 6-1: language id specifier not provided by device, defaulting to English [ 1041.691030][ T9795] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1041.700574][ T9795] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1041.719992][ T9795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.721632][ T9789] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1041.741198][ T17] usb 3-1: USB disconnect, device number 47 [ 1041.750438][ T9789] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1041.761807][ T17] usblp0: removed [ 1041.773226][ T9789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.776941][ T9795] usb 2-1: language id specifier not provided by device, defaulting to English [ 1041.816625][T10862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.833714][T10862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.852073][T10862] usb 6-1: Product: syz [ 1041.860397][T10862] usb 6-1: SerialNumber: syz [ 1041.938865][ T9795] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.962025][ T9795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.979557][ T9795] usb 2-1: Product: syz [ 1041.984454][ T9795] usb 2-1: Manufacturer: 《 [ 1041.994887][ T9795] usb 2-1: SerialNumber: syz [ 1042.116728][T10862] usb 6-1: 0:2 : does not exist [ 1042.122915][ T9789] usb 5-1: string descriptor 0 read error: -71 [ 1042.126442][ T9795] usb 2-1: can't set config #1, error -71 [ 1042.137364][ T9795] usb 2-1: USB disconnect, device number 9 [ 1042.147650][ T9789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.177262][ T9789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.190050][T10862] usb 6-1: USB disconnect, device number 16 [ 1042.257270][ T9789] usb 5-1: can't set config #1, error -71 [ 1042.297321][ T9789] usb 5-1: USB disconnect, device number 39 00:01:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 00:01:18 executing program 3: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x3a1002, 0x0) 00:01:18 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000740)='devlink\x00') 00:01:18 executing program 5: io_setup(0xffff, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 00:01:18 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x140c, 0x403}, 0x10}}, 0x0) 00:01:18 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:01:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x3, r2}]) 00:01:18 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 00:01:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfda6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@local, @private1, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) 00:01:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:01:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000140)) [ 1042.726398][ T9795] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1042.776450][ T9789] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1042.966384][ T9795] usb 3-1: Using ep0 maxpacket: 8 [ 1043.026403][ T9789] usb 5-1: Using ep0 maxpacket: 8 [ 1043.086640][ T9795] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1043.101199][ T9795] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1043.121850][ T9795] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1043.133819][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1043.154064][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1043.165996][ T9795] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1043.178192][ T9789] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1043.182661][ T9795] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1043.206333][ T9795] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1043.206465][ T9789] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1043.252626][ T9789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1043.306492][ T9795] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1043.315668][ T9795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1043.342686][ T9795] usb 3-1: SerialNumber: syz [ 1043.367897][ T493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.375265][ T493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.430883][ T9795] hub 3-1:5.0: bad descriptor, ignoring hub [ 1043.446489][ T9795] hub: probe of 3-1:5.0 failed with error -5 [ 1043.571626][ T9789] usb 5-1: string descriptor 0 read error: -22 [ 1043.578972][ T9789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1043.624149][ T9789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.637636][ T493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.645047][ T493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.738487][ T9789] usb 5-1: 0:2 : does not exist [ 1043.947577][ T9795] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1044.028650][ T9789] usb 5-1: USB disconnect, device number 40 [ 1045.087964][ T17] usb 3-1: USB disconnect, device number 48 [ 1045.099180][ T17] usblp0: removed 00:01:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000900000825643e6ffa0000000101090224ffff050074980904000012070103000905010200ffe000000905820241f7"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f000046f000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:21 executing program 5: io_setup(0x4, &(0x7f0000000100)) io_setup(0x8000, &(0x7f0000000480)) 00:01:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)) 00:01:21 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x8) 00:01:21 executing program 4: syz_init_net_socket$llc(0x1a, 0x95d955cc259b01e5, 0x0) 00:01:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x2e}]}}, &(0x7f00000001c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) [ 1045.663348][ T570] EXT4-fs (loop1): unsupported inode size: 0 [ 1045.691090][ T570] EXT4-fs (loop1): blocksize: 4096 00:01:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2e}]}}, &(0x7f00000001c0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:01:22 executing program 5: syz_genetlink_get_family_id$batadv(0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003280)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000032c0)={'batadv_slave_0\x00'}) 00:01:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000080)={'vxcan1\x00'}) 00:01:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'vxcan1\x00', @ifru_data=0x0}) [ 1045.986498][T26512] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1046.246757][T26512] usb 3-1: Using ep0 maxpacket: 8 [ 1046.367075][T26512] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1046.376107][T26512] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1046.393270][T26512] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1046.407959][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1046.446428][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1046.461235][T26512] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1857, setting to 1024 [ 1046.478199][T26512] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1046.492763][T26512] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1046.587061][T26512] usb 3-1: New USB device found, idVendor=6425, idProduct=6f3e, bcdDevice= 0.fa [ 1046.600556][T26512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1046.622812][T26512] usb 3-1: SerialNumber: syz [ 1046.647739][ T577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1046.655277][ T577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1046.692708][T26512] hub 3-1:5.0: bad descriptor, ignoring hub [ 1046.699517][T26512] hub: probe of 3-1:5.0 failed with error -5 [ 1046.902506][ T577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1046.918071][ T577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1047.157551][T26512] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x6425 pid 0x6F3E [ 1047.926893][ T577] usb 3-1: reset high-speed USB device number 49 using dummy_hcd [ 1048.186382][ T577] usb 3-1: Using ep0 maxpacket: 8 [ 1048.328626][ T613] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1048.341048][ T613] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1048.406290][ C0] usblp0: nonzero read bulk status received: -71 [ 1048.570332][T10862] usb 3-1: USB disconnect, device number 49 [ 1048.580523][T10862] usblp0: removed 00:01:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 00:01:25 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x103401, 0x0) 00:01:25 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r0) 00:01:25 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff0800ffff86dd602bab0000142b00476a3500000052040000000500000000f9"], 0x0) 00:01:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:01:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x9) 00:01:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 00:01:25 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x2000000a}) 00:01:25 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) [ 1049.292373][ T644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:01:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_addrs=@l2tp={0x2, 0x0, @multicast1}}) 00:01:25 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000a80)={&(0x7f00000004c0), 0xc, &(0x7f0000000a40)={0x0}}, 0x0) 00:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8916, 0x0) 00:01:25 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) [ 1049.365037][ T650] overlayfs: 'file0' not a directory [ 1049.402567][ T650] overlayfs: './file0' not a directory 00:01:25 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller0\x00', @ifru_ivalue}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 00:01:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000b80), 0x4) 00:01:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:01:26 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) 00:01:26 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x101, 0x4) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) r3 = socket(0x2b, 0x800, 0x73) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000585284e4a7fcb86e259827bd7000fce4df252e09", @ANYRES32=r2, @ANYBLOB='\f\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40855}, 0x4881) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", ""]}, 0x28}}, 0x40) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) ioctl$sock_SIOCGIFCONF(r0, 0x400448c9, 0x0) 00:01:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0xc, 0x0, &(0x7f00000000c0)) 00:01:26 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000003740)='batadv\x00') 00:01:26 executing program 1: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x40240) 00:01:26 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000001580)={'syztnl2\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400400, 0x0) [ 1050.136842][ T697] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0 00:01:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:26 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:01:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x101, 0x4) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) r3 = socket(0x2b, 0x800, 0x73) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000585284e4a7fcb86e259827bd7000fce4df252e09", @ANYRES32=r2, @ANYBLOB='\f\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40855}, 0x4881) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", ""]}, 0x28}}, 0x40) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) ioctl$sock_SIOCGIFCONF(r0, 0x400448c9, 0x0) 00:01:26 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 00:01:26 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x13, &(0x7f0000000980)={0x2, 'veth0_to_hsr\x00'}, 0x18) 00:01:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8937, &(0x7f0000000140)={'wg1\x00'}) 00:01:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x101, 0x4) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) r3 = socket(0x2b, 0x800, 0x73) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000585284e4a7fcb86e259827bd7000fce4df252e09", @ANYRES32=r2, @ANYBLOB='\f\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40855}, 0x4881) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", ""]}, 0x28}}, 0x40) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) ioctl$sock_SIOCGIFCONF(r0, 0x400448c9, 0x0) 00:01:26 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x3, 0x0, 0x0) 00:01:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x15, 0x8, 0x7ff, 0x2}, 0x40) 00:01:26 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000003c0)=0x1d, 0x4) 00:01:26 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x7, 0x0, 0x0) 00:01:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}]}}, &(0x7f00000004c0)=""/252, 0x32, 0xfc, 0x96d49447}, 0x20) 00:01:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x101, 0x4) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) r3 = socket(0x2b, 0x800, 0x73) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x4, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000585284e4a7fcb86e259827bd7000fce4df252e09", @ANYRES32=r2, @ANYBLOB='\f\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40855}, 0x4881) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40810) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x64}}}}, ["", ""]}, 0x28}}, 0x40) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'macvtap0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000) ioctl$sock_SIOCGIFCONF(r0, 0x400448c9, 0x0) 00:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}}}}) 00:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8929, &(0x7f0000000140)={'wg1\x00'}) 00:01:26 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$isdn(r0, 0x0, 0x0) 00:01:26 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x12021) 00:01:27 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x32, 0x0, &(0x7f00000000c0)) 00:01:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:01:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 00:01:27 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x14, 0x0, 0x0) 00:01:27 executing program 1: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8916, &(0x7f0000000140)={'wg1\x00'}) 00:01:27 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000000980)={0x0, 'veth0_to_hsr\x00'}, 0x20000998) 00:01:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:01:27 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) 00:01:27 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x28, 0x2, 0x20, &(0x7f0000000cc0)={0xffffffffffffffff}) socketpair(0x22, 0x2, 0x79, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendto$l2tp6(r1, &(0x7f0000000d00)="8bd53cb2a62e184733f07c57718de29476bca96cd80a3e13343b37a544dd30f2701076c69b27e909666f0b6996cb28a1f086d6dc84ff0e924f6d68bffe1b69536a659170c8b9e430b9701afb36274fa520639ae6e81586290a9d3adcd075f76b9038dea41779742a9343c55976386218d4f8e0274679c1f618f9b017976ee2", 0x7f, 0x0, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, @sco={0x1f, @none}, @generic={0x1e, "06be361c33dbb07be7e016e8a921"}, @generic={0x4, "b89b7a15ddf406bc9220851d0e3c"}, 0x9, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2c8, 0x3, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000001580)={'syztnl1\x00', 0x0}) 00:01:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f00000002c0)={'gre0\x00', 0x0}) 00:01:27 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:01:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:01:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4) 00:01:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0xbf, &(0x7f0000000400)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:27 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 00:01:27 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 00:01:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000140)={'wg1\x00'}) 00:01:27 executing program 4: r0 = socket(0x1, 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 00:01:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:01:27 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x15, 0x0, 0x0) 00:01:27 executing program 3: socketpair(0x11, 0xa, 0x8, &(0x7f0000000080)) 00:01:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00') 00:01:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@func]}, &(0x7f0000000200)='GPL\x00', 0x1, 0xd6, &(0x7f0000000240)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:27 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000001580)={'ip_vti0\x00', 0x0}) 00:01:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:01:27 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 00:01:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000500), 0x4) 00:01:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='GPL\x00', 0x1, 0xbf, &(0x7f0000000400)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:28 executing program 4: r0 = socket(0xa, 0x2, 0x0) getpeername$llc(r0, 0x0, 0x0) 00:01:28 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40012042, 0x0, 0x0) 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:01:28 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x300}, 0x0) 00:01:28 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x10, &(0x7f0000000980)={0x0, 'veth0_to_hsr\x00'}, 0x18) 00:01:28 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 00:01:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r1, 0x201, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}}, 0x0) 00:01:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f0000001580)={'ip_vti0\x00', 0x0}) 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:01:28 executing program 1: r0 = socket(0x2a, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:01:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x28}}, 0x0) 00:01:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const, @ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/232, 0x4a, 0xe8, 0x1}, 0x20) 00:01:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f00000002c0)={'gre0\x00', 0x0}) 00:01:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000004c0)=""/252, 0x32, 0xfc, 0x96d49447}, 0x20) 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:01:28 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000000)) 00:01:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5421, &(0x7f0000000140)={'wg1\x00'}) 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:01:28 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x30, 0x0, &(0x7f00000000c0)) 00:01:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 00:01:28 executing program 2: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 00:01:28 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x6, 0x0, 0x3) 00:01:28 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x21, 0x0, &(0x7f00000000c0)) 00:01:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f00000002c0)={'gre0\x00', 0x0}) 00:01:28 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dc0000001200130128bd7000ffdbdf2502fc01034e224e23000800002a288da0cabb7fa5ca515313e9de09000000000000000300af982775", @ANYRES32=0x0, @ANYBLOB="03000000050000000700000004000000900001004d"], 0xdc}}, 0x0) 00:01:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0189436, &(0x7f0000000140)={'wg1\x00'}) 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x5c}}, 0x0) 00:01:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={0x0}}, 0x0) 00:01:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000001580)={'ip_vti0\x00', 0x0}) 00:01:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') 00:01:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x5c}}, 0x0) 00:01:29 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:29 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x11, &(0x7f0000000980)={0x0, 'veth0_to_hsr\x00'}, 0x18) 00:01:29 executing program 5: r0 = socket(0x25, 0x1, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4040150) 00:01:29 executing program 4: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000000109030000000000000000004c00000708d0401e7df440d670a50005400000001e0900010073797a300000000008000540000000110800064000000001090001df71a0d95cc05c7eb5f8028c3eb958d564357ecb0ea6cb5096b0f61d43c6b27169487042c4ac6caf110a5a8e1e49796cb609c3c20b74bed67741f0accd2a477d6a55123a6a8e01b403c51da39621145a609dde57d5128f31ac1cad3e593f8b290ec53870eefe5846a1cef1c081252bfd698b809016856d9e4e7e77099f453c314a3a29a5fd5119dd2820c8801881a469ba03298b2ecd9ce0fcb7990b6ac8d13c2b263c73740855bf149d0ebedf083e38d9da6dfc7ba5d9ecc2d44218b85d02c54b6e052b4186fa4362ee58871668d587eedd3654b60d947581a79527025cea"], 0x44}}, 0x80) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000980)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b00)={0x6ac, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x698, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x200, @private1={0xfc, 0x1, [], 0x1}, 0x86}}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x5}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c876147a4b397b9a76c113253527ff26a1005c52560f905acb806a4291e9441a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x401}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bded1cbc2a655a323368c47c7475fed1d4ab312dcbd21b38feccb3cbf9027240"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}, {0x4}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffc}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @mcast2, 0x101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10001, @mcast2, 0x4}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88e2f866dd2d679dd937de0a629a04cf5155eb716d6eddbc479047c567f1e661"}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x1}, 0x48e1200d57c2406f) 00:01:29 executing program 1: r0 = socket(0x18, 0x0, 0x1) sendmmsg$unix(r0, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:01:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x5c}}, 0x0) 00:01:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) 00:01:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f00000002c0)={'gre0\x00', 0x0}) 00:01:29 executing program 1: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_POLL(r1, 0x0, 0x1) 00:01:29 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) getpgid(r1) 00:01:29 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:29 executing program 5: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78}, 0x78) 00:01:29 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x96) 00:01:29 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:29 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') write$P9_RAUTH(r0, 0x0, 0x0) 00:01:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) [ 1053.838069][ T34] audit: type=1804 audit(1607299289.991:138): pid=926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir430805140/syzkaller.HQ4sqM/818/file0" dev="sda1" ino=16028 res=1 errno=0 00:01:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:30 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:30 executing program 3: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r1, &(0x7f0000000140), 0x12) 00:01:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') syz_fuse_handle_req(r0, &(0x7f0000000380)="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", 0x2000, &(0x7f0000006ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1053.975997][ T34] audit: type=1804 audit(1607299290.031:139): pid=926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir430805140/syzkaller.HQ4sqM/818/file0" dev="sda1" ino=16028 res=1 errno=0 00:01:30 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') write$P9_RGETLOCK(r0, 0x0, 0x0) 00:01:30 executing program 2: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101}], {0x14}}, 0x70}}, 0x0) 00:01:30 executing program 5: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_INIT(r1, &(0x7f0000000080)={0x50}, 0x50) 00:01:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) 00:01:30 executing program 2: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101}], {0x14}}, 0x70}}, 0x0) 00:01:30 executing program 1: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_DIRENT(r1, &(0x7f0000000380)={0x10}, 0x10) 00:01:30 executing program 2: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101}], {0x14}}, 0x70}}, 0x0) 00:01:31 executing program 3: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60}, 0x60) 00:01:31 executing program 4: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_LSEEK(r1, &(0x7f00000001c0)={0x18}, 0x18) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 00:01:31 executing program 2: r0 = socket(0x0, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:01:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:01:31 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:01:31 executing program 2: r0 = socket(0x0, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:01:31 executing program 4: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0}, 0x98) 00:01:31 executing program 1: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$P9_RGETLOCK(r1, 0x0, 0x23) 00:01:31 executing program 2: r0 = socket(0x0, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:31 executing program 5: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) 00:01:32 executing program 3: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0xffffff45) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') write$FUSE_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) 00:01:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:32 executing program 2: r0 = socket(0x25, 0x0, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:32 executing program 2: r0 = socket(0x25, 0x0, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:32 executing program 2: r0 = socket(0x25, 0x0, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 00:01:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b37, 0x0) 00:01:32 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000001140)=""/240) 00:01:32 executing program 2: socket(0x25, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:32 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000140)={[{@fat=@quiet='quiet'}]}) [ 1056.656417][ T1062] FAT-fs (loop5): bogus number of reserved sectors [ 1056.663253][ T1062] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1056.719253][ T1062] FAT-fs (loop5): bogus number of reserved sectors [ 1056.728188][ T1062] FAT-fs (loop5): Can't find a valid FAT filesystem 00:01:33 executing program 2: socket(0x25, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 00:01:33 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:01:33 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "472b1358ca8ca1f235d9b5fa84e1ecdf535a38f142776534f49c59e8a3c664cf3620ef8be03225a1946bb6b6aeb2c3561de0b16e0b29bb18e5aa2e8592ab55e0"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', 0x0, 0x0, 0x0, r0) 00:01:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') syz_genetlink_get_family_id$team(0x0) lchown(0x0, 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="480000000000000000000000b2b6a77f06ddcb33a8fac63016b69944fbc6b2c7a0a923cbd4c6aeb00ae99a70317fb463bed350139e79abe8fa8aac7ffc7f61334fff62005648c36378e098e527c7a1f30e09e0bd"], 0x48}}], 0x2, 0x0) 00:01:33 executing program 2: socket(0x25, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) 00:01:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 00:01:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 00:01:33 executing program 1: socket$inet(0x2, 0x2, 0x3) 00:01:33 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:01:33 executing program 3: syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x0, 0x0) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:33 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:33 executing program 5: timer_create(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x4}, 0x0) 00:01:33 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0x0) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 00:01:33 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1024000, &(0x7f0000001440)) 00:01:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 00:01:33 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001680)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="b7", 0x1}], 0x4}, 0x0) 00:01:33 executing program 4: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="fc8a8284af", 0x5, 0x2}, {0x0}, {0x0}], 0x124000, &(0x7f0000000680)={[], [{@hash='hash'}]}) 00:01:33 executing program 2: r0 = socket(0x25, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 00:01:33 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:01:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 00:01:33 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000380)="fc8a82", 0x3, 0x2}], 0x0, 0x0) 00:01:33 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:01:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001480)='nbd\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup/syz1\x00', 0x200002, 0x0) 00:01:33 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/40, 0x28) getdents(r0, &(0x7f0000000000)=""/81, 0x51) 00:01:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:01:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8929, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:01:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000380)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 00:01:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:01:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 00:01:34 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x40, 0x0) 00:01:34 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/40, 0x28) getdents(r0, &(0x7f0000000000)=""/81, 0x51) 00:01:34 executing program 0: perf_event_open(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:01:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000), 0xd4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 00:01:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{}]}) 00:01:34 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/40, 0x28) getdents(r0, &(0x7f0000000000)=""/81, 0x51) 00:01:34 executing program 4: request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) 00:01:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$eventfd(r0, &(0x7f00000000c0), 0xfffffffffffffd1c) 00:01:34 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000100)) 00:01:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 00:01:34 executing program 3: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:01:34 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/40, 0x28) getdents(r0, &(0x7f0000000000)=""/81, 0x51) 00:01:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/191, 0x3a, 0xbf, 0x1}, 0x20) 00:01:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f000000c000)={0x13, 0x0, 0x0, 0x0, 0xa05, 0x1}, 0x40) 00:01:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), 0x4) 00:01:34 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b47", 0xc}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) bind(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x54e7547e02afa628}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 00:01:34 executing program 1: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xfffffffffffff801) 00:01:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="d7", 0x1}], 0x1}}], 0x1, 0x0) 00:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) 00:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000480)={'gre0\x00', 0x0}) 00:01:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}}, 0x0) 00:01:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) 00:01:34 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="edbfd8cff525057c8901"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000000080)="fc0000001c000725ab0925000900070007ab08000800000081006193210001c000000001000000000000000000039815fa2c1ec28656aaa79bb94b467e0000000a000200035a0201856c256f1a272fdf0d11512f3cadd44000000000008934d05cd3f3187a617cd5000000000000002c05defd5a32e2ab8207000000ec18444ef92e475bba4a463ae4f5566f91cf190201ded815b2ccd243fa7ded94e0ad91bd0734ba3fcd8a57d47689cd3dd16b17e583df150c3b880f411f46a60467b4d5715587027177", 0xc5) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 00:01:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f0000000480)={'gre0\x00', 0x0}) 00:01:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0xfffffdef, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 00:01:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@local}, 0x14) 00:01:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000340)) 00:01:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000480)={'gre0\x00', 0x0}) 00:01:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8980, 0x0) 00:01:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f0000000080)=0xfffffffffffffff1) 00:01:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x7ffffff7, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @remote, 0x6}, 0x1c) 00:01:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x24008804) 00:01:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) 00:01:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="d72523c762841c62c959ab6c7e1c6f34e3d39222e9b17144b253ad8a8418cdba933467332b358f497f8206acb983e91c7c16ed110367c493ce010e83e6", 0x3d}], 0x1, &(0x7f00000001c0)=[@flowinfo={{0x14}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) 00:01:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x2}, {0x10}, {}]}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/191, 0x47, 0xbf, 0x1}, 0x20) 00:01:35 executing program 5: socketpair(0x29, 0x2, 0x0, &(0x7f0000000340)) 00:01:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000040)) 00:01:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/235, 0x30, 0xeb, 0x1}, 0x20) 00:01:35 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x4, 0x3b}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "5388b6", 0x0, "dfdf96"}}}}}}, 0x0) 00:01:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000040)) 00:01:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x5}]}]}}, &(0x7f0000000080)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 00:01:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000080)=""/176, &(0x7f0000000000)=0xb0) 00:01:35 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc) 00:01:35 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000480)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1059.664015][ T1278] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1059.698587][ T1278] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 00:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x9, 0x4) 00:01:35 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xb218}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xf600}]}}]}, 0x3c}}, 0x0) 00:01:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:01:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @union={0xa}]}}, &(0x7f0000000340)=""/141, 0x32, 0x8d, 0x17}, 0x20) 00:01:36 executing program 3: syz_emit_ethernet(0x10c, &(0x7f0000000dc0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "31a460", 0xd6, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}, {"466df28fb24a66c12ebd7c452b7944369681080a60582717d2b252bdd3be94c8ad045b914239e8c589c3c331c6d55581b41784f2713d8e9fe3590e230b322c0c107af16de635a80561c204061d15bf5e1a97298fc9341808af375abe6ec389216ec35e05faf39c645e7493ba651b8053c9ba5a3ae2134f1be5c05af4476c00efef69e37f94212d23024e83d23103a2d8019b3ba5f22853439f1070c7066417f8c8091bdab9d2519866c35e14b5aa867f2373230942d872ec5abf321ce18c"}}}}}}}, 0x0) 00:01:36 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x4, 0x3b}, @lsrr={0x83, 0x3, 0xce}, @timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "5388b6", 0x0, "dfdf96"}}}}}}, 0x0) 00:01:36 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 00:01:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) 00:01:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0xc2}}], 0x30}}], 0x1, 0x0) 00:01:36 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x0, r2}, 0x10) 00:01:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) 00:01:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 00:01:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x13040) 00:01:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x18, {}, 'veth0_to_team\x00'}) 00:01:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000000)='8', 0x1) 00:01:36 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000140)=[{r1, 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:01:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:01:36 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x400200, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 00:01:36 executing program 1: semget(0x3, 0x0, 0x81) 00:01:36 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f00000000c0)={@mcast2}, 0x14) 00:01:36 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000100)='A', 0x1, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:01:36 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$unix(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a012e2f66"], 0xa) 00:01:36 executing program 0: readlink(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:01:36 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) 00:01:36 executing program 1: open$dir(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) 00:01:36 executing program 4: bind$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0xa}, 0xa) 00:01:36 executing program 0: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) 00:01:36 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f00000000c0)) 00:01:36 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 00:01:36 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x4) 00:01:36 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000002f80)={&(0x7f0000002a00)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000002a40)="63468bdca7988560", 0x8}], 0x1, &(0x7f0000003900)=[{0xc}], 0xc}, 0x0) 00:01:36 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1018, 0x0, &(0x7f0000000080)) 00:01:37 executing program 0: sync() r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000014c0)=@file={0xa}, 0xa) 00:01:37 executing program 3: openat$ptmx(0xffffff9c, &(0x7f00000027c0)='/dev/ptmx\x00', 0x200, 0x0) 00:01:37 executing program 1: semop(0xffffffffffffffff, 0x0, 0x0) 00:01:37 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendmsg(r0, &(0x7f0000001d40)={&(0x7f0000001240)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x100) 00:01:37 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) 00:01:37 executing program 5: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) pipe2(&(0x7f0000000000), 0x0) 00:01:37 executing program 0: open$dir(&(0x7f0000000000)='.\x00', 0x400200, 0x0) 00:01:37 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xffffffff, 0x4) 00:01:37 executing program 3: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)={0x0, "2a9b58876e3e5d9af748abd79a"}, 0x11, 0x0) 00:01:37 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2c, 0x0, 0x0) 00:01:37 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 00:01:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) 00:01:37 executing program 0: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 00:01:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, &(0x7f0000000080)) 00:01:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@un=@abs={0x8}, 0x8) 00:01:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000140)) 00:01:37 executing program 4: semget(0x3, 0x0, 0x24a) 00:01:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) 00:01:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000100)) 00:01:37 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400200, 0x0) fchdir(r0) 00:01:37 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0xb8) 00:01:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) socket(0x2, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:01:37 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) connect(r1, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 00:01:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 00:01:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt(r0, 0x84, 0x25, &(0x7f0000000000)='8', 0x1) 00:01:37 executing program 3: open$dir(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 00:01:37 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) sendto(r0, &(0x7f0000000080)='A', 0x1, 0x0, 0x0, 0x0) 00:01:37 executing program 3: clock_nanosleep(0xe, 0x0, &(0x7f0000000040), 0x0) 00:01:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:01:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:01:38 executing program 5: clone(0x20042180, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "1836f934f8ca82114067f9e6339b730e35644ec543e9deffb219cae3a1e7d04f3be132e9f055aa7147935d0499da7c59f669b6b5c6454005915a7d51435b0427", 0x22}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 00:01:38 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x86, 0x2}]}}, @echo}}}}, 0x0) 00:01:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) 00:01:38 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000001a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 00:01:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @isdn, @nfc, @rc={0x1f, @fixed}, 0x8000}) 00:01:38 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x8) 00:01:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x40002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 00:01:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) syz_open_dev$dri(0x0, 0x0, 0x40) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', 0x0, &(0x7f0000000200)={0x0, "2c4e666581162a2ad54f1ee0017229bbdb30b063613964e27ee34e17f0e3437cecd32a95509facf30c4111bdae14678acab5fdf3c06bca0ffab799f21394e420"}, 0x48, 0x0) 00:01:38 executing program 2: clone(0x40008580, 0x0, 0x0, 0x0, 0x0) 00:01:38 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000e00)) 00:01:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @remote, 0xffffff61}, 0x1c) 00:01:38 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000001a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 00:01:38 executing program 5: pselect6(0x40, &(0x7f0000001740)={0x2}, &(0x7f0000001780)={0x7}, &(0x7f00000017c0), &(0x7f0000001800)={0x77359400}, &(0x7f0000001880)={&(0x7f0000001840)={[0xfff]}, 0x8}) 00:01:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) [ 1062.339176][ T1531] IPVS: ftp: loaded support on port[0] = 21 00:01:38 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "240f8327"}, 0x0, 0x0, @fd}) 00:01:38 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) 00:01:38 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000001a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 00:01:38 executing program 4: clone(0x8204080, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:01:38 executing program 5: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) 00:01:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1062.643192][ T1531] IPVS: ftp: loaded support on port[0] = 21 00:01:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet6(r0, 0x0, 0x0) 00:01:38 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000001a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 00:01:38 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 00:01:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:01:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000080)) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) syz_genetlink_get_family_id$devlink(0x0) 00:01:38 executing program 3: clock_gettime(0x7, &(0x7f0000000100)) 00:01:39 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x5}, 0x0, &(0x7f0000000380)={0x9}, &(0x7f00000003c0), 0x0) 00:01:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)) 00:01:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:39 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) exit(0x0) 00:01:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet6(r0, 0x0, 0x0) 00:01:39 executing program 2: io_setup(0x0, &(0x7f00000009c0)) 00:01:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010004308000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:01:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet6(r0, 0x0, 0x0) 00:01:39 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) 00:01:39 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80282) 00:01:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet6(r0, 0x0, 0x0) [ 1063.190740][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:39 executing program 5: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) 00:01:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000004680)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='grpjquota=*']) 00:01:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x80, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000003c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) [ 1063.378689][ T1633] device bond1 entered promiscuous mode [ 1063.464705][ T1639] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.540512][ T1639] device veth3 entered promiscuous mode [ 1063.590238][ T1639] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1063.604275][ T1699] REISERFS warning (device loop5): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 1063.634386][ T1659] bond1 (unregistering): (slave veth3): Releasing backup interface 00:01:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 00:01:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7f}, 0x40) [ 1064.091751][ T1659] bond1 (unregistering): Released all slaves [ 1064.277953][ T1639] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1064.344168][ T1639] device veth5 entered promiscuous mode [ 1064.364758][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010004308000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0xed) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0x3e) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 00:01:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) 00:01:40 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000002280)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x40}, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x4000, 0x0, 0x2012, 0x3ff, 0x4fb, 0x5, 0x0, 0x1}) 00:01:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:01:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000004680)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='grpjquota=*']) 00:01:40 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) [ 1064.588093][ T1763] REISERFS warning (device loop5): super-6515 reiserfs_parse_options: journaled quota format not specified. 00:01:40 executing program 4: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 00:01:40 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000002280)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x40}, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x4000, 0x0, 0x2012, 0x3ff, 0x4fb, 0x5, 0x0, 0x1}) [ 1064.695215][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000000c0)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000001c0)=ANY=[]) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) 00:01:40 executing program 4: r0 = add_key$keyring(&(0x7f0000001100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) 00:01:41 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000002280)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x40}, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x4000, 0x0, 0x2012, 0x3ff, 0x4fb, 0x5, 0x0, 0x1}) [ 1064.870717][ T1776] device bond1 entered promiscuous mode [ 1064.961772][ T1780] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1065.039105][ T1780] device veth7 entered promiscuous mode [ 1065.092419][ T1780] bond1: (slave veth7): Enslaving as an active interface with an up link [ 1065.135273][ T1788] bond1 (unregistering): (slave veth7): Releasing backup interface [ 1065.480539][ T1788] bond1 (unregistering): Released all slaves 00:01:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010004308000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:01:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000004680)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='grpjquota=*']) 00:01:41 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={&(0x7f0000013c00)=@can, 0x80, &(0x7f0000013e80)=[{&(0x7f0000013d40)=""/199, 0xc7}, {0x0}], 0x2, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xd2c40, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x2}, 0x10, r3}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 00:01:41 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 00:01:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0xec], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='xen_mc_flush\x00', r0}, 0x10) 00:01:41 executing program 0: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000002280)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x40}, &(0x7f0000000040)=0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000080)={0x4000, 0x0, 0x2012, 0x3ff, 0x4fb, 0x5, 0x0, 0x1}) [ 1065.721624][ T1883] REISERFS warning (device loop5): super-6515 reiserfs_parse_options: journaled quota format not specified. 00:01:42 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a73300180000fe80000000000000000000000000008000000000000000000000000000aa"], 0x0) 00:01:42 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0a00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 00:01:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000004680)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='grpjquota=*']) 00:01:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000d80)='/dev/snd/pcmC#D#c\x00', 0x8, 0x240000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:01:42 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x1590c0, 0x0) [ 1066.112574][ T1911] REISERFS warning (device loop5): super-6515 reiserfs_parse_options: journaled quota format not specified. 00:01:42 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) [ 1066.407108][ T1898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1066.569924][ T1898] device bond1 entered promiscuous mode [ 1066.603984][ T1901] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1066.649570][ T1901] device veth9 entered promiscuous mode [ 1066.675094][ T1901] bond1: (slave veth9): Enslaving as an active interface with an up link [ 1066.705069][ T1902] bond1 (unregistering): (slave veth9): Releasing backup interface [ 1067.030896][ T1902] bond1 (unregistering): Released all slaves 00:01:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010004308000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) 00:01:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:01:43 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={&(0x7f0000013c00)=@can, 0x80, &(0x7f0000013e80)=[{&(0x7f0000013d40)=""/199, 0xc7}, {0x0}], 0x2, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xd2c40, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x2}, 0x10, r3}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 00:01:43 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:01:43 executing program 5: syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) openat$hwrng(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socketpair(0x1f, 0x0, 0x0, &(0x7f0000001940)) 00:01:43 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0a00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) [ 1067.605782][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:01:43 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c74396c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80677eeba68562eaeae2bcd87cef90000005e69aa79e603c82caa501891595c44aa4b09d2f7b072f07707819ce25f6127a536c2356996ff278b40a75342e8853239389425c67455"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={&(0x7f0000013c00)=@can, 0x80, &(0x7f0000013e80)=[{&(0x7f0000013d40)=""/199, 0xc7}, {0x0}], 0x2, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xd2c40, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x2}, 0x10, r3}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) [ 1067.796610][ T2007] device bond1 entered promiscuous mode 00:01:44 executing program 5: socket(0x1e, 0x0, 0x9) 00:01:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) [ 1067.885941][ T2013] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.928623][ T2013] device veth11 entered promiscuous mode 00:01:44 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 1067.974398][ T2013] bond1: (slave veth11): Enslaving as an active interface with an up link 00:01:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/169, 0xa9}], 0x1) 00:01:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xd800}, @void}}}, 0x1c}}, 0x0) [ 1068.082527][ T2027] bond1 (unregistering): (slave veth11): Releasing backup interface [ 1068.514847][ T2027] bond1 (unregistering): Released all slaves 00:01:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0xbc, 0x0) 00:01:45 executing program 4: epoll_create1(0xad82a77a50082fbd) 00:01:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x190, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:01:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, r1}) 00:01:45 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={&(0x7f0000013c00)=@can, 0x80, &(0x7f0000013e80)=[{&(0x7f0000013d40)=""/199, 0xc7}, {0x0}], 0x2, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xd2c40, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x2}, 0x10, r3}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 00:01:45 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2, 0x9}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000001c0)="8bbce1ac4d75bf5558a4aa2dda81802d23780c27ae33f03fb714d6d7eac82fb6c7760e34758d8c4941f7ab2f80957457baf7940b6f1103ef18d43aea0188ddecb6a587eda5bce4f941632b3da169c37cfd041faf9a8f016f18af597316d3ac2c4e8d", 0x62}, {&(0x7f0000000240)="5ae8e72b0500b5ee4a437ff0c9b50a995aeccb5306b82971c73a7018bfe4ef3210399d9ea500bf289386563683d862429691106f502247d6effd178c09a15a309a14a24cbce1b123d496cd65c424891f20397ba9f9a7fa39", 0x58}, {&(0x7f00000002c0)="ad47120acd424e1e87e1bc789834826274c8890c04bbc24333b3b9653e0d4953d19309715b6ba8461d7d6d4e101116bd44604c480ac0dd2b21a06c53f2d7561e52d1eb1d55ca64eeb48469e895e4102e0b47d60dfc86491e323d716faefe61d261e612dd9be903c7b5224202820414a6bbfc20cf4d861e2d2a1ca593be7e40308aaf3a17b35c8f5fefab6fb04423014f0eb0cc87e64e79922363513f9e7036dff8321f72fadc5688e30ce2149e7cf707", 0xb0}, {&(0x7f0000000380)="571226ab5f80a873b02a9a8307486727a8ccd1fe002170d41c87b9d94c", 0x1d}, {&(0x7f00000003c0)="8026ded14e10e884233b12afbd6b853f4a1058f9b325cae1d9903802dfec168c2ff5f930cc16b4fbabd1214da14b1ae241a41a92819807dcedfada3863fe19b46e49ca6823b77b2903be2200c530d5b9093a8c4e394b66720d7e0e90445864504f265c26136b3ab5d4f501bd095e3f2254afd5df7c351dcfdaba81910f09e902f72f45ba1952dd036ace3bfcff4a096530b785c474377114b5cb4aa2b6bac26c330ad440ea95c9500c8f9b24a42ba514a9aa6af1bc637acfb40473ce2074b9d0601526c4b1bb0c0929c9d4858c0bf05c19fda5a3d136ce912cc11e9d5a580559cda5ea1c", 0xe4}, {&(0x7f00000004c0)="e4ccddcd33bf7d497d93e59f70ec572cd7f4459ef23effdc7297bad0c016d45c5bd6a565a58ff12cfd8a3c0ad713b23c25258cfe8facc18b34dada12c711637f3df7ad3d64516d2007e58adee05cd1176ae9f514a13e6b00257b9b91e5e58751304db5354a5023e309e77e836706c9b73b5297447836480838fc9fcc9cbd896ead49fc7c261d4ef9be81e93bfe73cf4decd9a88bce23cd83c94274e9508975dd1809330d313f561bf3cf3a7d6442fa0e559c9f519e71c8d316", 0xb9}, {&(0x7f0000000580)="c8f728f0d653c2149e744ac334c89fb31b5d670218611da559680578ed1e698896135dd0cdc18b5a9220f25fd6262b7a15793525f49e0ed90391d3e1fd58a046c4d60ea73e3f2a22f1ff416ae2f5b7a9b2d130debc66d1f174efbb9e19ca1903cc9b09fcc0967286ce7ded39f426f3492fb0c2430ca0f9a7b4", 0x79}, {&(0x7f0000000600)="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", 0x7ac}], 0x8}}, {{&(0x7f0000001780)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001cc0)=[@hopopts_2292={{0x14}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffffb}}], 0x24}}], 0x2, 0x800) 00:01:45 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000100)={0x81}) 00:01:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001140)='ns/pid_for_children\x00') 00:01:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000001040)=@framed={{}, [@call]}, &(0x7f0000001080)='syzkaller\x00', 0x7, 0x97, &(0x7f00000010c0)=""/151, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280), 0x10}, 0x78) 00:01:45 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = dup2(r0, r0) r2 = gettid() fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, r2}) 00:01:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/11, 0xb}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 00:01:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:45 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x63}) 00:01:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 00:01:45 executing program 5: prctl$PR_SET_PDEATHSIG(0x22, 0x0) 00:01:45 executing program 0: socketpair(0xa, 0x5, 0x0, &(0x7f0000000240)) 00:01:45 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000013fc0)={&(0x7f0000013c00)=@can, 0x80, &(0x7f0000013e80)=[{&(0x7f0000013d40)=""/199, 0xc7}, {0x0}], 0x2, &(0x7f0000013ec0)=""/246, 0xf6}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000410aa3dbfdcadfdef83ed5d22796fce2e59f03e6b2c8483367845a7fd21697ebcd43160ecf29de2fc5c15237c179d934630f9d0849144f70f903c5cdfacbd843f60a9bd76e8b6928aaace5d391fcc7078c2470538c401d665c76ded80064ff8d"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xc0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0xd2c40, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6f92ad17, 0x66, &(0x7f00000001c0)=""/102, 0x41000, 0x4, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x2}, 0x10, r3}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 00:01:45 executing program 2: syz_read_part_table(0x1f, 0x5, &(0x7f0000000780)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffff000}, {&(0x7f0000000400)}, {&(0x7f0000000500), 0x0, 0x9}, {&(0x7f0000000580)}]) 00:01:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 00:01:45 executing program 0: unshare(0x24020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 00:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0x50, &(0x7f0000000080)="a0ec3e289d6fde5c595a8986b33e8dbd9077a15e881bde9d6fc422a8d973e3c87812e4d6db04e366b3c051d2322af73c9d31ce2eaed68f6eb0d749531eefa1a423b8d828a94c3bc3a00502fad01f4e4d"}) 00:01:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1069.994916][ T2177] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1070.047236][ T2177] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1070.101082][ T2177] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:46 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000500)={0x18, 0x2, {0x0, @local}}, 0x1e) 00:01:46 executing program 2: syz_read_part_table(0x1f, 0x5, &(0x7f0000000780)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffff000}, {&(0x7f0000000400)}, {&(0x7f0000000500), 0x0, 0x9}, {&(0x7f0000000580)}]) 00:01:46 executing program 5: keyctl$restrict_keyring(0x13, 0x0, 0x0, 0x0) 00:01:46 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 00:01:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:46 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xe64a, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1070.395426][ T2200] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1070.435003][ T2200] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1070.521889][ T2200] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:46 executing program 1: bpf$MAP_CREATE(0x6, &(0x7f0000000200), 0x40) 00:01:46 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) syz_read_part_table(0x1f, 0x9, &(0x7f0000000780)=[{&(0x7f0000000180)="a66781262904519cdbd900e890b643f395fba9640a89a0629a053365be91dedc8eda6ae2e92218f450092927e4bb37ba92f20bdd3aa6d33818cace46e18e0b45e010696d0b620eda4503a6c3680c1590273fb0235643c2542b956c6cf44e0f3bb97393c9592fcdb07db4aa2ae1227531d34f48018e1273bad985abfd8df5f766d40ae71e9c7b6b3a5b09b27f969b3a067a80964caaea681297d402c127a20221a1751ba3", 0xa4, 0x8}, {&(0x7f0000000240)="b01c80babbf2f46ca9ad3f163d17a301d7f3872afa0b50c247076029f48629dc3a76737a8563080cc5a47472bfb426c4b55b6cbecb669f3d2e57cfea67cd9f14bd73c844eeecbf153bd90b70225ba0e75fc305beb0968c0782ca0e131f554e74ed72787f097ddc5c780a126787c24be11ea4578bc42d498c296e01372d45f27f33f992806c3b71caa4", 0x89, 0x7}, {&(0x7f0000000880)="2c48fef20523c2a880dc6b8a1b840900b8e7b249470c415e4afaa93eb6c46edf96e5d41a2ef32ecc30c2de658a7a997fc2a2bfacbf90e2c259918e5bf9d75f338e9ec51ee237cba38490", 0x4a, 0xfffffffffffff000}, {&(0x7f0000000380)="e48c29bcf999c47811cf5bf2d97d9c697826e3663d2669956ec08c56e832cac35710cf3e6f9c7a371c0c66f5f0cdae9fde28309695f0cf468cd584e0a853b30f8ebb6327f563afd176c89457eb549d02ccc61eddddbe1b1e971c8eecb45467a2af015d42f5a413e7a29abe738cdd82443a8a", 0x72, 0x200}, {&(0x7f0000000400)="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", 0xfa, 0x5}, {&(0x7f0000000500)="900d973e372ef674a96177850fc4abd2fce2bd7977e1ff25398f746dde92fa8f18f0961b009addde89cf60b6bd4e333a6f5671514b185e0e67efcce3a46503e36d668c69929a0ecad36254bfae8de9e1488ffa6ae01e0bc2cda49f89741b077a473ef1fad4cc0b07729ab6d40765", 0x6e, 0x9}, {&(0x7f0000000580)="f9b6c501d8f29086f20fe1f8d0d4edd6ab639e060a1341f6104e2dd0163ddba4737dc48548b47f4bce5547e500407edb93534091719b5d622cf40c042fffc120c08407ca9be673375a83f09b0ae301965e8efc2a26fa63021405442f9d3124173dd1f4c2b354ec4ad87de9aef71030a60c559c1c88e9e1b9887254928af106c960b39992f05d95ee41c30882de19af9813648c9d97776bf4cfd9143b3fac766667c58c6578a7045b94a55325b0f14c35db09f589e960ea3573eae5e3b5f263e11f78bb9ca4edf7d34c3ae78ed7f82052a95a54b37ad66e7e62d990c1f0aac7f35e96312b1b5a7569a8954475c7fb8ca8be4f3a0d46", 0xf5, 0x3}, {&(0x7f0000000680)="dcdb84cbedb166f669a4de438c795a9681ad510fd50ad6a77dafb87facecad297376afe765a5ba83a25dff437994d76a8a60cee0e576134fef668212d7a21abad5572f2d6afbdb90deb6b5ed278464592df8afebbc535bc22ddce602e559c1441ca61e9a90233a78d3a9a767039c1d8e051de3f95ae6ae1f267a1841d9d6cbe0e5c663259ca31df9c426a6f62fa7cd3a25b882bea068", 0x96, 0x400}, {0x0, 0x0, 0x4}]) 00:01:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) 00:01:46 executing program 2: syz_read_part_table(0x1f, 0x5, &(0x7f0000000780)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffff000}, {&(0x7f0000000400)}, {&(0x7f0000000500), 0x0, 0x9}, {&(0x7f0000000580)}]) 00:01:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:46 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)={0x420}, 0x420}}, 0x0) 00:01:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x34, 0xffffffffffffffff, 0xf0}, 0x40) 00:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 00:01:47 executing program 5: poll(&(0x7f0000000100)=[{}], 0x200000000000013f, 0x0) 00:01:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127f, 0x0) 00:01:47 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) clock_gettime(0x1, &(0x7f0000000040)) [ 1070.974203][ T2247] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 00:01:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) [ 1071.044630][ T2247] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1071.059970][ T2247] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:47 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/uts\x00') flock(r0, 0x0) 00:01:47 executing program 0: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) 00:01:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1265, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abedf181c69d199657588993a4d175bdb261b6cba17a0a29b96c5b0bf50e23203eab818b50c0fa61ccc62a1d5bfe576ab8e54161a37447daeea6047e549e7312", "3ec0e146099a84541a206f8539d9984ab2510b69534f5a288b3051c43006a691423e55c47b7c8fcc91ce0793d886fb90803ba3a5424eb6124d6de48fb1e352a0", "2556b024a63f30363deac5169e7e43d60b7fdc5d60e88a4375338a60a03e74f0"}) [ 1071.113622][ T2268] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:01:47 executing program 2: syz_read_part_table(0x1f, 0x5, &(0x7f0000000780)=[{&(0x7f0000000180), 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffff000}, {&(0x7f0000000400)}, {&(0x7f0000000500), 0x0, 0x9}, {&(0x7f0000000580)}]) 00:01:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:47 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:01:47 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=ANY=[], 0xf8, 0x0) 00:01:47 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="b8", 0x1}], 0x4}}], 0x1, 0x0) 00:01:47 executing program 0: socket(0xa, 0x2, 0x7) 00:01:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 00:01:47 executing program 3: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000fff000/0x1000)=nil) [ 1071.443108][ T2293] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 00:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5f}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 00:01:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x7fff, @none}, 0xe) [ 1071.558853][ T2293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1071.569524][ T2293] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:47 executing program 2: futex(&(0x7f00000001c0), 0x3, 0x0, 0x0, 0x0, 0x0) 00:01:47 executing program 4: r0 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 00:01:47 executing program 5: setregid(0xee00, 0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 00:01:47 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) 00:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmmsg$unix(r1, &(0x7f0000003c40)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}], 0x1, 0x0) 00:01:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x75f, 0x0, 0x0, 0x41100, 0x18, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) r2 = socket(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003b00)={'gre0\x00', 0x0}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 00:01:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000340)) 00:01:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x30}}, 0x0) 00:01:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000001140)) 00:01:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x2, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 00:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) fsmount(r1, 0x0, 0x80) 00:01:48 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 00:01:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020", 0x81, 0x22100}], 0x0, &(0x7f0000000180)=ANY=[]) 00:01:48 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:01:48 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 00:01:48 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5421, 0xffffffffffffffff) 00:01:48 executing program 1: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x39fbd40ebb53f0f7) 00:01:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x2, &(0x7f0000000580)=[{}, {}], 0x0) [ 1072.297707][ T2358] EXT4-fs error (device loop5): ext4_fill_super:4954: inode #2: comm syz-executor.5: iget: checksum invalid [ 1072.310230][ T2358] EXT4-fs (loop5): get root inode failed [ 1072.316109][ T2358] EXT4-fs (loop5): mount failed 00:01:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:48 executing program 4: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0xffffffffffffffff) 00:01:48 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '\x00'}) [ 1072.434051][ T2358] EXT4-fs error (device loop5): ext4_fill_super:4954: inode #2: comm syz-executor.5: iget: checksum invalid 00:01:48 executing program 1: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',']) [ 1072.518480][ T2358] EXT4-fs (loop5): get root inode failed [ 1072.541657][ T2358] EXT4-fs (loop5): mount failed 00:01:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xff2, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x10000, &(0x7f0000000180)=ANY=[]) ptrace$cont(0x21, 0x0, 0x0, 0x0) [ 1072.568287][ T2379] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1072.611295][ T2379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1072.621777][ T2379] fscrypt (loop2, inode 2): Error -61 getting encryption context 00:01:48 executing program 5: socketpair(0x27, 0x0, 0x0, &(0x7f0000000080)) 00:01:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000002900)={0x18, 0x31, 0x1, 0x0, 0x0, "", [@generic="5dbaa5882c"]}, 0x18}], 0x1}, 0x0) 00:01:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "d36ded9525949426e47ff106c67497d4b912ecc6153abc1586b7a053c306b4b2d2bef3678d205127c5e6a74141cd3f68f58642c9a56dc80e507ce8894d3ea781"}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r2) keyctl$invalidate(0x15, r2) 00:01:48 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x141101, 0x0) 00:01:48 executing program 4: r0 = epoll_create(0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) [ 1072.752917][ T2393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1072.833539][ T2379] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1072.865662][ T2397] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 00:01:49 executing program 5: syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x200, 0x2000) [ 1072.897137][ T2379] EXT4-fs: failed to create workqueue [ 1072.902836][ T2379] EXT4-fs (loop2): mount failed 00:01:49 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000001200)=[{0x0, 0x0, 0x80000001}]) 00:01:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:49 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0) 00:01:49 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') fcntl$lock(r0, 0x40e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:01:49 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)='\'%-@\x00') 00:01:49 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x10000000) 00:01:49 executing program 3: keyctl$restrict_keyring(0x14, 0x0, &(0x7f0000000380)='.request_key_auth\x00', &(0x7f00000003c0)='nl80211\x00') 00:01:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) [ 1073.218686][ T2426] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem 00:01:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="9c", 0x1}], 0x2}}], 0x1, 0x0) 00:01:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 1073.289188][ T2426] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1073.324082][ T2426] fscrypt (loop2, inode 2): Error -61 getting encryption context 00:01:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 00:01:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002940)={&(0x7f0000000440)={0x1ec4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1e90, 0x33, @data_frame={@qos_no_ht={{@type00={{}, {}, @broadcast}}, {@type10={{}, {}, @random="9a050f1458de", @device_b, @from_mac=@device_b}}}, @a_msdu=[{@device_b, @device_b, 0xa3, "7eaf5b2bd0228aa1483d8e0ffbacd10c1cc1b9057b5597a50b140ef8043d067c58ddc01cc3aa621ac4b8f0de9ae1487720b0a8f2a86144120ba2d95e7f359eb6839e80a82e75a159e4077fd660c22662a68e5f172d2e233cd7b72256b12b04d8ce8ebe2d3931c07a8798dc1202431f6fd99457e05c1ed4776b54602f8e2a970c0a9df571f3ee0d13fb61e6df5e27e3d312fd418cbac0521e9967fc42b8cbd668bc8a51"}, {@broadcast, @device_a, 0xe3, "cb0b60fde830b5884f5fc0b78aa9ec53b61db0fe74f7e0321995d9a70dcf8221084cb0bea5f67c5e0619b9284d78c581111ead7662f3c564e028ec6bd17ac4c031d82d05c448ed6718aaf5174b4f78e1e3ce3015fb25221e7c302c066690896f0d2764fb6e1093e1b13fee4512b64dd5d7bf19ef7cadfe77ddbfb710ca5d547a5a81ecaeb9d898a4bf15e3c7285b9c157cb5e7a8b0b1df1befb0a93bf06a2ebab3931a049f36f7203210407edc5abff5f1e1ac335c7069d81727fd061e00cf4804e4b8a922e5c0b9298546b105d527d547e4991c66c265f9cf591d2fce760a5bb9c177"}, {@device_a, @broadcast, 0xaf, "70b4aae533c75fcab9b9ab21c9e6efcbf77d19f1c8dbe56d860a2f73f8b1f8892cf3bf3a545b724095a9ee56b3d5e529650a27abe1e0119c086d703c7552bf35163f6d4edf2857e2507be2678926246125d2fbe7c45eb050381f73ec3fb7212608fa3ad78dd8fb61fee006b873477cbd3266e389f443cd9609e4361b1a7f6d4bd13c622afe3fa99297d1beb155677d1216934d2031916565bb2d5a1ffe9005dcc5d57c246a43064b22be9ecc27c6e4"}, {@broadcast, @device_b, 0xbf, "0cda2caaecd39b85cd843c0bf008dd04ea9c7cf117c0834e9122f1559be1c619e9cff19db3b84f1e296f546cbea212330fc74c42eb3501ffa6dd7dd4e76175bdc5066f282d113c166a57a2319d303a715069dbee602d791550addfe65504c93a47362b7bdf0ec7574607f926a155c97ffe3c1eb20f0742876f25c35eb33ac1ec378442d8c95e2f472cc68584de9f173540402a32057d4612473129054d814a410f3640775eb5798768b01ce62419812b5af30803f6dba9ca097ca91420bc4c"}, {@broadcast, @device_b, 0xfff, "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"}, {@device_b, @broadcast, 0xaff, "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"}]}}]}, 0x1ec4}}, 0x0) 00:01:49 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:01:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a}, 0x40) 00:01:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 00:01:49 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:01:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/zero\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 00:01:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe90, 0x33, @data_frame={@qos_no_ht={{@type00={{}, {}, @broadcast}}, {@type10={{}, {}, @random="9a050f1458de", @device_b, @from_mac=@device_b}}}, @a_msdu=[{@device_b, @device_b, 0xa3, "7eaf5b2bd0228aa1483d8e0ffbacd10c1cc1b9057b5597a50b140ef8043d067c58ddc01cc3aa621ac4b8f0de9ae1487720b0a8f2a86144120ba2d95e7f359eb6839e80a82e75a159e4077fd660c22662a68e5f172d2e233cd7b72256b12b04d8ce8ebe2d3931c07a8798dc1202431f6fd99457e05c1ed4776b54602f8e2a970c0a9df571f3ee0d13fb61e6df5e27e3d312fd418cbac0521e9967fc42b8cbd668bc8a51"}, {@broadcast, @device_a, 0xdb, "cb0b60fde830b5884f5fc0b78aa9ec53b61db0fe74f7e0321995d9a70dcf8221084cb0bea5f67c5e0619b9284d78c581111ead7662f3c564e028ec6bd17ac4c031d82d05c448ed6718aaf5174b4f78e1e3ce3015fb25221e7c302c066690896f0d2764fb6e1093e1b13fee4512b64dd5d7bf19ef7cadfe77ddbfb710ca5d547a5a81ecaeb9d898a4bf15e3c7285b9c157cb5e7a8b0b1df1befb0a93bf06a2ebab3931a049f36f7203210407edc5abff5f1e1ac335c7069d81727fd061e00cf4804e4b8a922e5c0b9298546b105d527d547e4991c66c265f9cf591d"}, {@device_a, @broadcast, 0x17, "70b4aae533c75fcab9b9ab21c9e6efcbf77d19f1c8dbe5"}, {@broadcast, @device_b, 0xbf, "0cda2caaecd39b85cd843c0bf008dd04ea9c7cf117c0834e9122f1559be1c619e9cff19db3b84f1e296f546cbea212330fc74c42eb3501ffa6dd7dd4e76175bdc5066f282d113c166a57a2319d303a715069dbee602d791550addfe65504c93a47362b7bdf0ec7574607f926a155c97ffe3c1eb20f0742876f25c35eb33ac1ec378442d8c95e2f472cc68584de9f173540402a32057d4612473129054d814a410f3640775eb5798768b01ce62419812b5af30803f6dba9ca097ca91420bc4c"}, {@broadcast, @device_b, 0xbaf, "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"}]}}]}, 0xec4}}, 0x0) 00:01:49 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 1073.695902][ T2472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:01:49 executing program 5: futex(0x0, 0x8b, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) [ 1073.759664][ T2475] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1073.777688][ T2480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1073.847560][ T2475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 00:01:50 executing program 5: epoll_create(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 00:01:50 executing program 3: keyctl$restrict_keyring(0x9, 0x0, 0x0, 0x0) [ 1073.917050][ T2475] fscrypt (loop2, inode 2): Error -61 getting encryption context 00:01:50 executing program 0: syz_open_dev$loop(&(0x7f0000000b00)='/dev/loop#\x00', 0x0, 0x82180) 00:01:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:50 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:01:50 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:01:50 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 00:01:50 executing program 5: epoll_create(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 00:01:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x8f20f181) 00:01:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:50 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) 00:01:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) [ 1074.306104][ T2506] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem 00:01:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}) 00:01:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getflags(r0, 0x3) [ 1074.359372][ T2514] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1074.434910][ T2528] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1074.436512][ T2506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1074.464840][ T2528] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1074.476833][ T2514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1074.482042][ T2528] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1074.527153][ T2506] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1074.530632][ T2514] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:50 executing program 2: bpf$MAP_CREATE(0x13, &(0x7f0000000200), 0x40) 00:01:50 executing program 5: epoll_create(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 00:01:50 executing program 1: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f0000000080), 0x2) 00:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1}) 00:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 00:01:50 executing program 5: epoll_create(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 00:01:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:51 executing program 1: pselect6(0x40, &(0x7f0000000100)={0x3}, &(0x7f0000000140)={0x2}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 00:01:51 executing program 5: fsopen(&(0x7f0000000040)='jfs\x00', 0x0) 00:01:51 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000780)=[{0x0, 0x0, 0x200}]) 00:01:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 00:01:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 00:01:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 00:01:51 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 1075.082882][ T2562] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1075.091650][ T2565] Dev loop0: unable to read RDB block 2 00:01:51 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = dup2(r0, r0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2}) [ 1075.125985][ T2565] loop0: unable to read partition table [ 1075.149003][ T2568] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 00:01:51 executing program 5: keyctl$restrict_keyring(0xc, 0x0, &(0x7f0000000380)='.request_key_auth\x00', &(0x7f00000003c0)='nl80211\x00') 00:01:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) [ 1075.178929][ T2562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1075.194318][ T2565] loop0: partition table beyond EOD, truncated [ 1075.234508][ T2568] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1075.251574][ T2562] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1075.259929][ T2565] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1075.273617][ T2568] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x40) 00:01:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:01:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0x4, 0x0, 0x0) [ 1075.428610][ T2565] Dev loop0: unable to read RDB block 2 [ 1075.434579][ T2565] loop0: unable to read partition table [ 1075.455778][ T2565] loop0: partition table beyond EOD, truncated [ 1075.465919][ T2565] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 00:01:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x3) 00:01:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:51 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) socketpair(0x0, 0x0, 0x0, 0x0) 00:01:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x0) 00:01:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 00:01:51 executing program 2: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) pipe2$9p(&(0x7f0000002000), 0x0) 00:01:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x9, 0x0, &(0x7f0000000040)) [ 1075.771853][ T2620] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1075.788585][ T2619] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1075.843674][ T2620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1075.906926][ T2620] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1075.966880][ T2619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1076.012339][ T2619] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa600285c) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 00:01:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 00:01:52 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x1f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 00:01:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc}]}, 0x30}}, 0x0) 00:01:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f00000006c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x0, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4) dup(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 00:01:52 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe8000000000000000000000aafe80000001000000000000000000000090"], 0x0) [ 1076.288794][ T2649] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 00:01:52 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe8000000000000000000000aafe80000001000000000000000000000090"], 0x0) 00:01:52 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 00:01:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/11, 0xb}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r4, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) pipe(&(0x7f0000000240)) 00:01:52 executing program 0: socketpair(0x64, 0x0, 0x0, &(0x7f0000000040)) [ 1076.406637][ T2649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1076.418324][ T2649] fscrypt (loop3, inode 2): Error -61 getting encryption context 00:01:52 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe8000000000000000000000aafe80000001000000000000000000000090"], 0x0) [ 1076.480494][ T2657] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1076.572735][ T2657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1076.612456][ T2657] fscrypt (loop4, inode 2): Error -61 getting encryption context 00:01:52 executing program 5: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f000000b0c0)) 00:01:52 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 00:01:52 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe8000000000000000000000aafe80000001000000000000000000000090"], 0x0) 00:01:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 00:01:52 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 00:01:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000002a00)=0x22200, 0x4) 00:01:53 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[{&(0x7f0000000080)="b4", 0x1}, {&(0x7f0000000140)="82", 0x1, 0x8aa5}], 0x0, 0x0) 00:01:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) 00:01:53 executing program 2: syz_emit_ethernet(0x56, 0x0, 0x0) 00:01:53 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80801) 00:01:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1}, 0x1c}}, 0x0) 00:01:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 00:01:53 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 00:01:53 executing program 2: syz_emit_ethernet(0x56, 0x0, 0x0) 00:01:53 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) 00:01:53 executing program 5: fanotify_mark(0xffffffffffffffff, 0x0, 0x2ef060f329685700, 0xffffffffffffffff, 0x0) 00:01:53 executing program 2: syz_emit_ethernet(0x56, 0x0, 0x0) 00:01:53 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000001240)=[{&(0x7f0000000080)="b4", 0x1}, {&(0x7f0000000140)="82", 0x1, 0x8aa5}, {&(0x7f0000000240)="d3", 0x1}], 0x0, 0x0) 00:01:53 executing program 4: socket$inet(0x2, 0x3, 0x4) 00:01:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000006740)={0x0, 0x0, &(0x7f0000006700)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000067c0)='nl80211\x00') 00:01:53 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r0, 0xc0189436, 0x0) 00:01:53 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) 00:01:53 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000001240)=[{&(0x7f0000000080)="b4", 0x1}, {&(0x7f0000000140)="82", 0x1, 0x8aa5}, {&(0x7f0000000240)="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", 0x6c6, 0x93b}], 0x0, 0x0) 00:01:53 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 00:01:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) 00:01:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x15}, 0x40) 00:01:54 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0xfffffffffffffdc9}, 0xd03cb0e) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000016) 00:01:54 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="50010000100013070000000000000000fd554a1a3bf07d0b1d37251159d3ccdbff01000000000100000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000faffffff00000000000000010000000032000000e00000020000cb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff0000000000000000000000000000000000000000000000000000000000000000000000106dde8b750000000000090000000000ee58a0820000000000000200040000000000000000006000020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000c0"], 0x150}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 00:01:54 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 00:01:54 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 00:01:54 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) 00:01:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) 00:01:54 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) socket$netlink(0x10, 0x3, 0x0) 00:01:54 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 00:01:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 00:01:54 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/meminfo\x00', 0x0, 0x0) 00:01:54 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xcd5, 0x8ac40) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000400)) 00:01:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 00:01:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) 00:01:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8916, &(0x7f0000000400)) 00:01:55 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000400)) 00:01:55 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @mcast2, @dev={0xfe, 0x80, [0xb, 0x14, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x4, 0xb, 0x3, 0x8, 0x8]}, 0x0, 0x0, 0x0, 0x0, 0x482, 0x20c200a2, r3}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @private2, 0x80000000}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000a486bf19000000000000000000df25802014b983540f6592cdb3000600150000007bce08", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="00b9fcde", @ANYRES32, @ANYRES32, @ANYRES64, @ANYBLOB="08000b00290300040038bec50a4c6c2e3bd47642c6e8851eb96263f3e4c76195c47910ec10b8d2ab1b66c3129b729576c16eb0425fb5c0206bc9f6330ab8c07a9d7cfe74c34ac49548dd31d9cea7c777b8403d2bdd3ea8ed93184262e1f367c3f1a37ce772a08a9d6739e88ffb23f6e172db876d4399d45222b24129000000", @ANYRES64, @ANYBLOB="9fcbe3d2472d5f24171b60e68b1a059400692062b342705613b82d3dc19dc0f5ba667f3d337cd74797b63ca94cb030129d7a13ab74803721e77a436496037fca78b1719ff1d397ffdf1d04ba829de2d3c0435d14c69c00"], 0x70}}, 0x20000001) 00:01:55 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 00:01:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x29, 0x0, 0x0) 00:01:55 executing program 3: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x22c0) 00:01:55 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 00:01:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5460, 0x0) 00:01:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) setuid(0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, 0x0, 0x8642f7e2e2b69268) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 00:01:56 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe80000000"], 0x0) 00:01:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) 00:01:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2a, 0x0, 0x0) 00:01:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x80, 0x4) 00:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2042, 0x0) 00:01:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), 0x4) 00:01:58 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)) 00:01:58 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe80000000"], 0x0) 00:01:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x1, 0x4) 00:01:58 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sync_file_range(r0, 0x0, 0x0, 0xfd119975f0e9caf3) 00:01:58 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f8a7330000fe80000000"], 0x0) [ 1292.385962][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1292.393458][ C0] rcu: 0-....: (1 GPs behind) idle=706/1/0x4000000000000000 softirq=166415/166583 fqs=4874 [ 1292.404830][ C0] (t=10500 jiffies g=196261 q=403050) [ 1292.410367][ C0] NMI backtrace for cpu 0 [ 1292.414687][ C0] CPU: 0 PID: 2836 Comm: syz-executor.0 Not tainted 5.10.0-rc6-syzkaller #0 [ 1292.423612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.433639][ C0] Call Trace: [ 1292.436897][ C0] [ 1292.439819][ C0] dump_stack+0x107/0x163 [ 1292.444124][ C0] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1292.449297][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 1292.454469][ C0] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1292.460421][ C0] rcu_dump_cpu_stacks+0x1e3/0x21e [ 1292.465504][ C0] rcu_sched_clock_irq.cold+0x472/0xee8 [ 1292.471043][ C0] ? rcutree_dead_cpu+0x40/0x40 [ 1292.475863][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1292.480692][ C0] ? __raise_softirq_irqoff+0x93/0x1d0 [ 1292.486213][ C0] update_process_times+0x77/0xd0 [ 1292.491229][ C0] tick_sched_handle+0x9b/0x180 [ 1292.496054][ C0] tick_sched_timer+0x1d1/0x2a0 [ 1292.501359][ C0] ? can_stop_idle_tick+0x290/0x290 [ 1292.506763][ C0] __hrtimer_run_queues+0x1ce/0xea0 [ 1292.512310][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1292.518346][ C0] ? ktime_get_update_offsets_now+0x249/0x320 [ 1292.524403][ C0] hrtimer_interrupt+0x334/0x940 [ 1292.529336][ C0] __sysvec_apic_timer_interrupt+0x146/0x540 [ 1292.535403][ C0] sysvec_apic_timer_interrupt+0x48/0x100 [ 1292.541194][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1292.547434][ C0] RIP: 0010:__slab_free+0xb0/0x560 [ 1292.552721][ C0] Code: 89 44 24 48 0f b6 44 24 4f 74 07 45 31 f6 84 c0 74 0e 45 31 f6 80 7c 24 48 00 0f 84 f5 00 00 00 41 f6 45 0b 40 48 8b 4c 24 78 <74> 43 48 83 7c 24 10 00 0f 85 6b 02 00 00 48 89 da 48 8b 7c 24 08 [ 1292.572405][ C0] RSP: 0018:ffffc90000007bd0 EFLAGS: 00000202 [ 1292.578458][ C0] RAX: 0000000000000000 RBX: 000000008017000f RCX: 000000008017000e [ 1292.586418][ C0] RDX: ffff8880239312d0 RSI: ffff888023931428 RDI: ffff888016589280 [ 1292.594416][ C0] RBP: ffffc90000007c90 R08: 0000000000000001 R09: ffffffff876cf103 [ 1292.602462][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 000000008017000e [ 1292.610436][ C0] R13: ffff888016589280 R14: 0000000000000000 R15: ffffea00008e4c00 [ 1292.618408][ C0] ? inet_twsk_free+0x123/0x180 [ 1292.623255][ C0] ? __phys_addr+0x9a/0x110 [ 1292.627748][ C0] ? __kasan_slab_free+0x9b/0x140 [ 1292.632954][ C0] ? slab_free_freelist_hook+0x5d/0x150 [ 1292.638824][ C0] ? inet_twsk_free+0x123/0x180 [ 1292.643647][ C0] kmem_cache_free+0x302/0x350 [ 1292.648388][ C0] ? tcp_time_wait+0xd00/0xd00 [ 1292.653138][ C0] inet_twsk_free+0x123/0x180 [ 1292.657802][ C0] ? inet_twsk_kill+0x470/0x470 [ 1292.662621][ C0] inet_twsk_put+0x78/0xa0 [ 1292.667112][ C0] call_timer_fn+0x1a5/0x6b0 [ 1292.671674][ C0] ? add_timer_on+0x4a0/0x4a0 [ 1292.676410][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1292.681515][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1292.686787][ C0] ? inet_twsk_kill+0x470/0x470 [ 1292.691619][ C0] __run_timers.part.0+0x67c/0xa50 [ 1292.696712][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 1292.701544][ C0] run_timer_softirq+0xb3/0x1d0 [ 1292.706587][ C0] __do_softirq+0x2a0/0x9f6 [ 1292.711341][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1292.716338][ C0] [ 1292.719255][ C0] do_softirq_own_stack+0xaa/0xd0 [ 1292.724352][ C0] irq_exit_rcu+0x132/0x200 [ 1292.728831][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1292.734610][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1292.740583][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1292.746464][ C0] Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 4e 3b 6e f8 48 89 ef e8 d6 ef 6e f8 e8 31 d9 8d f8 fb bf 01 00 00 00 e6 5b 63 f8 65 8b 05 ef 05 1a 77 85 c0 74 02 5d c3 e8 8b 5b 18 [ 1292.766327][ C0] RSP: 0018:ffffc9000bb1f588 EFLAGS: 00000206 [ 1292.772461][ C0] RAX: 0000000000d1f6c5 RBX: ffff888091613480 RCX: 1ffffffff19d8e79 [ 1292.780412][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1292.788650][ C0] RBP: ffff8880b9e34940 R08: 0000000000000001 R09: 0000000000000001 [ 1292.796960][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b9e34940 [ 1292.810206][ C0] R13: ffff888011149a40 R14: 0000000000000000 R15: 0000000000000402 [ 1292.818199][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1292.823467][ C0] finish_task_switch+0x150/0x7a0 [ 1292.828473][ C0] ? finish_task_switch+0x122/0x7a0 [ 1292.833646][ C0] ? __switch_to+0x57c/0x1050 [ 1292.838303][ C0] __schedule+0x89b/0x2130 [ 1292.842785][ C0] ? io_schedule_timeout+0x140/0x140 [ 1292.848253][ C0] preempt_schedule_irq+0x4e/0x90 [ 1292.853253][ C0] irqentry_exit+0x7a/0xa0 [ 1292.857647][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1292.863782][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1292.869826][ C0] Code: fc ff ff 48 c7 c7 00 d5 38 8b 48 89 54 24 08 48 89 34 24 e8 62 ac 5e 02 48 8b 54 24 08 48 8b 34 24 e9 a1 fd ff ff 0f 1f 40 00 <65> 48 8b 14 25 00 f0 01 00 65 8b 05 30 eb 91 7e a9 00 01 ff 00 48 [ 1292.889505][ C0] RSP: 0018:ffffc9000bb1f790 EFLAGS: 00000246 [ 1292.895556][ C0] RAX: 0000000000000000 RBX: 0000000027053067 RCX: ffffffff81a14150 [ 1292.903689][ C0] RDX: 0000000000000000 RSI: ffff888091613480 RDI: 0000000000000007 [ 1292.911821][ C0] RBP: 0000000027053067 R08: 0000000000000001 R09: ffffc9000bb1f890 [ 1292.919796][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000027053 [ 1292.927752][ C0] R13: 0000000000000930 R14: dffffc0000000000 R15: 0000000000000000 [ 1292.935738][ C0] ? unmap_page_range+0x780/0x2640 [ 1292.940925][ C0] unmap_page_range+0x1614/0x2640 [ 1292.946048][ C0] ? vm_normal_page_pmd+0x510/0x510 [ 1292.951231][ C0] ? uprobe_munmap+0x127/0x560 [ 1292.955976][ C0] unmap_single_vma+0x198/0x300 [ 1292.960911][ C0] unmap_vmas+0x168/0x2e0 [ 1292.965235][ C0] ? zap_vma_ptes+0x100/0x100 [ 1292.969998][ C0] ? tlb_gather_mmu+0x212/0x3f0 [ 1292.974834][ C0] exit_mmap+0x2b1/0x530 [ 1292.979062][ C0] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1292.985053][ C0] ? __khugepaged_exit+0x2d9/0x3f0 [ 1292.990150][ C0] __mmput+0x122/0x470 [ 1292.994334][ C0] mmput+0x53/0x60 [ 1292.998071][ C0] do_exit+0xa72/0x29b0 [ 1293.002236][ C0] ? find_held_lock+0x2d/0x110 [ 1293.006989][ C0] ? mm_update_next_owner+0x7a0/0x7a0 [ 1293.012434][ C0] ? get_signal+0x34f/0x1f10 [ 1293.017032][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1293.021871][ C0] do_group_exit+0x125/0x310 [ 1293.026447][ C0] get_signal+0x42a/0x1f10 [ 1293.030850][ C0] arch_do_signal+0x82/0x2390 [ 1293.035587][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 1293.040706][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1293.046061][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1293.051242][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 1293.056503][ C0] ? asm_sysvec_irq_work+0x12/0x20 [ 1293.061598][ C0] exit_to_user_mode_prepare+0x100/0x1a0 [ 1293.067211][ C0] syscall_exit_to_user_mode+0x38/0x260 [ 1293.072835][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1293.078702][ C0] RIP: 0033:0x45e0f9 [ 1293.082568][ C0] Code: Unable to access opcode bytes at RIP 0x45e0cf. [ 1293.089385][ C0] RSP: 002b:00007f2d0f120c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1293.097794][ C0] RAX: 0000000020ffc000 RBX: 0000000000000006 RCX: 000000000045e0f9 [ 1293.105847][ C0] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1293.113899][ C0] RBP: 000000000119c128 R08: 0000000000000003 R09: 0000000000000000 [ 1293.121846][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000119c0dc [ 1293.129806][ C0] R13: 00007ffd6129505f R14: 00007f2d0f1219c0 R15: 000000000119c0dc