][T23791] usb 6-1: reset high-speed USB device number 112 using dummy_hcd 13:14:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setgid(r8) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400)={0x0, r6, r8}, 0xc) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:14:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 875.508618][T23791] usb 6-1: Using ep0 maxpacket: 8 [ 875.551831][T23896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 875.606267][T23896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 875.609189][T23860] raw-gadget gadget: fail, usb_ep_enable returned -22 13:14:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="5687595913275fd8baf8c9366cfb8716", 0x10) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x1c3000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000064c789044ca80abb6c66cbdafaa20ad73c45f2cf0f62af556e80ca13cd1bd5f1cb452fd76efe06b0268b50ad3f2923eb3a757771b7e376b2e078219ff6146d2121e3e078d4c86454bd894a8fee88215ef324420e127ad746", @ANYRES16=r7, @ANYBLOB="00042dbd7000fcdbdf251000000008002c0006000000060028000100000005002900010000000500300001000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8001) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) pipe(0x0) [ 875.688782][T23860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 875.748505][ C1] usblp0: nonzero read bulk status received: -71 [ 875.790588][T11857] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 876.032221][ T8757] usb 6-1: USB disconnect, device number 112 [ 876.072023][ T8757] usblp0: removed [ 876.328885][T11857] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 876.348532][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 876.357598][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 876.388523][T11857] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 876.397350][T11857] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 876.428517][T11857] usb 3-1: config 127 has no interface number 0 [ 876.435694][T11857] usb 3-1: config 127 has no interface number 1 [ 876.458593][T11857] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 876.478844][T11857] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 876.511938][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 876.536998][T11857] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 876.593792][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 876.611328][T11857] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 876.626156][T11857] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 876.638900][T11857] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 876.651522][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 876.664554][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 876.676560][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 876.692540][T11857] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 876.708266][T11857] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 876.730563][T11857] usb 3-1: config 127 interface 238 has no altsetting 0 [ 876.737814][T11857] usb 3-1: config 127 interface 192 has no altsetting 0 [ 876.828582][ T8757] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 876.939021][T11857] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 876.952851][T11857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.968624][T11857] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 876.993224][T11857] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 877.006253][T11857] usb 3-1: SerialNumber: ﳿ [ 877.039370][T23894] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.070678][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 877.192683][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 877.217457][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 877.237047][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 877.248015][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 877.272036][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 877.287361][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.329280][T23860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.346306][T23860] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 877.428764][ T8757] usb 6-1: can't set config #1, error -71 [ 877.437509][ T8757] usb 6-1: USB disconnect, device number 113 13:14:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x30, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfd, 0xfe, 0x0, 0xfe, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "572771863203a28f916cb06bc127"}}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fcntl$setstatus(r5, 0x4, 0x400) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) getuid() mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20bc22, &(0x7f00000002c0)={'trans=xen,', {[], [{@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@uid_gt={'uid>', r9}}, {@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@smackfsdef={'smackfsdef'}}]}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:14:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="7769010000001f000000", 0xa}], 0x1, 0x4) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0xfffffffb) close(r2) r3 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) 13:14:54 executing program 0: clone(0x2000a004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@null=' \x00', 0x7, 'gretap0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000001000000000001e000000100000000800001000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) [ 877.562791][T11857] usb 3-1: USB disconnect, device number 57 13:14:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008091}, 0x40) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, 0x0, 0xa0c, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x47fd}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffc0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x35c}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9c42}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6d8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$capi20(r5, &(0x7f00000000c0)={0x10, 0x8, 0x8, 0x80, 0x5, 0x4}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:14:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001001000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x3, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa00000, 0x5, 0x8, r0, 0x0, &(0x7f0000000040)={0xa10905, 0x7fff, [], @string=&(0x7f0000000000)=0x2}}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80623129", @ANYRES16=r2, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x164, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xae}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2121d89}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x164}, 0x1, 0x0, 0x0, 0x90}, 0x80) 13:14:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x0, {0x0, 0x3, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r6}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x8400, 0x0) write$P9_RREMOVE(r8, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) writev(r7, &(0x7f0000000000), 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 877.896521][T23969] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 877.941071][T23969] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 877.972542][T23971] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. 13:14:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:14:54 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000004105000600200000000a00000000000004000000e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) [ 878.056756][T23976] input: syz1 as /devices/virtual/input/input13 [ 878.078658][T21419] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 878.318619][T21419] usb 6-1: Using ep0 maxpacket: 8 13:14:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="dc1e4fed74e5144829c152f5853516ca1a010000e327cc08cd0631010c410000000109021b0001000000000904000001b9789b00070581020002000700536d274f24645b1998a97843283d98e602e3e460c317257c5e5343e2d5c4700c76c34aa428f3ac93b30e303819cbd19a592509188011f1afe5f9087989f711e0c4735f229c2245c9fdab997898455f5024912c1772b334aadb0e26ef4c853a37472e9e86c644198547228597952577fbc456bb67c3267a6f89848118c15865eac48b25a015792c6c751f095adf1170"], 0x0) 13:14:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe02, &(0x7f0000000700)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0xe00000000000000, 0x1f4}}], 0x3b4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 878.449009][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 878.460151][T11857] usb 3-1: new high-speed USB device number 58 using dummy_hcd 13:14:55 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000d533b20886120120872c00200001090224000100000000090400000230da6717"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') bind$qrtr(r1, &(0x7f0000000180)={0x2a, 0x4, 0x3fff}, 0xc) [ 878.490279][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 878.540785][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 878.580955][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 878.645994][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 878.704171][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:14:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xd3e}, {0x5, 0xff}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="f0000000100000000000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000001f000000030000c00000", @ANYRES32=0x0], 0xf0}}, 0x0) [ 878.748820][ T8757] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 878.760254][T23966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 878.775544][T23966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 878.819336][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 878.825361][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 878.828926][ T3682] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 878.918830][T11857] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 878.927213][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 878.995613][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 879.018591][ T8757] usb 5-1: device descriptor read/64, error 18 [ 879.041678][T23966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.067542][T23966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 879.078690][T11857] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 879.078788][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 879.087830][T11857] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 879.087846][T11857] usb 3-1: config 127 has no interface number 0 [ 879.087861][T11857] usb 3-1: config 127 has no interface number 1 [ 879.087922][T11857] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 879.087943][T11857] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 879.087962][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 879.087986][T11857] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 879.088005][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 879.088038][T11857] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 879.238922][ T3682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.256362][ T3682] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 879.369047][ T3682] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=2c.87 [ 879.382909][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 879.405383][ T3682] usb 2-1: Product: syz [ 879.407462][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 879.418669][ T8757] usb 5-1: device descriptor read/64, error 18 [ 879.453629][ T3682] usb 2-1: config 0 descriptor?? [ 879.485090][T11857] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 879.533984][T11857] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 879.583025][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 879.602514][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 879.618010][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 879.637358][T11857] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 879.658840][T11857] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 879.698527][ T8757] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 879.699741][T11857] usb 3-1: config 127 interface 238 has no altsetting 0 [ 879.736319][T11857] usb 3-1: config 127 interface 192 has no altsetting 0 [ 879.761089][ T3682] usb 2-1: USB disconnect, device number 30 13:14:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="03df000071040000009dfa6aeb9720010000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getrusage(0xffffffffffffffff, &(0x7f0000000240)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffff90a7}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x3, 0x4, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) [ 879.918797][T11857] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 879.933666][T11857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.952253][T11857] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 879.965519][T11857] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 879.978140][T11857] usb 3-1: SerialNumber: ﳿ [ 879.979377][ T8757] usb 5-1: device descriptor read/64, error 18 [ 880.009494][T23983] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 880.068640][T23966] usb 6-1: reset high-speed USB device number 114 using dummy_hcd 13:14:57 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"/1300], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500000000000000000060000000"}, 0x28) socket$kcm(0x29, 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) mq_notify(r1, &(0x7f0000000040)={0x0, 0x1e, 0x0, @tid=0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 880.358581][T23966] usb 6-1: device descriptor read/64, error 18 [ 880.408616][ T8757] usb 5-1: device descriptor read/64, error 18 [ 880.498579][ T3682] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 880.523986][T11857] usb 3-1: USB disconnect, device number 58 [ 880.529511][ T8757] usb usb5-port1: attempt power cycle [ 880.749238][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 880.789941][T23966] usb 6-1: device descriptor read/64, error 18 13:14:57 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000002bc0)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64, @ANYRESDEC], 0x8c, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYBLOB, @ANYRESDEC], 0x8c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4410, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) [ 880.868930][ T3682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.888666][ T3682] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 880.998833][ T3682] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=2c.87 [ 881.008118][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 881.058509][ T3682] usb 2-1: Product: syz [ 881.064609][ T3682] usb 2-1: config 0 descriptor?? [ 881.068575][T23966] usb 6-1: reset high-speed USB device number 114 using dummy_hcd [ 881.248591][ T8757] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 881.368739][ T3682] usb 2-1: USB disconnect, device number 31 [ 881.418950][ T8757] usb 5-1: device descriptor read/8, error -71 [ 881.628794][ T8757] usb 5-1: device descriptor read/8, error -71 [ 886.298603][T23966] usb 6-1: device descriptor read/64, error -110 [ 886.628635][T23966] usb 6-1: device descriptor read/64, error -32 [ 886.898625][T23966] usb 6-1: reset high-speed USB device number 114 using dummy_hcd [ 887.008765][T23966] usb 6-1: device descriptor read/8, error -32 [ 887.228625][T23966] usb 6-1: device descriptor read/8, error -32 [ 887.498647][T23966] usb 6-1: reset high-speed USB device number 114 using dummy_hcd [ 887.608775][T23966] usb 6-1: device descriptor read/8, error -32 [ 887.828695][T23966] usb 6-1: device descriptor read/8, error -32 13:15:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000001c0)={0x0, @motion_det}) 13:15:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x8, 0x4) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x9200}, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, "88e8fc", 0x19d, 0x6, 0x0, @mcast1, @private1, {[@dstopts={0x2c, 0xc, [], [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xf, 0x1f, [0x7fff]}}, @generic={0x0, 0x4b, "6a3ef284274663c251cc14e35b645024eea92882c7929660c35c950c6f97e72d49b394958006bedee27c734db2f8053ee844d2b140040210f967e7fd6fefa9e6fdf0b2c7ce9905370dd356"}]}, @routing={0x87, 0x2, 0x0, 0x3f, 0x0, [@private1]}, @fragment={0x2b, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x64}], {{0x4e22, 0x4e23, r5, 0x41424344, 0x0, 0x0, 0x9, 0x51, 0x5, 0x0, 0x7, {[@generic={0x3, 0xe, "51e17a015d92394098d2c37f"}, @eol, @nop]}}, {"42dfb862924ea2cc60eae02330c9498bf85418798b93bd17aa94a0d45c6d37805d8117a0cdcdcbcd4ad70156ca9e49043bdeb0cd47d326fb456b8130ac3fb6d00bdbe1454423c4d28037914210b75f0511922ea325007ab550fd1bc35f233f69174de24c41b09b979488f30f7e046f606d27c6ef8db17149970dbbb06c32191c99a7424a437ac770dba61067542cc271a22e00697835453592488d669e56bbc9dd6a9e06ced9d12eb57f9b996a43f4602a57492642467d03e9ef3b986e9adee332094028d95254965516a7ba480d9af013f520fa423a91b6f47cd85dabedb245958761350c5c5ec521"}}}}}}}}, 0x1d7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x10000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0xd, r0}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f0000000040)) 13:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001058041150000000000001090224fb01000000000904000049030000000921a800000122dc0109058103ce"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13:15:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, 0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000200)=0x8) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 887.949350][ T2486] usb 6-1: USB disconnect, device number 114 [ 887.981983][ T2486] usblp0: removed [ 888.135899][T24105] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 888.143782][T24105] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 888.263037][T24105] overlayfs: upper fs does not support RENAME_WHITEOUT. 13:15:05 executing program 1: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000b80)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_create1(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0xf4, 0x464, 0x4, 0x70bd2d, 0x25dfdbfb, "2960691e1ed0441d1828b0d420f7230e57855f5b74b8629d8a487be8a909d9c64cc7239accf8995a07b78de88b7bb4f385275d437605a910fd1dfca70e3766e4aae4f45becdab447e2a5e3f7be558070e899d1c28e51fc072623bc6eaba7474750c765485020d89a6647542f1b4918d4eabcadca03c58e61e0e29dda06a8b80f88bb43764559ae1dba9c9752d81ad17ffa63fceb0e54d9596b5c0183ebc6733941d5149b9de9607ee59a5989d07d0ab0cc452f346b4518a1b7b6ce4eed3fb82dfcde1cb0b471d67bb033fdabd967a0a9e5d727bd454d9735394fe8d1b170c3fc52", ["", "", "", "", ""]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000}, 0x20050001) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mlock(&(0x7f0000007000/0x2000)=nil, 0x2000) [ 888.315382][T24105] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 888.348715][ T8069] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 888.396235][T11857] usb 3-1: new high-speed USB device number 59 using dummy_hcd 13:15:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES16=r0], 0x0) [ 888.510310][ T29] audit: type=1804 audit(1594041305.186:113): pid=24123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/376/bus" dev="sda1" ino=16380 res=1 [ 888.537488][ T29] audit: type=1804 audit(1594041305.196:114): pid=24123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/376/bus" dev="sda1" ino=16380 res=1 [ 888.574470][ T29] audit: type=1804 audit(1594041305.216:115): pid=24123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/376/bus" dev="sda1" ino=16380 res=1 13:15:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2000000d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000000)={'veth1_to_bond\x00', 0x1ff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r2, 0x0, 0x200fff) [ 888.628571][ T8069] usb 5-1: Using ep0 maxpacket: 16 [ 888.667787][ T29] audit: type=1804 audit(1594041305.216:116): pid=24123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/376/bus" dev="sda1" ino=16380 res=1 [ 888.668751][ T2486] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 888.692792][ T29] audit: type=1804 audit(1594041305.276:117): pid=24125 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/376/bus" dev="sda1" ino=16380 res=1 [ 888.789009][ T8069] usb 5-1: config index 0 descriptor too short (expected 64292, got 36) [ 888.798611][ T8069] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 888.810045][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.824140][ T8069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 888.844218][ T8069] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 888.859513][ T8069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.871742][ T8069] usb 5-1: config 0 descriptor?? [ 888.918954][T11857] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 888.937723][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 888.938838][ T2486] usb 6-1: Using ep0 maxpacket: 8 [ 888.975885][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 889.013364][T11857] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 889.046707][T11857] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 889.086304][T11857] usb 3-1: config 127 has no interface number 0 [ 889.088883][ T2486] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 889.100218][T11857] usb 3-1: config 127 has no interface number 1 [ 889.116968][ T2486] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 889.121126][T11857] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 889.141378][ T2486] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 889.148925][T11857] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 889.167125][ T2486] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 889.172610][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 889.202510][ T2486] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 889.205134][T11857] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 889.225925][ T2486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.233197][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 889.245409][T11857] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 889.259388][T11857] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 889.277608][T11857] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 889.288981][T24114] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.289116][T24114] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.325597][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 889.361669][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping 13:15:06 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES16=r0], 0x0) [ 889.423429][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 889.448740][ T8069] usbhid 5-1:0.0: can't add hid device: -71 [ 889.471577][ T8069] usbhid: probe of 5-1:0.0 failed with error -71 13:15:06 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) pread64(r3, &(0x7f0000000200)=""/52, 0x34, 0x0) close(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, 0xffffffffffffffff, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000240)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffff1268eb3d4c5ac8dddcabd8000900000000ffffffffffff10005a650a22cfd7fc479f66fcd4271f889df88d0629c7bf25522b31216449f4d377a0076fcce39aa4295900e4e794c49710f609d600"/96], 0x5f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 889.534182][ T8069] usb 5-1: USB disconnect, device number 48 [ 889.560899][T11857] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 889.654331][T11857] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 889.703838][T11857] usb 3-1: config 127 interface 238 has no altsetting 0 [ 889.716832][T11857] usb 3-1: config 127 interface 192 has no altsetting 0 [ 889.723012][ T2486] hub 6-1:1.0: bad descriptor, ignoring hub [ 889.730279][ T2486] hub: probe of 6-1:1.0 failed with error -5 [ 889.749156][T24114] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 889.766306][T24114] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:06 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x80012}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x2, 0x0, 0x5a, 0x7, 0xe, "e8145a19eb6c5a84"}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r6 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) sendfile(r6, 0xffffffffffffffff, 0x0, 0x8000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x8320, 0x0, 0x0, 0x0, 0x38db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r6, 0x1) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) [ 889.958941][T11857] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 889.973608][T11857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.991046][ T2486] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 889.997912][T11857] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 890.055757][T11857] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 890.074691][T11857] usb 3-1: SerialNumber: ﳿ [ 890.109350][T24109] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 890.248671][ T8069] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 890.518732][ T8069] usb 5-1: Using ep0 maxpacket: 16 [ 890.622631][T11857] usb 3-1: USB disconnect, device number 59 [ 890.648596][T24114] usb 6-1: reset high-speed USB device number 115 using dummy_hcd [ 890.659007][ T8069] usb 5-1: config index 0 descriptor too short (expected 64292, got 36) [ 890.667476][ T8069] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 890.688021][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.717463][ T8069] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 890.737761][ T8069] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 890.747310][ T8069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.763262][ T8069] usb 5-1: config 0 descriptor?? [ 890.908656][T24114] usb 6-1: Using ep0 maxpacket: 8 [ 891.009425][T24162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 891.017637][T24162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 891.108564][ C0] usblp0: nonzero read bulk status received: -71 [ 891.138757][ T8069] usbhid 5-1:0.0: can't add hid device: -71 [ 891.144857][ T8069] usbhid: probe of 5-1:0.0 failed with error -71 [ 891.168142][ T8069] usb 5-1: USB disconnect, device number 49 [ 891.319043][ T2486] usb 6-1: USB disconnect, device number 115 [ 891.337731][ T2486] usblp0: removed [ 891.569638][ T0] NOHZ: local_softirq_pending 08 [ 892.068581][ T8069] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 892.318588][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 892.438735][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 892.449939][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 892.461835][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 892.473497][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.487872][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 892.500359][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.529414][T24162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.536428][T24162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 892.569466][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 892.575504][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 892.628640][ T8069] usblp: can't set desired altsetting 0 on interface 0 13:15:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x24004880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f00000002c0)=""/164) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@void, @void, @llc={@llc={0xfe, 0x4e, ';', "bb52d2a743c3748682fa67071ef6aead9c71db038b54ef8323b58abce288049a8474eea5f62ce219389c23d57c5010c36bd04751f102cea60226266499f02a50fe14683a5a674407801d4d3b2b0d33de13ee3222eb2bfadbcd9f82650da3a213eeaf13540c58a3f871cfea26035af05d7fccca3934f856a01158929875301ce76caefc211237f65f183d724100fac35ffbe0c5d78b8c"}}}, 0x99) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 13:15:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000104050000000000000000000a000006080005400000007f05000100020000000a00020000000003000000000800044026a55a0a0800054000000008570f145b1244e0a1d2ddf5c904af8dc135b05f13527a5b5cd6a7518e997cb9b7000704a9d6046df74e6e3ec0233caf88592d05708c3509389a3280f368587582081e0f527de34661358ed4436e8bf64f869ea254b269b1536380dc733f6633949274d2a1cfd48dd0ca9ab48a2d01a3e9192844e98c241abee564b5fd3a27988d0b206d9cde9cfbe465dab518fafaa0ff6334319f116144cd26f2e6dce959f6df4d7690586da9a1c480c6afcdc70f87ec5b8ce79f6e0c"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x2, [@generic={0x7, 0x10, 0x2, "72d27b9a"}, @ptm_cap={0x3}]}}) 13:15:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x424c83, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'netpci0\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x0, 0x4}, @val={0x0, 0x0, 0xc7, 0x2, 0x1000, 0x3}, @llc={@snap={0x1, 0x0, "a6", "bd2e17", 0xb8c25197b0bfaab5, "c4e8793e0478817b45025b761d45a9710c7dc34e4beefe194bbcc018ea21ab1609bf37565129cba6b3e2e97f92f66737f2be0e7b3cc6a3a4ac65bcdb859d362f269c77e521b7d5d24f5337fb1b4fb0a9231da81df2ffa8edb740b2f9c945e45a129f175c9baf65c32b1c3061a5d946fe5e3d2b66bbb2c500f2ad5713773bc442e92bcab30a121e99c2497b8aa1eeb8f79c73296e3427e96f0a0c947c83addd37e4a82e6dcbd4a200c4d516d486aa5c50c82d35e9eab382985aac08dfe2a0c2b91b86eeecceb3de9aa6519e23b044"}}}, 0xe4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0xa20) r6 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080)=0x9, 0x8000) fcntl$addseals(r6, 0x409, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup3(r7, r6, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="e7b8b290632d"]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000200)={0xe4b, 0x2288, 0x8, {0xc4ea, 0x6}, 0x9, 0xfffffff7}) 13:15:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 892.670576][ T8069] usb 6-1: USB disconnect, device number 116 13:15:09 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4400, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f00000001c0)={0x5, 0xfffff25e, 0x1a, "debcc3fb4de5b5f8c03d6299eb5ffbb1eb830bddc7a4f39771b68bf527e37188b7279510e177904681025da37339b0b9217ad51873872da696a683f3", 0x17, "4cef493374a40ca0f3c473341febb3d18d36c6e139d4d716872fd51bf4e99901cad0e4017748b291c0915d1041b5259cae0cd550b13d7066e2d3a929", 0x8}) dup3(r5, r1, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x64000) [ 893.038546][T11857] usb 3-1: new high-speed USB device number 60 using dummy_hcd 13:15:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCCBRK(r1, 0x5428) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x46, 0x0, &(0x7f0000000100)="4d50b441e692763513ef874565580000ff0d0000f000122e25d386dd227dcb6470faa27ed2a0ff3862c8112b9bd19802e274d7b70fe661176f27007b9631b3a0291d70d5f32d", 0x0, 0x1fd, 0x0, 0x66, 0xffffff02, &(0x7f0000000000), &(0x7f0000000380)="7045502c9fe7d72a5d725d07000000840c0fa18b214f01adde5b220866f34723aefcc876df83a6915a0a9aed8abea8fce9dca40354f218178eedfd571140c75e8aaafa38e2ecaa6ebfc27f5dc7301c0a85450d3cfc4ceee8968d0ab47f1d829da06a01f82ec4f14d3c692a59db27ece44a0e029488462d11e930e90d5deafb1b5af71d3cd3c053aa34bc8d000000"}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x9c, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x1, 0x2, 0xdf}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xfcdce11ffd8fb575}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5f}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) [ 893.228542][ T8069] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 893.479536][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 893.490624][T11857] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 893.511933][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping 13:15:10 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) chroot(&(0x7f00000000c0)='.\x00') close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000000000001ff0200000000000000000000000000010100907800000000004000003200fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000050000000000"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 893.570253][T11857] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 893.598957][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 893.638486][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 893.651474][T11857] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 893.699288][T11857] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 893.714986][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 893.771793][T11857] usb 3-1: config 127 has no interface number 0 [ 893.786881][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 893.833085][T11857] usb 3-1: config 127 has no interface number 1 [ 893.866727][T11857] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 893.878639][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 893.889607][T11857] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 893.901553][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.911254][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 893.927945][T11857] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 893.939728][T24245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.940646][T11857] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 893.947312][T24245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 893.971271][T11857] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 894.000557][T11857] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 894.015992][T11857] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 894.029831][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 894.035952][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 894.053909][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 894.068548][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping 13:15:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000240)={0xa70004, 0x5, 0x10, r0, 0x0, &(0x7f0000000200)={0x990903, 0x9f91, [], @p_u8=&(0x7f00000001c0)=0xc1}}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000280)=0x7f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '=\x00', 0x10, 0x21, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "78966f", 0x0, ' V\r'}}}}}}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xe32, 0x400000) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000180)={0x2c, @broadcast, 0x4e22, 0x1, 'ovf\x00', 0x1, 0xfffffe00, 0x59}, 0x2c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000000c0)=""/85, &(0x7f0000000140)=0x55) [ 894.081305][T11857] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 894.093239][T11857] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 894.105338][T11857] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 894.119923][T11857] usb 3-1: config 127 interface 238 has no altsetting 0 [ 894.127155][T11857] usb 3-1: config 127 interface 192 has no altsetting 0 13:15:10 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x14002) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xc4, 0x19, 0x2fafe797b6e80ce9, 0x0, 0x0, {{@in=@local, @in6=@private2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4}, {0x0, 0x0, 0x10000}}, [@mark={0xc, 0x15, {0x350759, 0x8}}]}, 0xc4}}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000000c0)=""/190) 13:15:10 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000880)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb04e4cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80623129", @ANYRES16=r1, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x84, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040090) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="6d69373107f9949d640940cb9f248506b3c94619e3235ad4b133d77b00a3d6a02ce43fca6fd270414a9ef296870f57550d", 0x31, 0x0, &(0x7f00000000c0)={0x1d, 0x0, @dev}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xe0, r2, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}]}]}, 0xe0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400, 0x0) [ 894.256347][T24245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.270467][T24245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.288887][T11857] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a 13:15:11 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) pipe(&(0x7f00000001c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000100)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffffffffffffff, 0x1b45}, 0x0, 0x0) [ 894.305053][T11857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:15:11 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8002) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000140)={0x1, 0x401}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r8, 0x4}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r3, r0, 0x0) [ 894.352537][T11857] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 894.388778][T11857] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 894.419476][T11857] usb 3-1: SerialNumber: ﳿ [ 894.459490][T24232] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 894.520331][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:15:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup3(r2, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0xfffffffd, 0x3df, "16c84a425590f63a0e7500a68ab8acea89ec384ecdd6e3a2280cb9fd6fdbca0af17136e881985d07251420e066b6e06aae9ee5f1de55d1c7beaa33043704a8af3d39ae6f4ade00d9142c2c8ac70088d39ea319b9bc6bf3fed9f378a87c5cda8dbbdc2863ea853d647943916af2ce9e262b4f6f148a42dee059dfa7875bdec733b91ab90ecc646016d1fea157625b8fe9d625870b9ebdb5951a06df985fcb8e0c84dfb235e761167d022f851470e7cb3e6dbc89589cba01727acfb1617db8f634c4a9f5f9a0030f5c82341ef412f28534b59a5b40fb3d4d6d7580935e1aace366901d92dd938a835855ffdcea18aff4748371f7d8aab48b2acb75792fb0108912", 0xe8, 0xd, 0x2, 0x2, 0x1f, 0x1}, r4}}, 0x128) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @ib={0x1b, 0xe7, 0x8, {"97982542f914498c659848df51605b50"}, 0x0, 0x6b, 0x2}}}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @val={0x1, 0x84, 0x8, 0x7, 0x9, 0x5}, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x7c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r5, 0x0, 0x18102, 0x0) [ 894.664642][ T29] audit: type=1800 audit(1594041311.336:118): pid=24280 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16367 res=0 [ 894.804415][T24284] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 894.922696][T24245] udc-core: couldn't find an available UDC or it's busy [ 894.935120][T24245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 894.961538][T24314] Process accounting resumed [ 894.982926][T11857] usb 3-1: USB disconnect, device number 60 [ 894.983211][ T7128] minix_free_inode: bit 1 already cleared 13:15:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, r3, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}}, 0x404c054) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01020000", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={r5, @in6={{0xa, 0x0, 0x800, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x8000]}, &(0x7f0000000000)=0xfc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000980)={r5, @in6={{0xa, 0x4e20, 0x4, @empty, 0x2}}, 0x1, 0x0, 0x4, 0x761, 0x2, 0xe1b, 0x7}, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x1e0}]) [ 895.168874][ T2486] usb 6-1: USB disconnect, device number 117 [ 895.207627][ T2486] usblp0: removed 13:15:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f100000080003"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYRES32=r5], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 13:15:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 895.578011][ T29] audit: type=1804 audit(1594041312.246:119): pid=24352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/381/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 895.768572][ T2486] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 895.868599][ T8069] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 896.128561][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 896.248811][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 896.263895][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 896.274440][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 896.278616][ T2486] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 896.294471][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 896.294961][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.305593][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 896.327295][ T2486] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 13:15:13 executing program 4: read$usbfs(0xffffffffffffffff, &(0x7f0000000000), 0x0) unshare(0x40000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f00000000c0)=0x6) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x7, 0x5, 0x32, &(0x7f0000ffb000/0x2000)=nil}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) 13:15:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x2, 0x0, 0x7}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf250f0000000a000900ffffffffffff000008003a0078b80000080034000500000008003c10f9faffff05002a000100000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="05002a000100000008002b00d1000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 13:15:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x404801, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000280)={0x1, 0x1, 0x7ffffffe, 0x3, &(0x7f0000000300)=[{}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x6, &(0x7f00000001c0)=0x4) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 896.341620][ T2486] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 896.346841][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 896.402521][ T2486] usb 3-1: config 127 has no interface number 0 [ 896.420025][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.439431][ T2486] usb 3-1: config 127 has no interface number 1 [ 896.455995][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.481391][ T2486] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 896.489831][ T8069] usb 6-1: can't set config #1, error -71 13:15:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)={r5}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 896.507839][T24369] IPVS: ftp: loaded support on port[0] = 21 [ 896.539313][T24376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.542543][ T8069] usb 6-1: USB disconnect, device number 118 [ 896.555044][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 896.591291][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 896.617382][ T2486] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 896.674305][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.685353][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 896.706134][T24398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.712804][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 896.733413][ T2486] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 896.747288][ T2486] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 896.759790][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 896.772340][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 896.794068][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 896.820091][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 896.834467][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 896.856109][ T2486] usb 3-1: config 127 interface 238 has no altsetting 0 [ 896.872091][ T2486] usb 3-1: config 127 interface 192 has no altsetting 0 13:15:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ftruncate(0xffffffffffffffff, 0x200004) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="73844ae89d", 0x5}]) 13:15:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@rand_addr=' \x01\x00', @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x3, 0x0, 0x4, 0x100, 0x81, 0x4000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000480)={0x0, 0xffffff18, 0x8001, 0x0, 0x6}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0xffffff7f, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0)=0xffffff81, 0x4) [ 897.029018][ T8069] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 897.069265][ T2486] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 897.090077][T11696] tipc: TX() has been purged, node left! [ 897.090301][ T2486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.159398][ T2486] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ 13:15:13 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 897.203844][ T2486] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 897.212016][T24427] device bridge5 entered promiscuous mode [ 897.247901][ T2486] usb 3-1: SerialNumber: ﳿ [ 897.278742][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 897.289448][T24350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.398865][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 897.426668][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 897.481057][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 897.519174][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 897.568663][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 897.578011][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.649024][T24394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.655990][T24394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.689352][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 897.695366][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 897.801641][ T2486] usb 3-1: USB disconnect, device number 61 [ 897.890705][T24384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 897.897663][T24384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 898.143562][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 898.798712][T24384] usb 6-1: reset high-speed USB device number 119 using dummy_hcd [ 899.048559][T24384] usb 6-1: Using ep0 maxpacket: 8 [ 899.169313][T24394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 899.176245][T24394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 899.238563][ C1] usblp0: nonzero read bulk status received: -71 [ 899.449587][ T3681] usb 6-1: USB disconnect, device number 119 [ 899.539112][T24379] usblp0: removed [ 900.081753][T24485] udc-core: couldn't find an available UDC or it's busy [ 900.089137][T24485] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 13:15:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts={0x29}]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:22 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100500, r4, 0x19}) 13:15:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@x25={0x9, @remote}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/255, 0xff}, {0x0}, {0x0}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002200)=""/63, 0x3f}, {&(0x7f0000002240)=""/193, 0xc1}], 0x2}, 0x2}, {{&(0x7f0000003500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}, {{&(0x7f0000003800)=@rc={0x1f, @none}, 0x80, &(0x7f0000003940), 0x0, &(0x7f0000003980)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004980)=""/48, 0x30}], 0x1, &(0x7f0000004b00)=""/142, 0x8e}}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, &(0x7f00000052c0)) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000200)=""/142, 0x8e}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r1) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setresuid(0x0, r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000040)) 13:15:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000c4463be5f7e68a758882485644472a0e75", @ANYRES32=r3, @ANYBLOB="00000000000000000e0000000b000100666c6f77657200000c00020006005d0000000000"], 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:15:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r5 = dup2(r4, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) [ 905.838385][ T29] audit: type=1804 audit(1594041322.506:120): pid=24518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/385/bus" dev="sda1" ino=16177 res=1 [ 905.980399][ T29] audit: type=1804 audit(1594041322.546:121): pid=24518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/385/bus" dev="sda1" ino=16177 res=1 13:15:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80788c638c0d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f00000000c0)) close(r1) [ 906.020021][ T29] audit: type=1804 audit(1594041322.606:122): pid=24506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/385/bus" dev="sda1" ino=16177 res=1 [ 906.048177][ T29] audit: type=1804 audit(1594041322.626:123): pid=24506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir572983314/syzkaller.4L8Zg4/385/bus" dev="sda1" ino=16177 res=1 [ 906.048696][ T3681] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 906.079180][ T8757] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 906.092551][T24505] overlayfs: failed to resolve './file1': -2 [ 906.117136][T24523] overlayfs: failed to resolve './file0': -2 13:15:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3ff, 0x80200) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNGETIFF(r0, 0x400454cb, &(0x7f0000000080)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) [ 906.153348][T24526] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 13:15:22 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) write$P9_RSTATFS(r5, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x6, 0xfffffff7, 0x7, 0x10000, 0x7, 0x5, 0x0, 0x2, 0x2}}, 0x43) exit_group(0x0) close(r0) socket(0x840000000002, 0x3, 0x6) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffd90, 0x200001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x0) [ 906.332476][T24541] tap0: tun_chr_ioctl cmd 1074025675 [ 906.342979][T24541] tap0: persist enabled [ 906.348265][T24541] tap0: tun_chr_ioctl cmd 1074025675 [ 906.355200][T24541] tap0: persist disabled [ 906.361502][ T3681] usb 6-1: Using ep0 maxpacket: 8 13:15:23 executing program 4: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = memfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fadvise64(r2, 0x0, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf8, 0x0, 0x1, 0x7f, 0x6, @multicast}, 0x14) fallocate(r0, 0x5a, 0x40000000000002, 0x10000) ioctl$RTC_VL_CLR(r1, 0x7014) sendfile(r1, r2, 0x0, 0x11f08) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10) [ 906.474747][T24541] tap0: tun_chr_ioctl cmd 1074025675 [ 906.487561][T24541] tap0: persist enabled [ 906.496286][T24556] tap0: tun_chr_ioctl cmd 1074025675 [ 906.502044][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 906.505328][T24556] tap0: persist disabled [ 906.539416][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.551311][ T8757] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 906.560640][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 906.573766][ T8757] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 906.585078][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 906.600510][ T8757] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 906.619517][ T8757] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 906.628670][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 906.638341][ T8757] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 906.652106][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.657918][ T29] audit: type=1800 audit(1594041323.326:124): pid=24559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16384 res=0 [ 906.665853][ T8757] usb 3-1: config 127 has no interface number 0 [ 906.692960][ T8757] usb 3-1: config 127 has no interface number 1 [ 906.702598][ T8757] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 906.714598][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.722820][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.730816][ T8757] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 906.744392][ T8757] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 906.757501][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 906.764442][ T8757] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 906.784563][ T3681] hub: probe of 6-1:1.0 failed with error -5 [ 906.793295][ T8757] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 906.805921][ T8757] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 906.821876][ T8757] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 906.835023][ T8757] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 906.848355][ T8757] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 906.861258][ T8757] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 906.874518][ T8757] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 906.887945][ T8757] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 906.900819][ T8757] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 906.916751][ T8757] usb 3-1: config 127 interface 238 has no altsetting 0 [ 906.926468][ T8757] usb 3-1: config 127 interface 192 has no altsetting 0 [ 906.944815][T24526] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 906.959913][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 906.966875][T24507] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.098924][ T8757] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 907.112783][ T8757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.137775][ T8757] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 907.160190][ T8757] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 907.168196][ T8757] usb 3-1: SerialNumber: ﳿ 13:15:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000000000001ff02000000000000000000000000000101009078000000006086004000003200fe80000000000000000000000000009bfe8000000000000000000000000000aa0000000000000000"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 907.209498][T24509] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 907.230850][ T3681] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:15:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) r3 = dup(r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x32b942, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000100)={0x1, 0x7f}) splice(r0, 0x0, r4, 0x0, 0x1420000a7a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000300ef776f07744d5e6ad8534deda47a2c6fed61bc9818fb2544060ccf42e9d91317e65294222400eee99dc95572748f3c5d5f8c1925800dd45efad7d9b15ef90e55827f211da84e2a6de12da0e08ce272ef7ef75017f903af583df592855908357655100f88d73328979b7cf32df3ced7978e8ea0ed3a61353e6d2c4e2573805e1729821cba0b369746", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffa) 13:15:24 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x40, @loopback, 0xffffffff}, 0x73a827d1de32491a) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x4c4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "90df3b0734b151ac", "d5600a09966c6c5342c2371f9bc1487d", "7cf300", "21da967d5bcef793"}, 0x28) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x8e9e) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 13:15:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 907.441219][T24507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 907.763742][ T8757] usb 3-1: USB disconnect, device number 62 [ 907.908672][T24507] usb 6-1: reset high-speed USB device number 120 using dummy_hcd [ 908.168759][T24507] usb 6-1: Using ep0 maxpacket: 8 13:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 908.269232][T24612] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 908.276244][T24612] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x41) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003c40)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a00010072737670"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x148, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) flock(r8, 0x2) [ 908.408500][ C0] usblp0: nonzero read bulk status received: -71 [ 908.573934][T11857] usb 6-1: USB disconnect, device number 120 [ 908.611849][T11857] usblp0: removed [ 908.617852][T24643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 908.768937][T21419] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 909.178126][T24639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.209005][T21419] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 909.222926][T24651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.240964][T21419] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 909.283492][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.303517][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.323219][T21419] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 909.349346][T24639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.384068][T21419] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 909.434336][T21419] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 909.476228][T21419] usb 3-1: config 127 has no interface number 0 [ 909.506385][T21419] usb 3-1: config 127 has no interface number 1 [ 909.519124][T21419] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 909.532968][ T12] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 909.580794][T21419] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 909.595048][T21419] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 909.608191][T21419] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 909.658640][T21419] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 909.704973][T21419] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 909.732985][T21419] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 909.760858][T21419] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 909.801351][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 909.838555][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 909.850803][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 909.865203][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 909.877611][T21419] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping 13:15:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x6) 13:15:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19030000001da9e34de39740c212000c009700607269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r8], 0x3c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup3(r9, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xec, 0x8000, 0x4, 0x2000, 0x3}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="f852cd6780b6250ab192a3617151470fe0636c5e908eea0000000000000000470000000000145468e13017dc2e839292b12e1bc9e275865ec3523b1dc9af25bbd2af2aabeb4aae83b522800d3a181fe118081187f40ba7614d26401cf07a090300dadec90e4d4cc567166c121e32678a656bce0487db9f8943b99784e8c89078a4c86fcdf9590cc141ff2456dba6a382d0a433141502670a8e368ad9909b766ed2c70a3f521f"], 0x4c}}, 0x0) 13:15:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040)=0x6, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, 0xffffffffffffffff, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x2, 0x2, 0x4, 0x40, 0x2, {0x77359400}, {0x2, 0xc, 0x2d, 0x1f, 0x3, 0x1f, "d0d85bb6"}, 0x6, 0x1, @fd=r4, 0xffc00000}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5b6, 0x102}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacc, 0x11002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x9104, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x13) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x400000000) 13:15:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x18}, @val={0x3, 0x0, 0xfff, 0x1000, 0x3, 0x7}, @eth={@multicast, @broadcast, @void, {@llc={0x4, {@snap={0x0, 0xaa, "03", "ca73a9", 0x9000, "ff250ab80bc71d2993db576ae193bce5a0dad38ccad6290d75733d99a152e928ec1bdcd5ab1926b01b"}}}}}}, 0x4d) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fddbdf250a00000009000700b58c3cda2200000094c67aa27d4990442fdf0cd8c8114a4bd51001071bc97da605ab7786a941e096a184dbb6041df6d166"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000300)={0x2, 0x0, 0x2040, 0x8, 0x6c, 0x0, 0x3ff, 0x23, 0x7}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="400d0ad58d086efc754f707ef8968348c1e5b9c6acee646289e1d8c233ff5ebbef8f3077e0a32f000000000000dc72c5982270a59217349d26323bea00937cb36cdd3e42b8db39d1d9471daef7716081ff0a63cca09a2b11de0e3be832a5149ac30200bcb1860a20478c9fe93181c28cdd4becf35400ecacc16ef7c214d1b308e14edb6ff8d522887a79356d0000000000d65cd6854fe0af0c283f997dc3e050688336ced0eb3a8fc7a030b26b132b7d9cb3ffe59dcf5c775ee3ce7610eb70d6fc00"/212, @ANYRES16=r8, @ANYBLOB="000c2bbd7000ffdbdf250a0000000800090001ac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) [ 909.915325][T21419] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 909.946915][T21419] usb 3-1: config 127 interface 238 has no altsetting 0 [ 909.978648][ T12] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 909.986357][ T12] usb 6-1: can't read configurations, error -71 13:15:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50114, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000001090224000101000000090400001207010300090501f200ffe00000090582021a3a8ef3c50f2dad5690e9994853cf0353ccc19e4e1fcd67b74a500471852788743cab9c6d260600000000000000dacfa8c64ee0de7977a72b18c221e3c6ef68c9713417954c8bf6c63f49c93e6597e0ebf1b865b3dff67521305b28a0f4a85da6cebc392c85c375fd1bd512db0b10ab830920641d2e70b8b537eb011fd07f77d018fedb003e9c49e57c568a647e03895438b101b992fddcb1a91ebb70988315110f092b7d18326dd61c8fa93bfe8f6fdfec1be77839fc7a1b3504aeb1659654edc9184e06fd8570d1065f06c38fe9c1c9d0a799743c2b3b50f6c4cb06197b12b03069bb6ef64f3ee3576e8f7c8a3ff1e61f54642d786f6202c52aef69ae81fd1cdaf671f1991ae2fc81043204c2c0b613dc70c8f1481a8693f4d0dd532f6eeadda7733313fb3c86cba60d2380498394e753fc32aed9fe1438bc742f3ee44eecee89d0c9bbf0b8f72e41731c4088da7266990168bf7d0519efb36c9acdc69860beb852b6df2f39d3a9159a63db0fa2ab58a1d3c900d7be15d3723c0965f2d6d69edae530c57b9862f85760879308d45bfbe1fbe6f38a280531972f2dcd13ad5d2ffcb5a4d891e6a8883a5f81a71f3acd2a366d54c0527858d6c51514"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000001c0)=[0x0, 0x2], 0x2) socket$packet(0x11, 0x3, 0x300) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r1, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000200)=0xfff80001, 0x45) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f00000000c0)={0x5, 0xb4, 0x8b9b}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000240)={0x0, @motion_det}) [ 910.028525][T21419] usb 3-1: config 127 interface 192 has no altsetting 0 [ 910.058893][T24686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 910.112742][T24686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:15:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) lremovexattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x40002, 0xe6dd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x800, 0x7, {}, {0x4, 0xc, 0x1, 0x8, 0x6, 0x20, "89b55f87"}, 0x6, 0x4, @userptr=0x100, 0x86, 0x0, r4}) read(0xffffffffffffffff, 0x0, 0x0) [ 910.196230][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 910.229727][T21419] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a 13:15:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) flock(r3, 0x0) r4 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 910.253433][T21419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.292421][T21419] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 910.350045][ T29] audit: type=1804 audit(1594041327.016:125): pid=24700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir293930821/syzkaller.jPP6xC/352/file0/bus" dev="ramfs" ino=79161 res=1 [ 910.401224][T21419] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 13:15:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x8051}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 910.479237][T21419] usb 3-1: SerialNumber: ﳿ [ 910.489516][ T12] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 910.550005][T24638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 910.728849][ T12] usb 6-1: Using ep0 maxpacket: 8 13:15:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x6) [ 910.858764][ T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 910.902213][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 910.984508][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 538 [ 911.070833][ T12] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 911.091971][T21419] usb 3-1: USB disconnect, device number 63 13:15:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) flock(r3, 0x0) r4 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 911.222143][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 911.279260][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.359055][T24693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.382939][T24693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.439729][ T12] hub 6-1:1.0: bad descriptor, ignoring hub [ 911.445764][ T12] hub: probe of 6-1:1.0 failed with error -5 13:15:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 911.660539][T24693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.667989][T24693] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 911.690756][ T29] audit: type=1804 audit(1594041328.356:126): pid=24700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir293930821/syzkaller.jPP6xC/352/file0/file0/bus" dev="ramfs" ino=79201 res=1 [ 911.910411][ T12] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:15:28 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="c48fc813206fa1e777c417cb0d95bd3295ed181275a59f1008b2abf640837cc8282ec3271af0af3337e394b4173ea1ac59123e836027efbd007380ed4c5f82de237ce9e0e02d6c8ba1d31c13ecfcef89501768ffa01c9982ae597f79eb1685698f8a50849fe4ad9155932297559c6bc2c251590c0201dc1c0f1d81294462ed3f518f548d6644ac165c1b6725b3ba251a7d4401930bef35203d29482a3f376ddecf3f71e9463235d788d4d78b523fe3e5e1d4fe2cbc024316980655063122930170d521025289431e087d562d624dc10d2cb65df27930a6179f2d28118d8cba91", 0xe0}], 0x1, &(0x7f00000003c0)=[{0xe8, 0x29, 0x9, "9d02df1f7ae12c6035209dc74be5d29da7472ff48fbb622d48b036e5c9b1ab5495c8b44944c4e374866a982315eef7da9334b43b14e55873d11fc463e4f525d37078c6b4cc61c057a89a25216b6df2c6e742b6a6f6ceb56f5937ee60d564fd02d31447735d0161d1d7c00e8a4d2ebbfa8e741bb688c6d38346b31f5371cdb30521026c40b237aedd81d0798152daee262d4b8ec8f915360471322af2150b6387068ef56ddafb0e749f62449f4626933cb100383532fa684de2438e4fbcc5398b72c2a4f2dacd83752f3db54f2c900f293c0a2c6bedcdca"}, {0x78, 0x84, 0x1f, "c36e7448c4d6f6f88d400cf7596d39a1584fdc93716cc4b8f21cf6ea8922c900d371f1e1b4844bcbb12ce2443132d6caf5df7d5204f2f004b04eff6a4bc19f4167ddf93aa0e4371572bf4ab8de048afb914233a459e7c4699ad13f6bb5dfd5b5f77f5d6e274c2483"}, {0x70, 0x10a, 0x1, "afbd5428661b8764fba088f55733bedb49f57b0114e82ccb4143571cb3d8d63b7122d073bf38d3a2193b50b7c10a09cf9a3c792357bcd1fe670e3681ea2b9a03d9519e8db5075c1607f22cc8daa4a0077d765ef32e339e730357c209"}, {0xd0, 0x118, 0x3ff, "5a12902b3a514f9d319a85e764f1e8ce35b14f11dc522e435f6d6723c1924971c3e6ac95ffcd7dc4f9d0cb762f95688e8e206a75f74af718fbdb8c70ec5213f465bfb17f87b6e559e3e782a78d02e13a473521f7019940445a3814ea5bd4a089b735831518b89ff30c39554809890b0554308cdfc30f1689e04cc3e4023f93c9edac069f12b6b2ef34acd500fe6396c3e2ccf86f702af2e3ae26b87e0d8de75797c97a2b7c01001c890ff275c52e676c379848d0254cc3793e773d2b"}], 0x2a0}}, {{&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x1, 0x6, 0x5, "0d98e7baa0c7233a7eaf489ff7fcc431fa39b2d672ca09cdda6f7e809b6fbdedcf96e28f080271062bd751570e73b98db4fcefb651477755a00547f1da1671", 0x38}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="7d1c0466f23dee389c43e5235fea13f723c7c693fbfe41fea122aa73f11627f86b6524f2276f7befb58c993988a170b2b7bde8dfc231cac536dcbea773d2a8e49bf3740ec7d068529fab003198e1728e4183", 0x52}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="be28bb26a68b3fd8c7d9cb98ae9fbedd34ac10d9fcf7bd1ff923339352bbc10686edaa5706a37754c0215a6bc5c4d39baf6203e0d0b9a286b98a178b7f8b976fde11a697fa94e421f98ad3defefd086fa34734604a37f53b0e138a14926eec237712cb1db70db8398494c8a850f70230c2be9147c1218bab40ab2b1a853f692ca10573b40b0f2bcc", 0x88}], 0x3, &(0x7f0000001740)=[{0xd0, 0x10d, 0x10000, "051f9347ec616aeaa765b0a6d2058709360ff0f640928b4af2e97ef11793267f105813101ae79774d96bf4bec02d70c8aa54dfd51cc7e4f5983c43f6fa3866f6381c79996562bdde460f5b8611dfc2a3612c087a8ce1b1d3612a070840c18ee0fd142cf1fbb5c41135c216ed03340507c2d938f71bde17fd108d4c14cf603c44e184664b14b886dae2a8d53abbc663036a1cdc13c91d29d1d32c54b2d9f552baf7b421e00923a023945ecd1e79a9e204002f78b561ef29ed52b4f1"}, {0x90, 0x100, 0x1, "b5aad260038fb4d2b6ff8545e895fe3ea1fc1ab7309d6fd6d57630f5219c3ff10cbb9f2f57097ebb4c66c466a4940d32b8d843682e18919b307a5cf0b37ffcd39121fb2e55bfea8ea79372bf140ebd46a562c4ee30bf33d0eb77bd83ebc26a5b5c52cdf1a1bceb28dd4f351f0a6f5d1ee19c2532caf45b92f15c0c58d6"}], 0x160}}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e21, 0x8000, @mcast2, 0x2}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001940)="cfa463a1e077ae1b7a9265bba15c27995dda9a51530daa9f3a276594483f2f924103b16dca3d459bfa5bcd741abf3c903834a267870301281e6faaed8bf917da7e42845a2d05ecebf31e8201b84c0c542b7d6f9e73c53cf06f83557bfdc46318082e74024eef5bc4d548bdd004897837535319e84550ce66e6bddec98ce6356ba951d6815514a70066d71570f5cfe75ef6f399d1a482e4e2cf288807f1321a346448be30e4ef8b8fe1bc967e3b75d0cc907df4e2b5a34f70836e247c1bfc41aafc414690750bab83d4c05e8fce8a92e99afb4b55160c25e18a69bb24090b70c19e4b27af9f7ce3d68aab6b16042a", 0xee}, {&(0x7f0000001a40)="08d407", 0x3}, {&(0x7f0000001a80)="cd3e379bed9f4fd41b890a95bb69163fa94417f2daddb76c496535b59312d8c8c597bcfafceafce5989b36f34729cde9712195b2160dba9ae6d91e1f143020677db34cb33a6c0b1e7267caf802b6194fee30e669f30490e360084618054ee5eea15f8fced6dc10fe74ec63705d7d5cec45f0711a4e7373a23cadf35098ce1f22183812553c69b32640082a9f141169e94e290a3a5ba783b2d3da15102324c426df7dcfbce87b57857ff0027e78b0e839d04179d91666db78fdaddabcae065565ab413fe84b7219264b7ba22a8619a5d1b21079f4", 0xd4}, {&(0x7f0000001b80)="0fe5a3da393412deac83aa13ed7341c0f2475f6f48704d2a8d47a24614d0ca57f507febbcfa128d6303bfcbb478b1c5a9cc334e57cfa90e995725bb2ae1470333a7120fd80868f86431944fa4213630d839344f879b9392dc0162fd1d565483abc03c80a505dda5d295d57fa53145fa392", 0x71}, {&(0x7f0000001c00)="0f0872aa5e764120d6fd2015e4dc6410de5cb89941f6e788920e6b7d7eb3046be8f97dfd006834c44b703204a95c4f86b5c46b28fc276c5606638da206e33f5f611ad514ba1c7406876ffca6445f75aa912718129208bed4", 0x58}, {&(0x7f0000001c80)="bf5d30155f6f3d2910b01afd00d0753588acb1fd5fa1f13eecd9a95397f4d6dac9f3812b21dc0b9d611a3af3ff0fecd4eb517a9e948a6fd6e80cb76fee4280ab3bddb936795b8f49b9de125bbf83e343281fe83a", 0x54}, {&(0x7f0000001d00)="f3320c5c702b4e0502e48c5950bdecb491b46512f7933a8301ed262d4029c8329ee05a19e1802ec911b2dd36b3678ef5923b0917d9a389109ef6f61e8f904e8fc65e0e4b7febf5de71b9fb5a4ef0b9efd9bd34b308c311583f225a96d30c42ad5647789daedc0e764cf4316de6facb4773f742850eda6270c5d8c6e4e8bafffad145c398252fc1356d189c449342cede91549a1ebc1f6d131d2789e0025f74913b3d916e692740f37a1a18ab2a6dad48406701c2ee28c8fc55381f66762e64bd2317b210aaccd6ac8534fd98146ebd1e4e2a32ca1b6ee5684a7d05a1757cb9ab2ac079524d493b79a0fb2b59a4", 0xed}], 0x7, &(0x7f0000001e80)=[{0x1010, 0x117, 0x401, "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"}, {0x50, 0x10e, 0x6, "2a7a8530e20647acaa5347dc0eb40f14055a9a1f9b8bfe29a8581dcd20dc3f4c2a449e50fcaac02522a63cbdbe70ef869eac0da337d03ee621c680"}], 0x1060}}], 0x3, 0x20004010) 13:15:28 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) socket(0x0, 0x0, 0x0) ftruncate(r0, 0x80) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') setresgid(0x0, 0x0, 0x0) open(0x0, 0x4008040, 0x0) gettid() gettid() syz_emit_ethernet(0x300cce, &(0x7f00000000c0)=ANY=[], 0x0) [ 912.078597][ T2486] usb 3-1: new high-speed USB device number 64 using dummy_hcd 13:15:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRESOCT, @ANYRES64=r7, @ANYRES32=r1], 0xfffffe37) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4800, 0x0) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f0000000200)) splice(r0, 0x0, r1, 0x0, 0x18102, 0x0) [ 912.308776][T21419] usb 6-1: USB disconnect, device number 122 [ 912.344116][T21419] usblp0: removed 13:15:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 13:15:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252962cb18f6e2e2aba000000012e8b3836005404b0e0301a4ce875f2e3ff5f003ee340b767b6db2d7e8140554a000101013c585bf5ff1b0816f3f6db1c000100000000000000ad8e5ecc326d3a09ffc2c65400"}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 912.599348][ T2486] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 912.618008][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 912.691025][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 912.746283][ T2486] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 912.768619][T21419] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 912.806551][ T2486] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 912.855615][ T2486] usb 3-1: config 127 has no interface number 0 [ 912.890534][ T2486] usb 3-1: config 127 has no interface number 1 [ 912.929833][ T2486] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 912.984080][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 913.008598][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 913.098848][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 913.116228][ T2486] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 913.129640][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 913.129872][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 913.154555][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 913.194604][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 913.231689][ T2486] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 913.286058][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 538 [ 913.286775][ T2486] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 913.340145][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 913.361518][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 913.406173][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 913.425907][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 913.438065][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 913.480274][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 913.482316][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.523578][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 13:15:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x2000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:15:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="01665b000000000029a0854531be39d54b2e2b7b7d493fc21f2cb790a94908c27619885fdcded1e1e83200edf0bf62"], 0x2f, 0xfffffffffffffffb) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getpid() ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x5, 0x7}, {0x7ff, 0xffff}, {0x9}]}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000480), 0xa198) mknod(0x0, 0x4, 0x6) socket(0x0, 0x80002, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000340)=""/82, 0x52) [ 913.587503][ T2486] usb 3-1: config 127 interface 238 has no altsetting 0 [ 913.600920][ T2486] usb 3-1: config 127 interface 192 has no altsetting 0 [ 913.648806][T21419] usb 6-1: can't set config #1, error -71 [ 913.671851][T21419] usb 6-1: USB disconnect, device number 123 [ 913.778939][ T2486] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 913.790600][ T2486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.800022][ T2486] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 913.809707][ T2486] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 913.819436][ T2486] usb 3-1: SerialNumber: ﳿ [ 913.849455][T24737] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:30 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0xfffffffd, 0x3df, "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", 0xe8, 0xd, 0x2, 0x2, 0x1f, 0x1}, r0}}, 0x128) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x10000) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup3(r2, r1, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r4, 0xb03, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r4, 0x810, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x4008010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r0, r7}}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) [ 914.148605][T21419] usb 6-1: new high-speed USB device number 124 using dummy_hcd 13:15:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) chroot(&(0x7f00000000c0)='./bus\x00') ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="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"], 0x14}}, 0x0) [ 914.372664][ T2486] usb 3-1: USB disconnect, device number 64 [ 914.389517][T21419] usb 6-1: Using ep0 maxpacket: 8 13:15:31 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', r1}) exit_group(0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000001190500000300480000000a0000003c0001002c0001001400030016f8bad353dad6b8000000000000000014000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000075292c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000000000000108000700000000002c000d00140005"], 0xc0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 13:15:31 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 914.508953][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 914.566810][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 914.634419][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 914.688580][T24843] __nla_validate_parse: 1 callbacks suppressed [ 914.688613][T24843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.720672][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 914.781221][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 13:15:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) getpid() r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130a0300050000070c00064000000000000000030800"], 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x10100, 0x0, 0x0, 0x0, 0x4b}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fadvise64(r1, 0x0, 0x0, 0x4) [ 914.828821][T24849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.838761][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.899224][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 914.906247][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000140), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(0xffffffffffffffff, r2, 0x0) dup3(r4, r0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x3, 0x1}, 0x10) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)="e2a340717274aa12a091efd3f99d0dbe2debb9362ead75717fc90bd53a5ce5740a2cea74429fe57367ac1b91c5ca129fcaa478405d93d7d596090dce6601a626f331df4daaeb5dba6e0225d55516fe6dab9424c8584b0e5f303c51506ee30185", 0x60) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1b, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e601003f6c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0) [ 914.939498][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 914.945558][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 915.151063][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 915.158019][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 915.200594][T24865] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 915.218579][ T2486] usb 3-1: new high-speed USB device number 65 using dummy_hcd 13:15:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x8840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x2, "63db6f1f20002d9b55860fbcfaa0"}, 0x10, 0x1) [ 915.370148][T24864] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 915.421784][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:15:32 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001bc0)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x890}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000040)={0x733, 0x7, 0x40}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:15:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x3, @name="56aa662c008426806bad645993d2f8e8971394d6325c5972ffecc74a7f697833"}, 0x8, 0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x49, 0x81, 0x4, 0x8, 0x6, 0x19, 0x8, "474de7a700dec7f0ba1fe790205d6763a14220f9", "1b523fffa7c1eaaea989e54dc965a367909ec349"}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="094ef52959b4bcf1cfb32d5b1c5547c8", 0x10) [ 915.688770][ T2486] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 915.700818][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 915.725829][ T2486] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 915.736525][ T2486] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 915.746653][ T2486] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 915.757824][ T2486] usb 3-1: config 127 has no interface number 0 [ 915.765877][ T2486] usb 3-1: config 127 has no interface number 1 [ 915.781578][ T2486] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 915.802856][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 915.851289][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 915.911684][ T2486] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 915.924746][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 915.937788][ T2486] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 915.953905][ T2486] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 915.967032][ T2486] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 915.980314][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 915.992872][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 916.005762][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 916.018219][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 916.030612][ T2486] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 916.045943][ T2486] usb 3-1: config 127 interface 238 has no altsetting 0 [ 916.054456][ T2486] usb 3-1: config 127 interface 192 has no altsetting 0 [ 916.141534][T24898] EXT4-fs (loop4): Unrecognized mount option "" or missing value [ 916.168777][T24898] EXT4-fs (loop4): failed to parse options in superblock:  [ 916.228842][T24898] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294901796)! [ 916.238550][ T3681] usb 6-1: reset high-speed USB device number 124 using dummy_hcd [ 916.255975][ T2486] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 916.266419][ T2486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.276177][T24898] EXT4-fs (loop4): group descriptors corrupted! [ 916.283821][ T2486] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 916.295778][ T2486] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 916.304847][ T2486] usb 3-1: SerialNumber: ﳿ [ 916.329575][T24855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.500804][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 916.519788][ T3681] usb 6-1: Using ep0 maxpacket: 8 [ 916.545952][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 916.659211][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.666290][T24802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 916.861845][ T2486] usb 3-1: USB disconnect, device number 65 13:15:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400b158be0001358c156eaaa838000020010000001000001400000000000001ff0200000000000000000000000000010100907800001eac00006086004000003200fe80000000000000000000000000e0bbfe8000"/116], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:33 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x105002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r4], 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 13:15:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x319c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r7 = syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRESOCT=r6, @ANYRES16=r0, @ANYRES16, @ANYRES32=r1, @ANYRES16=r0, @ANYRESHEX=r3], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "ca0814"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "5ef92a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x2, &(0x7f0000ffe000/0x2000)=nil}) [ 917.028861][ T3681] usb 6-1: USB disconnect, device number 124 [ 917.047828][T24932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 917.062449][ T3681] usblp0: removed 13:15:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000001c0)={0x8125, 0x979f, 0x8001, 0x0, 0x4, 0xffffea62}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup3(r2, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000005c0)={0x0, 0x1, [0xd13d, 0x20, 0x100, 0xff, 0x0, 0x4, 0x500000, 0x20]}) syz_usb_connect$cdc_ecm(0x4, 0x61, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x7f, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x7, 0x24, 0x6, 0x0, 0x0, './'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0xa, 0x680, 0x40}, [@country_functional={0x12, 0x24, 0x7, 0x40, 0x0, [0x2, 0xfe, 0x1000, 0x7fff, 0x603, 0x3]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0xff, 0x3, 0x8, 0x1}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x437}}, {0x33, &(0x7f0000000380)=@string={0x33, 0x3, "5c9b9de0027f32f8092c1ec75f7b320e99ef0f4b4b341e6e9803f95ad8584bb9dea2277b882cf0e7b6dcdb64bbc517c458"}}, {0xf9, &(0x7f00000003c0)=@string={0xf9, 0x3, "5ca7109ba0f2f0209a25e596b2d421f1e2e60c18fabd0e8762114ed68e30b6c6fef6f513ed6159482c3d02f88b4181e48213c809c4d78b9c15ccd16cc322dfa0a3e1d7c9ef241160abcb639fcc9bd1254dee8d22939b7fe8efe48326a0df24245f50b7630fd44a29243a400edc2512206fe66dd9148199d1baad82e88927fa57cb23bc764b829ea3cc65b9ef12449ad457d7b269954b552abd8690eb2062583f23d433f72d70c16ebcab8e47e9a038cd2b6e8ae865dffe16777e4967b356907c604a5e23acd8a0d0291d225a24b492e97c9000e02e00da4252112b389e1222be1737a877c648e6aebf2a79b78d3c0f61d4d7fb98622b36"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42d}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) [ 917.164547][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:15:33 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000018000000d40000002000000500020000000000007fd19e352421d0067353abd25ea7f903dd19aee4e32c6ddb0ee4764979e47bdf194882ce9e2430dffe9b67fd33dccdee94875059c05d829344229c8100"/95], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 13:15:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 917.358566][ T8069] usb 1-1: new high-speed USB device number 47 using dummy_hcd 13:15:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x6c, &(0x7f00000000c0)={@multicast1, @remote, @rand_addr=0x64010101}, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 13:15:34 executing program 4: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010800090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021ace0211b0316b4f9825ef7dd30963b204915f43eabb9c2a6892c4de3bd9d6c9f22acc5521e7dd03a92fc8d7bd5af99db22d9d5487bca5225914b5629c1094d034c2a39f4a625be07bb545a96a37ae77cdb119c1d6352563a95f127ee519aaece2aa4498472e8f995deb62b38c7ca716bbc45887ecd28753f71173e6f48ff52d77f6ff65f0731d3e10"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r1, 0x0, 0x3a, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe6b837969bff35b491f861e62488aeed26a1f8d") syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x80, 0x40, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x23a0, 0x8da, 0x1, 0x74}, {0x6, 0x24, 0x1a, 0x5c, 0x2e38743007959339}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x7f, 0xfff}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x8, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x3, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb2, 0x99, 0x86}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x201, 0x69, 0x9, 0x60, 0xff, 0x7}, 0x5d, &(0x7f0000000400)={0x5, 0xf, 0x5d, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x2b, 0x3, 0x3ff, 0xf00, 0x200, [0xf, 0xff0030, 0xff003f]}, @generic={0x2c, 0x10, 0x2, "30105d9eb968b1829356d9889bbd0beffab0547d118a9216d513b9d25550c83ac2d939a3cfaf037089"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "1d91084c6517d4cae90f219b97bac2d9"}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x2c30}}, {0x69, &(0x7f0000000500)=@string={0x69, 0x3, "7582f4530d678cca4082e8bce3acbb4ebc6e8b8f45300f9f5f2c6d52523fa90331673016f7e903b911257d88fb4aa6d3e32dd0244a5ac64e5a5d9374e8205a0c8fe7124692eb5f7cb738cf0cd562b4c2a5c63b896501c23af1ec747ff7141ac80ab2839b8dec7a"}}, {0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "55fe6ac99de77c250e52253001b22b3c2391eed877cb616d7af4adb467ecc8d852d3164e7f6a7d431b4ebb602d265afff774c1d89b28882f9319ee0e68f3ac6ee1636d8027f42188f24ada21afe8f1701977a0f6da4ab8c47e7731e433f43d32d43b243834cfd2e8acd0fe0d28cc351bdf9345ae4f416953031b84e7f9b9f1c1b2789dacf2015419a5ac7565c2300fa64fa7903b1d7945a6c4e4dbeeab7c93505811a3f586e0baf9ff2f3f226a5596ec62aae49466932b53a53fb21514145c3f12541aa86ceeab451b0de93d7ed1fcfac220842d02fcdcda63defa6df6b1f63d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x425}}]}) r2 = syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000800)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x1, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xebf5, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x2, 0x0, 0x5, 0x3b, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc1, 0x6, 0xbe, {0x7, 0x25, 0x1, 0x80, 0x9, 0x6eb5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x6, 0x8, {0x7, 0x25, 0x1, 0x3, 0xb9, 0x7f}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x5d, 0xfc, 0x2, 0x10, 0x40}, 0x23, &(0x7f00000008c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d2e9747fc06c8d8bee77105b2a70df7d"}]}, 0xa, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x6b, &(0x7f0000000980)=@string={0x6b, 0x3, "51a64630a7750b9ae42231f959aa76362ae1d4dc1c7b075e63994a95e282bebaa2f53827ea03c87f19bcd14b531c15df50fa83629b0bf1e7a8e675b43ef844441f6464d56349881ae1fa9ffdc296f7368fd29a9f05f0fc5b6ea6eaca21198e6790e840aff7036f4abb"}}, {0xa5, &(0x7f0000000a00)=@string={0xa5, 0x3, "cadc32cee1fe245c48da285ee048d593ce31bfd7f9e2156aaf3ec8c2a9654a9d377bb9e565e50bab32d0507d67dc1d68d310fd7219d127b63c49ad3715e7a2d5510df970971f4b98f9535d621cd96a1000209f59dc6fff6431ee1ce9a08e08c5abbede72be783a15e9df29648c7334de98eef888a376df2a9a82e2b2b3cc576b30b7a96391938d806a09a39a599c75a4e79119526c781fffe5a9ff603e72d033ecf7aa"}}, {0x75, &(0x7f0000000ac0)=@string={0x75, 0x3, "a6923ad7cae7c5dae8ffde35368f5453a692d686bf6ef8ba9b6188bef9036a499cb4c52819c756beb3fd1466fa0f29b4feb92080ae63a656caf3763543cf2d79921d5f5f85dad29bf7830c012578bfe72e8653df586bd6af7f600ecafaccad14afb126591f0ebecc7e728c7e1b6d858dc11401"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x500a}}, {0x7d, &(0x7f0000000b80)=@string={0x7d, 0x3, "42a71c16c4d776d769d5be28b2eb6a2eed4492e66f407dd2839488a2da0d7343f6b9ad3e2a1207e8bd42d54bb2d35bbf9854d8ac63a72a86db66b4f8863cbff7ddd5daef7dfd4c450c93bddeab25d178a9b64cc09b901b32163535bb6038753c3ae2310cb4ee66dda0d014483d25b9a3ac26e4cdf53de2ff48fe56"}}, {0x98, &(0x7f0000000c00)=@string={0x98, 0x3, "15e2c8280adb54ef0932d24c6108ccf40a3040ef11c3ce2baeb7d8ae83d0e65d2dfa5af468a87034edb92628ec77350a5f94ba7b32f796f4759af956baab31bc40b6097be65b1bb04285e21c99bd65eb45381476409058de8549d22165e0de41f4c74691209d743aee9469215546f2e5d07694c86ef8a4722ad4abce6c0fe0b679767569fb76d57aa3a904d2a086a7c5f1cbc1fd1164"}}, {0x6, &(0x7f0000000cc0)=@string={0x6, 0x3, "4dfa4c8a"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x436}}]}) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000e40)=ANY=[], 0x0) syz_usb_ep_write(r3, 0x0, 0x3a, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe6b837969bff35b491f861e62488aeed26a1f8d") syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) [ 917.427329][ T8757] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 917.543383][T24975] device batadv0 entered promiscuous mode [ 917.564242][T24975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.698574][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 917.718612][T21419] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 917.729221][ T8069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.753968][ T8069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.778588][ T2707] usb 5-1: new high-speed USB device number 50 using dummy_hcd 13:15:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x20) ftruncate(r4, 0x200004) [ 917.817040][ T8069] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 917.829040][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 917.841239][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 917.860169][ T8069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.871883][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 917.884007][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.899677][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 917.909667][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.919857][ T8069] usb 1-1: config 0 descriptor?? [ 917.943592][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.952422][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 917.979480][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 917.985909][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 918.028731][ T2707] usb 5-1: Using ep0 maxpacket: 8 [ 918.148818][ T2707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 918.174737][ T2707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 918.188983][T21419] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 918.195306][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.197739][T21419] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 918.219572][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.249000][ T2707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1562, setting to 1024 [ 918.275186][T21419] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 918.285500][ T2707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 918.297133][ T8069] usbhid 1-1:0.0: can't add hid device: -71 [ 918.303890][ T8069] usbhid: probe of 1-1:0.0 failed with error -71 [ 918.318266][T21419] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 918.327996][ T2707] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 918.346008][ T8069] usb 1-1: USB disconnect, device number 47 [ 918.352717][T21419] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 918.369379][ T2707] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 918.381888][T21419] usb 3-1: config 127 has no interface number 0 [ 918.394930][T21419] usb 3-1: config 127 has no interface number 1 [ 918.407088][ T2707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.422072][T21419] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 918.461676][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 125 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 918.468021][T21419] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 918.498936][T24971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.515596][T24971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.559532][ T2707] hub 5-1:1.0: bad descriptor, ignoring hub [ 918.565877][ T2707] hub: probe of 5-1:1.0 failed with error -5 [ 918.580163][ T8757] usb 6-1: USB disconnect, device number 125 [ 918.602757][ T8757] usblp0: removed [ 918.609574][T21419] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 918.651595][T21419] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 918.684818][T21419] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 918.704085][T21419] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 918.718922][T21419] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 918.731913][T21419] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 918.744272][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 918.758247][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 918.772820][T24971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.781167][T21419] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 918.794294][T24971] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 918.801792][ T8069] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 918.811238][T21419] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 918.827894][ T29] audit: type=1800 audit(1594041335.486:127): pid=25023 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16375 res=0 [ 918.849120][T21419] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 [ 918.864063][T21419] usb 3-1: config 127 interface 238 has no altsetting 0 [ 918.872352][T21419] usb 3-1: config 127 interface 192 has no altsetting 0 13:15:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, r4, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1002000000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) [ 919.038721][T21419] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 919.052651][T21419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.071812][T21419] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ [ 919.076095][ T8757] usb 6-1: new high-speed USB device number 126 using dummy_hcd 13:15:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00ffff86dd60b8044400383a0020010000000000000000000000000001ff020000000000000000e7ffffffff000100907800000000608600400000325f73ec5e0140809d291fdf00fe8000000000000000000000000000bbfe8000000000000000000000003ac902d5484df62a5cbbd45bff9727e1c00b9fe633701b89da090c5214edc860e3ad225c4dffccfc8fd1c9d26b89da7fef"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 919.082332][T21419] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 919.096111][ T2707] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 919.114165][ T8069] usb 1-1: device descriptor read/64, error 18 [ 919.133306][T21419] usb 3-1: SerialNumber: ﳿ [ 919.178504][T24966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.273403][T24971] udc-core: couldn't find an available UDC or it's busy [ 919.291535][T24971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 919.318029][T24971] udc-core: couldn't find an available UDC or it's busy [ 919.337447][T24971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 919.348632][ T8757] usb 6-1: Using ep0 maxpacket: 8 13:15:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0x10}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x7ff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg1\x00', r1}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@empty, 0x4e22, 0x0, 0x4e21, 0x7, 0xa, 0x20, 0x20, 0x2e, r2, 0xee01}, {0x4, 0x3, 0xfffffffffffffffb, 0x2, 0x10001, 0x0, 0x0, 0x8}, {0x2, 0x7, 0x9, 0x1}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x6c}, 0x8, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x34ff, 0x3, 0x0, 0xe7, 0x6, 0xcdd, 0x2}}, 0xe8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)="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", 0x614}, {&(0x7f0000001bc0)="bd1906ffec6a453cf07e62c35e5bbb9d4bf7117beaf40ce7e773a0672f6647fd17a8337c81bf733dffb6d3d2cbe6c76173ad980f07e7f83f2c6b11260b7385f9be6d2a2ca8f86b8859472a9750e4a7499b650002893c94bc2ac0deeaff2a15780b1594908f9f7402d6e18a08d398d67adc1ba24c5d5e926f2eed8b92a7ef5462ae79b4ac2c47cfa82dd30effb4b684ca6adfccc72c363a18244d5d88ba887bac295868547a5685315d4a00c12283587933c66ab150423ea0bd80c3ae6846", 0xbe}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000300)=""/233, 0xe9}], 0x2, &(0x7f0000000400)}, 0x40002000) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x5801}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) [ 919.367507][T24971] udc-core: couldn't find an available UDC or it's busy [ 919.378114][T24971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 919.405139][T24971] udc-core: couldn't find an available UDC or it's busy [ 919.438554][T24971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 919.508770][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 919.518555][ T8069] usb 1-1: device descriptor read/64, error 18 [ 919.527218][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 919.546568][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 919.559903][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 919.575427][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 919.585600][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.609288][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.617367][T24950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 919.637227][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 919.647004][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 919.701980][T21419] usb 3-1: USB disconnect, device number 66 [ 919.788700][ T8069] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 919.796550][ T12] usb 5-1: USB disconnect, device number 50 [ 919.812520][ T12] usblp0: removed [ 919.888730][ T8757] usblp: can't set desired altsetting 0 on interface 0 [ 919.940835][ T8757] usb 6-1: USB disconnect, device number 126 13:15:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:15:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000240)=0x4) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) [ 920.058684][ T8069] usb 1-1: device descriptor read/64, error 18 13:15:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x391, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xf5, 0xc8, 0xd3, 0x40, 0x2019, 0xab2e, 0x4e9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37f, 0x1, 0x7f, 0x4, 0x0, 0x9, [{{0x9, 0x4, 0xee, 0x8, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa8, 0x319, 0x1, "607bb983"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5, 0x6, "c28f16", "091b50"}]}, @generic={0xc4, 0x24, "558d089a8d9c52764ace8595b6909843ec34fe32ac4acc5ffb0d10a665386d54f9b278a681c6cabcf8570d5745f1bea69cbe2b28bc047e7501133d8d91fbcf1edc3ac163f7c3450dc84c94b518439f19f0dc86143e193c9fa094484e73e3def212d6f3f586b34f6ffa5e7bbb4903edcf76fad87e1b950706e231ae3e3db9dee08d8d1bc8bb77f6ffe857ff5372c35d06319f87a56ab3a77912ab8aa921c18a329965fa36882d592a461ca6dc1406e5622b33a51c916cf51db139fee210eca2397465"}], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xff, 0x5, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x22, 0x81, [@generic={0x16, 0x2, "afdc7fa012a63e4f16fc203a22a04fcd5796eb74"}, @generic={0xaa, 0x4e, "c979b9536c9119236127ad976da4be018755cbccd8422bd97de5afe30896f14632e1663162d7a3b0b856d40ab8ba394b75aeedd95b2ba7cbaa8d67f4fd151828affdd8ef1e2835c14ef98bf1dbc8996b894405fcc3aaf906b652572170203cba663d69d06225d92a2396ecc51a6b06a1175ded17fa0bc745c490cf24a64cc745251dcd823a7b0b0a1670e2c1e6bc45a40cbda86b5e733a5735bd9bb99df4b70bad179a01310390f2"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xff, 0x20}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x20, 0xff, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}, @generic={0xd1, 0x2, "1e4dea4d6868b990b101938d29c33b668019f8539d88bbeee89f0da634d5d8ba14074912f792d96b5f895ddc5afa85b8434604cb3cf989e14bcebb759b76d9a861fef996bcbf694d403b54cd2856cb0cbff459eb98a48baa7d5db3448c64bdfbdd22d04189d5454023519b301e58a14322f28ec38c218a0bba2c587331bfa99261e5537af29b12263e7f1e197dc410521d98e261bbc049c197f44586d487540a43a1acae1e5e56fa73d6617d9e1f15c3536ad3b30bf24ba32d1767f53f11e5ba97f6b0cc7bc1dc31c6b6a63b174805"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0xcf, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x8, 0x4, 0x7, [@generic={0x40, 0x4, "c02ce78fe6f6bc221104429c84193123894f35d408c9a32323b46662586404cb0146ea34f4b5a7e52496667216c93c89926081a5d7288794e0f6b561600b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x9, 0xf7}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x20}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x95, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x20, 0x2, 0x1f, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1f, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x4}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 920.558500][ T3683] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 920.688524][T21419] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 920.928634][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 921.028645][ T3683] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 921.037147][ T3683] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 921.046409][ T3683] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 921.049609][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 921.055939][ T3683] usb 3-1: config 127 has an invalid interface number: 192 but max is 0 [ 921.075087][ T3683] usb 3-1: config 127 has 2 interfaces, different from the descriptor's value: 1 [ 921.077138][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 921.084599][ T3683] usb 3-1: config 127 has no interface number 0 [ 921.101077][ T3683] usb 3-1: config 127 has no interface number 1 [ 921.106346][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 921.107614][ T3683] usb 3-1: config 127 interface 238 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 921.126591][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 921.132048][ T3683] usb 3-1: config 127 interface 238 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 921.148989][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 921.155105][ T3683] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 921.170059][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.175493][ T3683] usb 3-1: config 127 interface 238 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 921.196892][ T3683] usb 3-1: config 127 interface 238 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 921.209313][T25102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.211516][ T3683] usb 3-1: config 127 interface 238 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 921.216427][T25102] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 921.232112][ T3683] usb 3-1: too many endpoints for config 127 interface 192 altsetting 44: 231, using maximum allowed: 30 [ 921.258217][ T3683] usb 3-1: config 127 interface 192 altsetting 44 endpoint 0x7 has invalid maxpacket 512, setting to 64 13:15:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb001e270f4df31f8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80000001}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x31}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c00}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) 13:15:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000240)=0x4) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 13:15:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup3(r2, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000002c0)=""/204) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 13:15:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000000000001ff02000000000000000000000000000101009078000000006086004000003200fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000ca09860ad686dd7d755cfa172fab454426d48bfc756b8ace08e4e15f4eb2d0cc4b4f43f7a07d4e2c0910dfe43c8adf0167eb7738f45869a3580e379c3e0239f53d2b3e90d523"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0xff67) sendfile(0xffffffffffffffff, r6, &(0x7f0000000300)=0xfffffffffffffffd, 0x10000) fcntl$addseals(r6, 0x409, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup3(r7, r6, 0x0) dup3(r8, r5, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) 13:15:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x2}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0xfffffffd, 0x3df, "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", 0xe8, 0xd, 0x2, 0x2, 0x1f, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x3ff, 0xfa26, "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", 0x3f, 0x9, 0x0, 0x18, 0x1f, 0x7, 0x40, 0x1}, r3}}, 0x128) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 921.283024][ T3683] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 921.291410][T21419] usb 6-1: can't set config #1, error -71 [ 921.321388][T21419] usb 6-1: USB disconnect, device number 127 [ 921.366709][ T3683] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 921.400833][ T3683] usb 3-1: config 127 interface 192 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 921.446770][ T3683] usb 3-1: config 127 interface 192 altsetting 44 has an invalid endpoint with address 0x0, skipping [ 921.513596][ T3683] usb 3-1: config 127 interface 192 altsetting 44 has 6 endpoint descriptors, different from the interface descriptor's value: 231 13:15:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000080)='\xab\xb8wt\f\xfa\xa4=\xffr\xb0\v\xbbum$\x0e\x01\x87\xc1\xee_\xcc\x92\xf8\x16E\rME\xe2w\xe2\xde\xa4\x14\xca\xff\x7fFD\xbd0IZ\xbc\x1a\x1f\xde\xec,\f\xfeQ\xdf\xaf\xda\xe6\x01\xf8I\xd3r\x88\xb3\a\x97\x95\xcd~\nu\xae\xb5\x06\x91r:4\xb5#\x05\xce\xb2&@\r\x04na\xc0\xf6\x96\x11\xb1\x0eF\xa8K\xf2\xc3\x14\x11\xefM\x1cC\x95Z\x83\x83@\xd6!\nR\x0e\x0eP\x97\xc7p\xe03S\xb9b\xf3\xfa\f\xbcn\x88\x14\xdc\xa6]\x92\x14\a\xb9x\b\x00\x00\x00JX\xae\x16X\x00X\xd7\xb1Ym\xc0{APf\xd3>\x80%Kq\x17\xfdg\"\x1a\x0eS', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x2, 0x3, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r5, r6, &(0x7f0000000000), 0x10000) fcntl$addseals(r6, 0x409, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup3(r7, r6, 0x0) dup3(r8, r4, 0x0) ioctl$KVM_PPC_GET_PVINFO(r8, 0x4080aea1, &(0x7f00000001c0)=""/152) 13:15:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRESOCT=r5], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 921.609881][ T3683] usb 3-1: config 127 interface 238 has no altsetting 0 [ 921.634454][ T3683] usb 3-1: config 127 interface 192 has no altsetting 0 13:15:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x6000) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 921.711198][T25134] xt_nfacct: accounting object `syz0' does not exists 13:15:38 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000140011050000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003000000000a0010"], 0x5c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000080)) 13:15:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x0, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x14, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x8003, @empty}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x8}}, [0x6, 0x3, 0x1, 0x3, 0x200, 0x2, 0x100000000, 0x841, 0xffffffff7fffffff, 0x3, 0x8, 0x6a79, 0x400, 0x55ce, 0x7]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r7, 0x3f}, &(0x7f0000000180)=0x8) [ 921.851242][ T3683] usb 3-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice=4e.9a [ 921.867981][ T3683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.878869][T21419] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 921.890270][ T3683] usb 3-1: Product: 憮䁡쒆傞ꛊꜦ렕뗾䨒榴郆乏ྦྷ祈⨦ 13:15:38 executing program 0: perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r7, r3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x8010) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="dd07000000926deb0e007e65399c709bcc252cf6d2e63d6fd6e03abb22ac"], 0x14}}, 0x0) [ 921.928370][ T3683] usb 3-1: Manufacturer: ﬇売匽転둞ᨫ턙ⷑ谿奡 [ 921.955984][ T3683] usb 3-1: SerialNumber: ﳿ [ 922.009460][T25093] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.118710][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 922.239070][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 922.267035][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 922.308548][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 922.348529][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 922.408525][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 922.417613][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.489124][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.496137][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.520041][ T3683] usb 3-1: USB disconnect, device number 67 [ 922.539242][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 922.554361][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 922.730911][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 922.747248][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff000008000300", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:39 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 13:15:39 executing program 0: perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r7, r3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x8010) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="dd07000000926deb0e007e65399c709bcc252cf6d2e63d6fd6e03abb22ac"], 0x14}}, 0x0) 13:15:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x8000009, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x0, 0xcdf9, 0x0, 0x101, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4}, 0x2c) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = dup(r1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000000)=""/40) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x8}, 0x0) socket$kcm(0x29, 0x0, 0x0) [ 923.010655][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 923.061229][T25187] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 923.124330][T25187] team0: Device ipvlan1 failed to register rx_handler [ 923.308646][ T3683] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 923.400449][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 923.435205][T25199] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 923.453877][T25199] team0: Device ipvlan1 failed to register rx_handler [ 923.463753][T25187] syz-executor.1 (25187) used greatest stack depth: 22944 bytes left [ 923.598531][ T3683] usb 5-1: device descriptor read/64, error 18 [ 923.688684][T25209] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 923.958726][T25209] usb 6-1: Using ep0 maxpacket: 8 [ 924.059236][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.066210][T25127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 924.074155][ T3683] usb 5-1: device descriptor read/64, error 18 [ 924.128491][ C1] usblp0: nonzero read bulk status received: -71 [ 924.331601][ T2707] usb 6-1: USB disconnect, device number 2 [ 924.347974][ T2707] usblp0: removed [ 924.358657][ T3683] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 924.658599][ T3683] usb 5-1: device descriptor read/64, error 18 [ 925.058583][ T3683] usb 5-1: device descriptor read/64, error 18 [ 925.098537][ T2707] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 925.178828][ T3683] usb usb5-port1: attempt power cycle [ 925.358564][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 925.490068][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 925.501358][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 925.517134][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 925.528211][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 925.542295][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 925.552215][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.579369][T25209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 925.586533][T25209] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 925.619314][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 925.628790][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 925.668719][ T2707] usblp: can't set desired altsetting 0 on interface 0 13:15:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x20, 0x93, 0xff, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x4503f556292ac01d, 0x8, 0x4, 0x3f, 0x8}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "5dd973494f53f309a90efb7e5ad9ae5b00d3e75cc70c85605f7e92c6d04638f23a867466e8cbb1bd88993decfc38551f9c750cc0bc2b79b458e90cf4f889946225b8dff2732c5acc02f6d4372da3c432eebeabc5da11dd956125f9abf3e40dea687f7e8537b4a2b47b"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "07fb4cf0f2583d53f9ebe28e5eb42b1a19d1d12d3f8c6159"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "c2de53ec71deae61614086c49e50caa626a715b8feb5124ab469b7e1c6904f4ea70f4efa262ada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "6359f335e09b416b3ae10b8bdb725859cc9eefe0ed8bfaf4cffa6034c3ba15576daab717821ea8fed65464ac675b9c508dc988903be53f560700619772629f4669bc52a24525e7d594367173041fb334ba11493da8a79cec4825918bd98cd717ad1d2b4fb3516655a9793f78536ebca9dedb7013814e58c4770e92e2d33cb4ee06304b7d619ebc7dd465ff234842ce752ad61bb7d624d22abc8ca8308c0b2811014f8dd6a9d8092cdc1a61b45293c346c609d00b6494952b02f298c34f9c5b871420c17017fd515730cfb1311fe0ac32443aa4e6d3b31f6c61bb10b22a71e3192f2ea26f575afc38f6"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:42 executing program 0: perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r7, r3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x8010) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="dd07000000926deb0e007e65399c709bcc252cf6d2e63d6fd6e03abb22ac"], 0x14}}, 0x0) 13:15:42 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x8000009, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x0, 0xcdf9, 0x0, 0x101, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4}, 0x2c) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = dup(r1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000000)=""/40) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x8}, 0x0) socket$kcm(0x29, 0x0, 0x0) 13:15:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000000000001ff02000000000000000000000000000101009078000000006086004000003200fe8000000000000000000000000000bbfe80000000000000000000000000a97cb960be31f8320d07"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 925.719345][ T2707] usb 6-1: USB disconnect, device number 3 13:15:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup3(r0, 0xffffffffffffffff, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setgid(r6) chown(&(0x7f00000000c0)='./file0\x00', r4, r6) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 925.852540][T25255] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 925.885399][T25255] team0: Device ipvlan1 failed to register rx_handler [ 925.888715][ T3683] usb 5-1: new high-speed USB device number 53 using dummy_hcd 13:15:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x460882, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x101000, 0x0) mkdirat$cgroup(r5, &(0x7f0000000140)='syz0\x00', 0x1ff) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/127) ioctl$NBD_CLEAR_SOCK(r0, 0xab08) 13:15:42 executing program 0: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lc\x00', 0x0, 0x1}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x1) io_submit(r2, 0x4, &(0x7f0000000640)=[&(0x7f00000002c0)={0xa, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="cbed8c6823cd963ab3946a05e47aaaeb4cba920aecd886a5bc80868f88b2572fc8675c3943590400dbd42628360700000000000000677c5ff64103591f234d831c54ac38d7d89ef6d7c9fe07b0fe469058c66e69cad05aeafec54fba0e4c9581862aa329e1e0626871d0fe1fcce22b2be959", 0x72}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000003c0)="3aeb07234a8e18ba27358c3ee3ef33ea5ad0d523bc88d15dd209429e4dfad6babf5952bef345e1dbb80c70f2ee52d6c1dd05f28ba6a2a16466e7221a68d16e16bc1f23e79027c5beb7d894cb242b56fbad4a2b1dc8742e0ffb3cf4488508e84de21ceadbd4b8bb846a2347a1c950765d3753c01e60202933bb9675992ecf314fafcfd3be9cb9711c04ece10fd0b618aff9f66a8f29830ebefd149d3f5713907259f4a215da", 0xa5, 0x4, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x401, 0xffffffffffffffff, &(0x7f0000000580)="71921f6bb9262b0fa3b0ac08863fbe499c02a136d43b0c6a0d31b7306781f4aa2cd69b0f5d1a8bc4c3aba0eeac5f9ff03b21569d0c5e07acad4b2217951b3ab4da5f050a1c99d795d4b3c9a939b8692d1100f5a882d35c3cb4e92599596e54d998efea2bb01eb02655872affe06c0e27df350e4ffb964c7a0feff33cf90006a2be83fe868010150dccad40b864a5d04f9676daed7f25f4ca28f8b45de48e62b408f5a8ceb1fd80b3a627a2ed7e39538a43cb30ab272f3827711163ecf56dde", 0xbf, 0x200}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000340)="789761d1f7e42075f7104cbf960e", 0xe, 0x2a57, 0x0, 0x2, r1}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT=r1], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000040)={0x400a, 0xe2, 0xffffff7f, 0x4a}) [ 926.078563][ T3683] usb 5-1: device descriptor read/8, error -71 [ 926.224277][T25276] block nbd4: NBD_DISCONNECT [ 926.234871][T25276] block nbd4: Send disconnect failed -32 [ 926.289118][T25271] block nbd4: Disconnected due to user request. [ 926.289291][ T2707] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 926.295409][T25271] block nbd4: shutting down sockets [ 926.308536][ T3683] usb 5-1: device descriptor read/8, error -71 13:15:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x20004011) write$binfmt_script(r0, &(0x7f0000001140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0x5}, &(0x7f0000000140)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a051400000000000000000100000d0900010073797a300000000094000000160a1fffffff000000000000010000000900010073797a30000000000900020073797a320000000068000380540003801400010076657468305f746f5f62726964676500140001007465616d5f736c6176655f3100000000140001006261746164765f736c6176655f310000140001007465616d5f736c6176655f30000000000800024000000000080001"], 0xf0}}, 0x0) sendfile(r9, r5, 0x0, 0x100000c1d) 13:15:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000002c0)={0x2, 0x8007}) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025001311d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10100, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000380)) r5 = socket$inet(0x2, 0x0, 0xc2) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000001c0)=ANY=[], 0x1) close(0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@empty}}, {{@in=@dev}}}, 0xe8) 13:15:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 926.549547][T25283] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 926.590514][ T29] audit: type=1804 audit(1594041343.266:128): pid=25284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir293930821/syzkaller.jPP6xC/368/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 926.658675][ T2707] usb 6-1: Using ep0 maxpacket: 8 13:15:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x130, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts={0x0, 0x1e, [], [@generic={0xbd, 0x89, "e08e1bb41d68f97abba0d96f7aea33db69638c2cf3a724e06d8884fcf3055b2030e53323dc2a44b026c3531cd63ccc70a803f217d31034e8e015e5b6da88dab10ba744bc2d97faa123f45fb09ac7390b5ef4be1e39eeb753f4b7a31185d03577143282d053e09549568db5dcd398b1c7d6f357f5a9251fe7244bcaeb570d1d301c1c77f603b2a8edd2"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @generic={0x6, 0x55, "7ee4339a5a9e27bd6545461f82dcf4f3aba113cc9ed4b59854e1d05e49bbcbdcea6b902b1a7d2f13181631719bb4ac2b0a4a2cdc50a0f445833c67ec3e8de8722b4692db6b8e888d1fa578b299c08711979a116731"}]}]}}}}}}}}, 0x16a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x84040, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x1, 0x5}, 0x8000, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0xa9bc, 0xe67c}) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) rmdir(&(0x7f0000000000)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000002c0)=""/197, &(0x7f00000003c0)=0xc5) [ 926.778991][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 926.826998][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 926.900395][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 926.964972][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 927.011863][T25305] overlayfs: overlapping lowerdir path [ 927.043298][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 13:15:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 927.128586][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.219161][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 927.227683][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 927.266055][ T29] audit: type=1804 audit(1594041343.936:129): pid=25287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir293930821/syzkaller.jPP6xC/368/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 927.327142][T25305] overlayfs: overlapping lowerdir path [ 927.334399][T25283] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 927.370869][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 927.376882][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 927.388256][T25308] overlayfs: workdir and upperdir must reside under the same mount 13:15:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="54000000020619000041b85ff300000000000000000000000d000300686173683a6d61630000000005000400000000000900020073797a32000000000c000780880012000000000005048938b903340005000010"], 0x54}}, 0x0) 13:15:44 executing program 0: socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000000)='syz0\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000005c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x804803, 0x0) [ 927.607827][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 927.625804][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:44 executing program 1: unshare(0x60060280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x4, 0x3, 0x0, 0x0, 0x757d, 0xa082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000014000000030a010200000000000000000200000014000000020a0000000000000000000000000000140000001100010000000000000000000000000a1a0cb0d9d0b3e46230e0d33710bc9cf0200169066a82819309ce188913a2aa566919840190385636fd7820b0b547d72d91c8e0affb6900f13f3ec592b9fff92d7aa7afb1e1f48d336c119fd63825179f16d16669ca1308344b7e33e26f12b652b37fcc81d3369e69c55f9ba47b0f5b3c525fb708850557b4f1df44"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r4, 0x10e248}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x2, 0x8000, 0x800, 0x1, 0x67be, 0xffffffc1, 0x9, r5}, 0x20) r6 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r6, &(0x7f0000000000), 0x10000) fcntl$addseals(r6, 0x409, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup3(r7, r6, 0x0) dup3(r8, r1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f00000000c0)=0x2, 0x4) [ 927.711875][T25344] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.810820][T25349] IPVS: ftp: loaded support on port[0] = 21 [ 927.930360][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 928.248959][ T2707] usb 6-1: USB disconnect, device number 4 [ 928.260615][ T2707] usblp0: removed [ 928.608692][ T2707] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 928.688696][T11696] tipc: TX() has been purged, node left! [ 928.848750][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 928.968722][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 928.979912][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 928.990883][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 929.000857][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 929.014085][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 929.023261][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.049521][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.056741][T25261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 929.070978][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 929.076973][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 929.330539][ T0] NOHZ: local_softirq_pending 08 [ 929.405750][ T2707] usblp: can't set desired altsetting 0 on interface 0 [ 929.450550][ T2707] usb 6-1: USB disconnect, device number 5 [ 930.148553][ T2707] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 930.388632][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 930.508738][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 930.520164][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 930.532685][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 930.543441][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 930.557314][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 930.567081][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.599089][T25407] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 930.606087][T25407] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 930.619404][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 930.625432][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:15:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x7f, 0x9, 0x4, 0x8, 0xb1a3, 0x5, 0x4, 0x20, r8}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r9, 0x473d}, &(0x7f0000000240)=0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0fb594000064660f38827c0066b8dd8876ed0f23d80f21f86635800000c00f23f8edba420066edb88a008ee836f20f20550f320f22992e660f38825b6d0fc7adedd3", 0x42}], 0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r7, r3, 0x0) write$snddsp(r7, &(0x7f0000000180)="2ea887755c3fb4209ca8f788fd3f0a6ee3dce19d33d5822b272b96895132263d", 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:15:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:47 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='vlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x3f, @loopback, 0x400}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x2, @ipv4={[], [], @empty}, 0xffffff07}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, @in6={0xa, 0x4e23, 0xf4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}], 0xdc) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) 13:15:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 13:15:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff80, 0x3ff, 0xe70d, 0x500, 0x8001, 0x0, r3}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 930.718064][ T2707] usblp: can't set desired altsetting 0 on interface 0 [ 930.779704][ T2707] usb 6-1: USB disconnect, device number 6 13:15:47 executing program 1: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000)=0xfffffffffffffffc, 0x10000) fcntl$addseals(r5, 0x409, 0x1) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r6, 0x5607) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup3(r7, r5, 0x0) dup3(r8, r3, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03003129", @ANYRES16=r9, @ANYBLOB="0d090000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000126bd7000fddbdf250a0000000800010070ff060000000000003030303a30303a31302e49000084a00800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$alg(r2, &(0x7f0000000000)=""/36, 0x24) recvfrom(r1, &(0x7f0000000040)=""/221, 0xdd, 0x1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80) 13:15:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400002, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x58bb003c, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60144a02400c000200050a82c12d153e37090001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0xf601}, 0x0) [ 931.170970][T25458] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 13:15:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000200)="0fb594000064660f38827c0066b8dd8876ed0f23d80f21f86635800000c00f23f8edba420066edb88a008ee836f20f20550f320f22992e660f38825b6d0fc7adedd3", 0x42}], 0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0x10000) fcntl$addseals(r5, 0x409, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup3(r6, r5, 0x0) dup3(r7, r3, 0x0) write$snddsp(r7, &(0x7f0000000180)="2ea887755c3fb4209ca8f788fd3f0a6ee3dce19d33d5822b272b96895132263d", 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 931.217770][T25458] device .0 entered promiscuous mode [ 931.222654][ T2707] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 931.229427][T25461] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 931.261501][T25461] device .1 entered promiscuous mode 13:15:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setgid(r1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000c00)=@nat={'nat\x00', 0x19, 0x4, 0x620, [0x200005c0, 0x0, 0x0, 0x20000736, 0x20000766], 0x0, &(0x7f0000000040), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x4, 0x6003, 'vlan0\x00', 'geneve1\x00', 'netdevsim0\x00', 'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="0f5d1b75ceb7", [0x1fe, 0x0, 0xff, 0xff], 0x10e, 0x10e, 0x146, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7ff}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_batadv\x00', 'veth1_macvtap\x00', 0x14, 0x2, 0x0, 0x9, 0x690, 0x5, {0x4}, {0x100}}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x3, 0xa, 0x8906, 'veth1_macvtap\x00', 'macvtap0\x00', 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', @dev={[], 0x3c}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@empty, 0x10}}}}, {0x5, 0x6c, 0x80f3, 'veth0\x00', 'netpci0\x00', 'gre0\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="08fa2d973893", [0xff, 0xff, 0xff, 0x0, 0xff, 0x101], 0x126, 0x1ae, 0x1e6, [@owner={{'owner\x00', 0x0, 0x18}, {{0xee00, 0x0, 0x0, r1, 0x2, 0x5}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@private0, @rand_addr=' \x01\x00', [0xff, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x2, 0x1d, 0x2, 0x40, 0x4e21, 0x4e23, 0x4e21, 0x4e21}}}], [@common=@log={'log\x00', 0x28, {{0x7d, "f4d693bdb5295a82eb1d8ed1b1fd192337e7558d7aba81f5886dab3a3fee", 0x6}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x4, 0x88e7, 'wg2\x00', 'lo\x00', 'netpci0\x00', 'wg1\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x156, 0x18e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x800}, {0x1}], 0x0, 0x2}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'bond0\x00', 'vlan0\x00', 0xf, 0x2, 0xfffffffc, 0x8, 0x7, 0xd2, {0x1}, {0x5}}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0x10}}}}]}]}, 0x698) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) fstat(0xffffffffffffffff, 0x0) setuid(0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000300)='overlay\x00', r2) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x40045566, 0x0) 13:15:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 931.478809][ T2707] usb 6-1: Using ep0 maxpacket: 8 13:15:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @broadcast, @void, {@x25={0x805, {0x0, 0x3, 0x0, "840070767360645a91ec6b5a9c963be21fd63e0a1f4659d873dc1ce95114715837a34156d4e20f"}}}}}, 0x7a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 931.599211][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 931.638840][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 931.656672][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 931.688509][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 931.732454][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 931.746352][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:15:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)={[{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:15:48 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2, 0x0, 0x3, 0x81, 0x0, 0x0, 0x3, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000500)={0xa, {0xa, 0x3f, 0x8}}, 0xa) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000540)=0x38) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r7) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c67726f757036a7aeaab788815769643d09e8af42572ee4da90cc24e3b7c33e23333d48010400000000000043c859cf76e963547629164f261bd21f032ce060447949ad052371add4cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef0d858bbe0d8d89799b8c8bb6f931c7204ecfb72223e584921270bfdb079355a193a86e814fe95d28f2adfbc481ba57ad9a3feba948c712dae4d9f1f72e530fc6a06db8f8899f59c6230acab0d99b42d1199eff2c124039e96b272e61a86a06f415efd08cafa9e2f06c7320b04ae8c72790881c2a42fef3d2ed979a947cdc7fe3b5e474c6", @ANYRESDEC=r12, @ANYBLOB="2c6d61578e4168220fb31cc66ad0e312785f726561643d300700e000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e74bd409e5b70966891baa01fc2288844dc1e94df53f5fcb8b4756a01006b8fb1787c0679f3183f6c445859ba01000000000000000a3c3aebfbba4dd98220ab6f", @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b04f977ee65f01000000f061bf91999b942e04792d53cc636019e31925132a5ccab623b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153b80dac76c5b5eef800000000"]) setgid(r12) statx(r2, &(0x7f0000000600)='./bus\x00', 0x800, 0x10, &(0x7f0000000400)) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./bus\x00', r11, r13, 0x800) r14 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x40, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8000, 0x1d}, 0x102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r14) [ 931.879061][T25437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.886575][T25437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 931.982027][T25478] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 932.020266][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 932.026535][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:15:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:48 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009e8662083c418681587a0000000109021200010000000009040000002464f400ab264c3fd66af4100271b24ab9db3d3130f7397000cc61d8c19005c98c01ae16e74f1c09968db91f6c050e7eecd1826ec79c1e8f322573b8e4b12f6ad035900553185e7c5c7c9102ac874c4537bc6dc1f1bdf98d98e7a48026d39cdeff25e395d73be1ab196dd4d3f51993dced7314557c9e3d762e5c1873fc5f09ce411159582a389eb5155ea38c02b15a85cec40880db620b"], 0x0) [ 932.228814][T25437] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 932.272216][T25437] raw-gadget gadget: fail, usb_ep_enable returned -22 13:15:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000844) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003480)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES32=r2, @ANYRES64], 0x32600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2d, 'cpu'}]}, 0x5) sendmsg(r2, &(0x7f0000000680)={0x0, 0x13000003, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0xffffff1f}], 0x8, 0x0, 0x0, 0xf00}, 0x780f8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002000)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x5, 0x3f, 0x6, 0x10, 0x3, 0x3e, 0x6548, 0x203, 0x40, 0x2ec, 0xffffffff, 0x1, 0x38, 0x1, 0x1ff, 0x8, 0x1}, [{0x3, 0x9, 0x2, 0x400, 0x1, 0x4, 0x7, 0x7}, {0x7, 0x5, 0x10000, 0x5, 0x9, 0x102000000000, 0x4, 0x3f}], "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", [[]]}, 0x11b0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='memory.events\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000a00)='lo\x00\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00y.\xfc*_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7f\r\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 \x06\x00\x00\x00\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0-\x96\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x830, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ef6ac01aa3323694c6b3d45278"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1bfe7fdd295d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:15:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:52 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@empty, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="96db0000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRESHEX, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0800010070636900110002003030123030000008008a00", @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000"], 0x120}, 0x1, 0x0, 0x0, 0x801}, 0x4004084) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000f3ffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000400120001ff02000000000000000000000000000101009078000000006086004000003200fc000000000000000000000000000001fe8000000000000000000000000000aa0000000000000000"], 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:52 executing program 1: 13:15:52 executing program 0: 13:15:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000240004800c00078008000500010000001300010062726f6164636173742d6c696e6b"], 0x3}}, 0x0) sendfile(r4, r3, 0x0, 0x100000003) [ 935.289127][T25585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.296102][T25585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 935.328736][ T2486] usb 6-1: can't set config #1, error -71 [ 935.361118][ T2486] usb 6-1: USB disconnect, device number 9 13:15:52 executing program 1: 13:15:52 executing program 0: 13:15:52 executing program 1: 13:15:52 executing program 0: 13:15:52 executing program 1: 13:15:52 executing program 0: [ 935.858545][ T2486] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 936.118778][ T2486] usb 6-1: Using ep0 maxpacket: 8 [ 936.238844][ T2486] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 936.251815][ T2486] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 936.282618][ T29] audit: type=1804 audit(1594041352.956:130): pid=25619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir294214929/syzkaller.01ir2T/397/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 936.325108][ T2486] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 936.354104][ T2486] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 936.368178][ T29] audit: type=1804 audit(1594041352.976:131): pid=25623 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir294214929/syzkaller.01ir2T/397/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 936.406749][ T2486] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 936.425547][ T2486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.449638][ T29] audit: type=1804 audit(1594041353.116:132): pid=25638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir294214929/syzkaller.01ir2T/397/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 936.479011][T25617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.486038][T25617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.520289][ T2486] hub 6-1:1.0: bad descriptor, ignoring hub [ 936.526690][ T2486] hub: probe of 6-1:1.0 failed with error -5 [ 936.774999][T25647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 936.790150][T25647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 937.030660][ T2486] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 937.628645][T25617] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 937.868551][T25617] usb 6-1: Using ep0 maxpacket: 8 [ 937.980286][T25647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 937.990132][T25647] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 938.038536][ C1] usblp0: nonzero read bulk status received: -71 [ 938.239548][ T2486] usb 6-1: USB disconnect, device number 10 [ 938.280352][T25616] usblp0: removed [ 939.058561][ T8069] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 939.298561][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 939.428621][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 939.439704][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 939.451878][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 939.462763][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 939.476693][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 939.486540][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:15:56 executing program 0: 13:15:56 executing program 1: 13:15:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7, 0x405, 0x51d0}) 13:15:56 executing program 4: 13:15:56 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x2) r3 = socket$phonet(0x23, 0x2, 0x1) sendfile(r0, r3, 0x0, 0x1000) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="120100000900fb8cbab94a12fe9650000012070103000905010200ffe00000090582021a00"/50], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 939.538705][ T8069] usb 6-1: can't set config #1, error -71 [ 939.546219][ T8069] usb 6-1: USB disconnect, device number 11 13:15:56 executing program 1: 13:15:56 executing program 4: 13:15:56 executing program 0: 13:15:56 executing program 1: 13:15:56 executing program 0: 13:15:56 executing program 4: 13:15:56 executing program 1: 13:15:56 executing program 0: [ 940.118648][ T8069] usb 6-1: new high-speed USB device number 12 using dummy_hcd 13:15:56 executing program 4: [ 940.410456][ T8069] usb 6-1: device descriptor read/64, error 18 13:15:57 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:15:57 executing program 1: [ 940.828586][ T8069] usb 6-1: device descriptor read/64, error 18 [ 941.098551][ T8069] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 941.389774][ T8069] usb 6-1: device descriptor read/64, error 18 [ 941.788524][ T8069] usb 6-1: device descriptor read/64, error 18 [ 941.909988][ T8069] usb usb6-port1: attempt power cycle [ 942.618524][ T8069] usb 6-1: new high-speed USB device number 14 using dummy_hcd 13:15:59 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:15:59 executing program 0: 13:15:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:15:59 executing program 4: 13:15:59 executing program 1: 13:15:59 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', r4}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts={0x8}]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 942.728684][ T8069] usb 6-1: device descriptor read/8, error -71 13:15:59 executing program 1: 13:15:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, 0x2ac}) 13:15:59 executing program 0: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) [ 942.938683][ T8069] usb 6-1: device descriptor read/8, error -71 13:15:59 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x80000) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, r4, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:15:59 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x132}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:15:59 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0xb1, 0x18, 0x10, 0x1b3d, 0x172, 0xfb2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x92, 0x51, 0x92, 0x0, [], [{{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x8b}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:15:59 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000002cc0), 0x1a3, 0x0) 13:15:59 executing program 4: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x7900) [ 943.157871][T25757] ptrace attach of "/root/syz-executor.4"[25754] was attempted by "/root/syz-executor.4"[25757] 13:16:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, &(0x7f0000000e00)={&(0x7f0000000d80)="460f0d9134fc4616c4a20bf52ac4a1797f6d95400f381d8b0b000000c4e2499642300f38c9e7c4413572e4003e45decfc4821d07954d8ad9f73e3e3e450f74f1", 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 943.398562][ T2707] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 943.429688][ T8069] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 943.519008][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 943.639771][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 943.659392][ T2707] usb 2-1: Using ep0 maxpacket: 16 13:16:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xa0000000000, 0x2, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x78, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @dev={0xfe, 0x80, [], 0x13}, [@srh={0x47, 0x8, 0x4, 0x4, 0x5, 0x28, 0xfffc, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast2}, @private1, @mcast1]}]}}}}}}}}, 0xae) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) [ 943.682822][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 943.736480][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 943.778944][ T2707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 943.800046][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 943.820597][ T2707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 943.888302][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 943.938767][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.989048][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 943.996250][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.029592][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 944.035611][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 944.048394][ T2707] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0172, bcdDevice=fb.2f [ 944.057983][ T2707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.102889][ T2707] usb 2-1: Product: syz [ 944.119353][ T2707] usb 2-1: Manufacturer: syz [ 944.134477][ T2707] usb 2-1: SerialNumber: syz 13:16:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 944.157232][ T2707] usb 2-1: config 0 descriptor?? 13:16:00 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)=ANY=[], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000140)="cfaa1973fdc10500000000000000") recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x100000000, 0x0, 0x300000000}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 13:16:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x28}}, 0x0) [ 944.232107][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.241479][ T2707] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 944.262354][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 944.286360][ T2707] usb 2-1: Detected FT-X [ 944.314364][ T2707] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 14 [ 944.341311][ T2707] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 13:16:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') write$cgroup_int(r0, &(0x7f0000000040), 0x12) [ 944.448832][ T2707] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 944.478706][ T2707] ftdi_sio ttyUSB0: Unable to write latency timer: -71 13:16:01 executing program 4: unshare(0x20000400) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0xabaf) [ 944.505983][ T2707] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 944.531109][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 944.564953][ T2707] usb 2-1: USB disconnect, device number 32 [ 944.599534][ T8069] usb 6-1: USB disconnect, device number 15 [ 944.622183][ T2707] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 944.638846][ T8069] usblp0: removed [ 944.706800][ T2707] ftdi_sio 2-1:0.0: device disconnected [ 945.078627][ T8069] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 945.308535][ T2707] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 945.328823][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 945.448885][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 945.460135][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 945.471808][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 945.482683][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 945.496476][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 945.506542][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.539232][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 945.546477][T25748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 945.554613][ T2707] usb 2-1: Using ep0 maxpacket: 16 [ 945.579416][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 945.585624][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 945.678961][ T2707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 945.688803][ T2707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 945.858678][ T2707] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0172, bcdDevice=fb.2f [ 945.867899][ T2707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.876446][ T2707] usb 2-1: Product: syz [ 945.880911][ T2707] usb 2-1: Manufacturer: syz [ 945.885693][ T2707] usb 2-1: SerialNumber: syz [ 945.897276][ T2707] usb 2-1: config 0 descriptor?? [ 945.938781][ T8069] usblp: can't set desired altsetting 0 on interface 0 [ 945.948367][ T2707] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 945.963153][ T2707] usb 2-1: Detected FT-X [ 945.967597][ T2707] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 14 [ 945.986157][ T2707] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 945.995802][ T8069] usb 6-1: USB disconnect, device number 16 [ 946.108599][ T2707] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 946.138563][ T2707] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 946.169062][ T2707] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 946.189637][ T2707] usb 2-1: USB disconnect, device number 33 [ 946.199124][ T2707] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 946.219507][ T2707] ftdi_sio 2-1:0.0: device disconnected [ 946.689572][ T8069] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 946.928544][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 947.048860][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 947.059889][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 947.071559][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 947.082474][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 947.096397][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 947.106133][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.131037][T25867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 947.137963][T25867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 947.169423][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 947.175622][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 947.356191][ T8069] usblp: can't set desired altsetting 0 on interface 0 [ 947.389480][ T8069] usb 6-1: USB disconnect, device number 17 13:16:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x208) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x5425, 0xfffffffe) 13:16:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) unshare(0x20000400) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 13:16:04 executing program 1: unshare(0x20000400) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x6) 13:16:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b58c3cda22"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ba021850975c6f029bb7f19ff3"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "499f6e462e6fe43c732d5f15b3"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x200480d0}, 0x40010) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, 0xffffffffffffffff, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) accept4$llc(r4, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x800) 13:16:04 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80001000010, 0x50, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x5, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x300000000}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0xb900) 13:16:04 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)=ANY=[], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000140)="cfaa1973fdc10500000000000000") recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x100000000, 0x0, 0x300000000}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 13:16:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 947.958543][ T8069] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 948.077767][T25918] binder: 25917:25918 unknown command 268435456 [ 948.095261][T25918] binder: 25917:25918 ioctl c0306201 20000540 returned -22 13:16:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 948.218679][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 948.265039][T25924] binder: 25922:25924 unknown command 268435456 [ 948.280839][T25924] binder: 25922:25924 ioctl c0306201 20000540 returned -22 13:16:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 948.338934][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 948.365190][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 13:16:05 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 948.394905][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 948.419847][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 948.454089][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 948.478332][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:16:05 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0xc018480b, &(0x7f0000000000)={0x3, 0x200}) [ 948.507767][T25934] binder: 25931:25934 unknown command 268435456 [ 948.532592][T25934] binder: 25931:25934 ioctl c0306201 20000540 returned -22 [ 948.541404][T25898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.568911][T25898] raw-gadget gadget: fail, usb_ep_enable returned -22 13:16:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 948.609557][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 948.615762][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 948.700244][T25946] binder: 25944:25946 unknown command 268435456 [ 948.706849][T25946] binder: 25944:25946 ioctl c0306201 20000540 returned -22 [ 948.831075][T25898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 948.841926][T25898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 949.101244][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:16:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 949.270213][T25963] ptrace attach of "/root/syz-executor.0"[25961] was attempted by "/root/syz-executor.0"[25963] [ 949.270326][T25962] binder: 25959:25962 unknown command 268435456 [ 949.292536][T25962] binder: 25959:25962 ioctl c0306201 20000540 returned -22 [ 949.718548][T25898] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 949.958607][T25898] usb 6-1: Using ep0 maxpacket: 8 [ 950.059057][T25966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.066293][T25966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 950.118486][ C1] usblp0: nonzero read bulk status received: -71 [ 950.348949][ T2707] usb 6-1: USB disconnect, device number 18 [ 950.356460][ T2707] usblp0: removed [ 951.128527][ T2707] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 951.211906][T25989] udc-core: couldn't find an available UDC or it's busy [ 951.219105][T25989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 13:16:08 executing program 1: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x0, 0x190, 0x0, 0x240, 0x240, 0x22c, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 13:16:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x88000001, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:08 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x39, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x65db885e, 0x202000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) shmget(0x2, 0xc00000, 0x400, &(0x7f00003fd000/0xc00000)=nil) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {r1, r2+60000000}}, &(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, 0xffffffffffffffff, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @raw_data=[0x8000, 0x3, 0x9, 0xfffffc01, 0x8, 0x5, 0x7ff, 0x6, 0x9, 0x8b, 0xcb13, 0x9, 0x101, 0x7ff, 0x0, 0x3f, 0x4, 0x8000, 0x7, 0x5, 0x1, 0x6, 0x1, 0xfffffffb, 0xe40, 0xb11d, 0x3ff, 0xfffffff7, 0x8, 0x7, 0xd9c, 0x8]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) unshare(0x20000400) ioctl$USBDEVFS_IOCTL(r0, 0x802c550a, 0x0) 13:16:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) pwrite64(r0, 0x0, 0x0, 0x0) [ 951.444193][T26004] binder: 25995:26004 unknown command 268435456 [ 951.454949][T26006] Cannot find add_set index 0 as target [ 951.461279][T26004] binder: 25995:26004 ioctl c0306201 20000540 returned -22 [ 951.474483][T26005] ptrace attach of "/root/syz-executor.0"[26003] was attempted by "/root/syz-executor.0"[26005] 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 951.636585][T26021] binder: 26015:26021 unknown command 268435456 [ 951.647801][T26021] binder: 26015:26021 ioctl c0306201 20000540 returned -22 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 951.792300][T26027] binder: 26026:26027 unknown command 268435456 [ 951.807343][T26027] binder: 26026:26027 ioctl c0306201 20000540 returned -22 [ 951.818859][ T2707] usb 6-1: device not accepting address 19, error -71 [ 951.940057][T26031] binder: 26030:26031 unknown command 268435456 [ 951.958764][T26031] binder: 26030:26031 ioctl c0306201 20000540 returned -22 13:16:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)="c4c183d06d87f34490c401d35a6a07650f810f000000d1fec401a566326464460f1adba5f042294d00d9fa", {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 952.143358][T26036] binder: 26034:26036 unknown command 268435456 [ 952.158693][T26036] binder: 26034:26036 ioctl c0306201 20000540 returned -22 13:16:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 952.208617][ T2707] usb 6-1: new high-speed USB device number 20 using dummy_hcd 13:16:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, 0xffffffffffffffff, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x7f, 0xc000, 0x1, 0x1000, 0x6, 0xcb, 0xfffffffd, 0x915, r7}, &(0x7f00000001c0)=0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x8, 0x80, 0x8000, 0x9}, @eth={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff}, {0x9}], @ipv4=@icmp={{0x1c, 0x4, 0x0, 0x1b, 0xec, 0x67, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0xb, 0x70, [@remote, @loopback]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x0, [{@local, 0x9}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x2}]}, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x4, [0x7fffffff]}, @timestamp={0x44, 0x8, 0x56, 0x0, 0x9, [0x5]}, @timestamp={0x44, 0x20, 0xce, 0x0, 0xd, [0x4, 0x3, 0x1, 0x6, 0x7f, 0xfffff7fc, 0x3]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xd4, 0x8, 0x0, {0x1d, 0x4, 0x0, 0x24, 0xc7df, 0x68, 0x5, 0xff, 0x89, 0x9, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xbc, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1]}, @noop, @noop, @rr={0x7, 0xf, 0x86, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_prespec={0x44, 0x2c, 0x9a, 0x3, 0x0, [{@loopback, 0x7}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@rand_addr=0x64010101, 0x9b4d}, {@multicast1, 0x6}]}]}}}}}}}}}, 0x110) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfffffffffffffee0) splice(r0, 0x0, r1, 0x0, 0x18102, 0x0) [ 952.330985][T26044] binder: 26042:26044 unknown command 268435456 [ 952.337662][T26044] binder: 26042:26044 ioctl c0306201 20000540 returned -22 13:16:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 952.478831][ T2707] usb 6-1: Using ep0 maxpacket: 8 13:16:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 952.527116][T26054] binder: 26053:26054 unknown command 268435456 [ 952.536420][T26054] binder: 26053:26054 ioctl c0306201 20000540 returned -22 [ 952.628741][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 952.643280][T26057] binder: 26056:26057 unknown command 268435456 [ 952.644894][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 952.669900][T26057] binder: 26056:26057 ioctl c0306201 20000540 returned -22 [ 952.679067][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 952.706640][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 952.744540][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 952.768552][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.829229][T26008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.842101][T26008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 952.889687][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 952.896068][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 953.092510][T26008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.099816][T26008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 953.329113][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 953.928549][T26008] usb 6-1: reset high-speed USB device number 20 using dummy_hcd [ 954.168571][T26008] usb 6-1: Using ep0 maxpacket: 8 [ 954.268970][T26080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.276006][T26080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 954.328517][ C1] usblp0: nonzero read bulk status received: -71 [ 954.534427][ T2707] usb 6-1: USB disconnect, device number 20 [ 954.568805][T26000] usblp0: removed [ 955.338530][ T2707] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 955.578561][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 955.698856][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 955.709981][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 955.720359][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 955.730800][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 955.744009][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 955.753652][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:16:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0, {[0x7c]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r7, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r6, r7, &(0x7f0000000000), 0x10000) fcntl$addseals(r7, 0x409, 0x8) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup3(r8, r7, 0x0) dup3(r9, r5, 0x0) ioctl$TUNSETSNDBUF(r9, 0x400454d4, &(0x7f00000000c0)=0x329d) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 955.818647][ T2707] usb 6-1: can't set config #1, error -71 [ 955.826164][ T2707] usb 6-1: USB disconnect, device number 21 13:16:12 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000300)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x50, 0xffffffffffffffff, 0x41a40000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000140)="cfaa1973fdc10500000000000000") recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x7, 0x100000000, 0x0, 0x300000000}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 13:16:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) unshare(0x20000400) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, 0x0) 13:16:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$netrom(r1, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom, @null, @remote, @remote, @default, @null, @default, @null]}, &(0x7f0000000340)=0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000001090224000101000000090400001207010300090586348b7ce00000090582021a3a3965e03de195e49a6d94600d92e2092d9082eb09f61c5027095ebc0c1ea01d319a50479d461963f2f37c4d845141ec9e61053496744f65057a16fd03eced409f0dfe725b90057ce3a36846d0402b0c137930f9dafe8fc90507ededc82f580474b51f0200000000000000938d1596ed87308dcd4a39fecc14a4ce3124e7b1bb28741ceaf991305195d8524000394757cadaf68e4b42b166e5790ce436"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:16:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 955.972858][T26114] binder: 26105:26114 unknown command 268435456 [ 955.991673][T26114] binder: 26105:26114 ioctl c0306201 20000540 returned -22 13:16:12 executing program 1: 13:16:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 956.165543][T26129] binder: 26126:26129 unknown command 268435456 [ 956.172868][T26129] binder: 26126:26129 ioctl c0306201 20000540 returned -22 13:16:12 executing program 1: [ 956.277012][T26132] binder: 26131:26132 unknown command 268435456 [ 956.289585][T26132] binder: 26131:26132 ioctl c0306201 20000540 returned -22 13:16:13 executing program 1: 13:16:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 956.378610][ T2707] usb 6-1: new high-speed USB device number 22 using dummy_hcd 13:16:13 executing program 1: [ 956.475269][T26138] binder: 26136:26138 unknown command 268435456 [ 956.484334][T26138] binder: 26136:26138 ioctl c0306201 20000540 returned -22 13:16:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 956.628652][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 956.749143][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1163, setting to 64 [ 956.778565][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 538 13:16:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:13 executing program 1: [ 956.812239][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.866570][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 956.885922][T26152] binder: 26150:26152 unknown command 268435456 [ 956.892826][T26152] binder: 26150:26152 ioctl c0306201 20000540 returned -22 [ 956.908494][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.969033][T26119] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 956.990468][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 956.996444][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:16:13 executing program 0: [ 958.089322][T26162] udc-core: couldn't find an available UDC or it's busy [ 958.096462][T26162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 13:16:15 executing program 1: 13:16:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x20, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x1037}, @void, @eth={@broadcast, @random="195385786f04", @void, {@can={0xc, {{0x3, 0x1}, 0x3, 0x0, 0x0, 0x0, "144f871455acef7c"}}}}}, 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000380)="28f8e40b7e761506cae3233b3c6ced987721938c35bca43c8d931114ab6a0e2b574f03bd98b8f4b687aab1bd650398396f8a5434a3e5b2c04ff1543fc3f355fa9ab1e426235d6c370afa37db9dd47d57f036913a73388d56a3fc7df7fc18f79f5e0c33f99a7351a78a57774a230271045d2c80fb87c37ff0d4b426233efa2a0fb398f8b4563d9e8c648762c9ff2de468f83083f5ee9aa2958fd09a909221585fd6cd7604b41d71b987232bb65ec9", 0xae}, {&(0x7f0000000440)="f125e22dc32cacee634232117acd675bbca987bcc4fbc147eb092effa5f7e8e23860e815ccc3f347858df5b445a9b0dae34a6955e8d1ab3eeb2a9d8741c1fcce6c374fc54ae6264adc1278e6b223c26962ab579ab9444e3d9e4f3d", 0x5b}], 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x81, 0x40, 0x8, 0x20, 0x0, 0x1, 0x2004, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcc, 0x2, @perf_config_ext={0xac, 0x6}, 0x9500, 0x8, 0x7, 0x5, 0x2, 0x0, 0x100}, 0x0, 0x7, r7, 0x0) 13:16:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:15 executing program 0: 13:16:15 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x93, 0xffffffff}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001e0ff00000904000905010200ffe0ee00"/50], 0x0) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x8002) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./file0\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x8010) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 959.228763][ T2707] usb 6-1: USB disconnect, device number 22 13:16:15 executing program 1: 13:16:15 executing program 0: [ 959.272337][T26172] binder: 26167:26172 unknown command 268435456 [ 959.286797][T26172] binder: 26167:26172 ioctl c0306201 20000540 returned -22 13:16:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="120100000900ed072505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x4000) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000200)={0x0, @motion_det}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x140, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000001c0)=0x3, 0x4) 13:16:16 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:16 executing program 1: 13:16:16 executing program 0: 13:16:16 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 959.748543][ T2707] usb 6-1: new high-speed USB device number 23 using dummy_hcd 13:16:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) 13:16:16 executing program 1: sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x200000d8) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) mbind(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x2, 0x0, 0xfffffffffffffffd, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000800)="0bd4f4274c8a1f274a4343514fc0fc5714cb41ad3b24dfea22ac2a1a00f7ef8fdc01a38df2cb000072736e035031ce06b74a03401f16abf08411b8ffad0890242845553cd6777d07a99f4bba31a2eb90c03f08220b91168cae0f316b0c7c855c93f0d5a5b3c8bd35", 0x68}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fgetxattr(r0, &(0x7f0000000280)=@known='security.apparmor\x00', &(0x7f0000000100)=""/62, 0x3e) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0010000", @ANYRES16, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x40895) sendfile(r2, r2, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 13:16:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0xe0, 0x0, 0xffffffffffffff37) 13:16:16 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 960.048628][ T2707] usb 6-1: device descriptor read/64, error 18 13:16:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) pipe2(0x0, 0x44800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) 13:16:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 960.458694][ T2707] usb 6-1: device descriptor read/64, error 18 [ 960.748612][ T2707] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 961.038796][ T2707] usb 6-1: device descriptor read/64, error 18 [ 961.428542][ T2707] usb 6-1: device descriptor read/64, error 18 [ 961.548642][ T2707] usb usb6-port1: attempt power cycle [ 962.258555][ T2707] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 962.348782][ T2707] usb 6-1: Invalid ep0 maxpacket: 7 13:16:19 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:19 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x43, 0x6000, &(0x7f0000000280)="b9ff0300600d698c389e14f065581fffffff000040006321000008060001080006040062050000002fbd53039e6aab84181aa5fefffffffffffffe0000000000000000", 0x0, 0xfc, 0x60000000, 0x0, 0x0, &(0x7f0000000140)="486e90decd837f7e62c4f903a15a12d35c31c761c1da726b54ccd47736cdde536c0b3e75ef5c913757491df3e38f5cc44e6847bdc594358967964f76aa9f31a6", &(0x7f0000000e00)="e2cf5bb7e5746a6740aebad755a0c2f42d131e1493afc9154aeae4ff8916e84fae2dbac6ba23acee58596467b1d68d886cf44ae164800edec75a809bcc514384c499930e5c18337dcbedb8e326b8b42e4ba1acb01b73cdcef9b719fb5ce7b547f9324fbebb24d0fd464fa10fd1fccf19f0f42441b5b27a5c93b29874c85ae55fd3cce1e8b903601c"}, 0x29) 13:16:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) dup2(r1, r2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x398848c13d000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000280)=""/184) 13:16:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup(r1) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x581001, 0x0) accept4$nfc_llcp(r7, &(0x7f0000000140), &(0x7f0000000300)=0x60, 0x180000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001380)={{0x67, @private=0xa010102, 0x4e22, 0x1, 'wlc\x00', 0x3e, 0x7, 0x54}, {@multicast1, 0x4e21, 0x0, 0xf2e, 0x4, 0x1}}, 0x44) write$binfmt_misc(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1004) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:19 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x20, 0xdc, 0xc6, 0x7, 0x0, 0x401, 0x8018, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x4, @perf_config_ext={0x1}, 0x1, 0x2, 0x0, 0x3, 0x6, 0x7e36, 0x4}, r2, 0x4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 962.499516][ T2707] usb 6-1: new high-speed USB device number 26 using dummy_hcd 13:16:19 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x100) dup2(r1, r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 962.886251][T26262] binder: 26260:26262 unknown command 268435456 [ 962.899888][T26262] binder: 26260:26262 ioctl c0306201 20000540 returned -22 13:16:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 962.978646][ T2707] usb 6-1: device not accepting address 26, error -71 [ 962.986928][ T2707] usb usb6-port1: unable to enumerate USB device 13:16:19 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/182, 0xb6}], 0x1) recvfrom$inet(r5, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r4, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) shutdown(r3, 0x0) [ 963.057680][T26269] binder: 26267:26269 unknown command 268435456 [ 963.077026][T26269] binder: 26267:26269 ioctl c0306201 20000540 returned -22 13:16:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 963.227151][T26277] binder: 26275:26277 unknown command 268435456 [ 963.235104][T26277] binder: 26275:26277 ioctl c0306201 20000540 returned -22 13:16:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 963.348518][ T2707] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 963.381512][T26285] binder: 26282:26285 unknown command 268435456 [ 963.394663][T26285] binder: 26282:26285 ioctl c0306201 20000540 returned -22 13:16:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/21, 0x15}, {0x0}], 0x2}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket(0x1c, 0x3, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/237, 0xed}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) 13:16:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x8906}, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0x0, @remote, @mcast2, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 963.532280][T26291] binder: 26290:26291 unknown command 268435456 [ 963.541466][T26291] binder: 26290:26291 ioctl c0306201 20000540 returned -22 [ 963.618640][ T2707] usb 6-1: device descriptor read/64, error 18 [ 964.008607][ T2707] usb 6-1: device descriptor read/64, error 18 [ 964.278534][ T2707] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 964.548581][ T2707] usb 6-1: device descriptor read/64, error 18 [ 964.938570][ T2707] usb 6-1: device descriptor read/64, error 18 [ 965.059414][ T2707] usb usb6-port1: attempt power cycle 13:16:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r7, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:16:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/82, 0x52}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/186, 0xba}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xb}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x4e}], 0x1}, 0x0) shutdown(r3, 0x0) 13:16:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/222, 0xde}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 13:16:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val, @val={0x3, 0x4, 0x101, 0x6, 0x2, 0x3}, @eth={@multicast, @broadcast, @void, {@x25={0x805, {0x2, 0x7, 0x9, "ea8c1825b0ec0604ae5e01e730ca2246548cc1c05db801ea1157b08dd65447000000bdd46e85ad879b4227c388ce7c3c6f2ffa6442e1c188adc69259f8446451fd67772211a3340a599a736fed1ee1c731e805bfd6e3d306e430322bfb1a61a7ad578acb820994dede9d0ae2a1e3ebb6bde5122336c3b07d5f42b4c7f332fe4582f98ea6cb6dee7d480fddfb71aeb681b5ee7c712a669720f3ac417c8fda7c9c55fe"}}}}}, 0xc1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 965.725236][T26324] binder: 26318:26324 unknown command 268435456 [ 965.749446][T26324] binder: 26318:26324 ioctl c0306201 20000540 returned -22 [ 965.842427][T26341] binder: 26336:26341 unknown command 268435456 [ 965.861623][T26341] binder: 26336:26341 ioctl c0306201 20000540 returned -22 13:16:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 966.018746][T26351] binder: 26349:26351 unknown command 268435456 [ 966.041791][T26351] binder: 26349:26351 ioctl c0306201 20000540 returned -22 13:16:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 966.187622][T26354] binder: 26353:26354 unknown command 268435456 [ 966.197846][T26354] binder: 26353:26354 ioctl c0306201 20000540 returned -22 [ 966.210687][ T2707] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 966.319010][ T2707] usb 6-1: Using ep0 maxpacket: 8 13:16:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 966.383592][T26358] binder: 26357:26358 unknown command 268435456 [ 966.406924][T26358] binder: 26357:26358 ioctl c0306201 20000540 returned -22 13:16:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 966.441725][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 966.464196][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 966.508506][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 966.546362][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 966.588586][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 966.597762][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.649901][T26371] binder: 26366:26371 unknown command 268435456 [ 966.682926][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.695264][T26371] binder: 26366:26371 ioctl c0306201 20000540 returned -22 [ 966.704312][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.755966][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 966.798516][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 966.957424][T26329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 966.965191][T26329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 967.210571][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 967.858581][T26329] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 968.108542][T26329] usb 6-1: Using ep0 maxpacket: 8 [ 968.209021][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.215964][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 968.278467][ C1] usblp0: nonzero read bulk status received: -71 [ 968.499151][ T8757] usb 6-1: USB disconnect, device number 29 [ 968.507766][ T8757] usblp0: removed [ 969.278543][ T2707] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 969.538534][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 969.658851][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 969.670167][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 969.681720][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 969.692491][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 969.706932][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 969.716621][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.749180][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.756152][T26334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 969.789282][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 969.795462][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)=""/60, 0x3c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001580)=""/16, 0x10}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) shutdown(r3, 0x0) 13:16:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0, 0xb}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x11}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/222, 0xde}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 13:16:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r6, &(0x7f00000004c0)=ANY=[@ANYRES16], 0xff67) sendfile(r5, r6, &(0x7f0000000000), 0x10000) fcntl$addseals(r6, 0x409, 0x8) socket$packet(0x11, 0x3, 0x300) write$tun(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x30c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f00000000c0)={0x1, 0x3, 0x4}) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x67027bf9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010240ffe00000090582021a"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x440001, 0x0) renameat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x8, 0x2}, 'port1\x00', 0xc9, 0x90002, 0x100, 0x6, 0x1, 0x9, 0x10000, 0x0, 0x2, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$rose(r5, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}, 0x40) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 969.862156][ T2707] usblp: can't set desired altsetting 0 on interface 0 [ 969.900274][ T2707] usb 6-1: USB disconnect, device number 30 [ 970.006344][T26422] binder: 26414:26422 unknown command 268435456 [ 970.027880][T26422] binder: 26414:26422 ioctl c0306201 20000540 returned -22 13:16:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:16:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:16:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 970.458695][ T2707] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 970.471951][T26451] binder: 26450:26451 ioctl c0306201 0 returned -14 13:16:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x0, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 970.587147][T26454] binder: 26453:26454 ioctl c0306201 0 returned -14 [ 970.718540][ T2707] usb 6-1: Using ep0 maxpacket: 8 13:16:27 executing program 0: 13:16:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 970.848826][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1856, setting to 1024 [ 970.869603][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 13:16:27 executing program 1: 13:16:27 executing program 0: [ 970.898477][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 970.908351][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 970.912363][T26468] binder: 26466:26468 ioctl c0306201 0 returned -14 13:16:27 executing program 1: [ 970.965100][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 971.001051][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.058983][T26428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 971.065945][T26428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 971.119433][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 971.136162][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 971.353944][T26428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 971.372504][T26428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 971.633892][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 972.258533][T26428] usb 6-1: reset high-speed USB device number 31 using dummy_hcd [ 972.498490][T26428] usb 6-1: Using ep0 maxpacket: 8 [ 972.599309][T26488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.606355][T26488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 972.668486][ C1] usblp0: nonzero read bulk status received: -71 [ 972.873829][ T3681] usb 6-1: USB disconnect, device number 31 [ 972.928264][ T3681] usblp0: removed [ 973.645096][ T3681] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 973.918542][ T3681] usb 6-1: Using ep0 maxpacket: 8 [ 974.057630][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1856, setting to 1024 [ 974.087439][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 974.122379][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 974.146924][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 974.177709][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 974.200452][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.229956][T26488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.242086][T26488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 974.269684][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 974.275710][ T3681] hub: probe of 6-1:1.0 failed with error -5 [ 974.318690][ T3681] usblp: can't set desired altsetting 0 on interface 0 13:16:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0}) 13:16:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x0, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:31 executing program 0: 13:16:31 executing program 1: [ 974.359504][ T3681] usb 6-1: USB disconnect, device number 32 13:16:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x60340, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/196) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:16:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0}) 13:16:31 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="25bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270146d0e02063e507cca00d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_checksum='journal_checksum'}]}) 13:16:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f0000000140)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffame\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xc9J\x1b\xefT\x9b\xd3\x9e\xe6YX\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a459830a1e94788cdaef5ddecbc6e40e06d94342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc73180e3c56001709c67"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:16:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0}) [ 974.638934][T26528] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext3 [ 974.759165][T26528] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext3 13:16:31 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x803041, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000040)='./bus\x00', 0x0) 13:16:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}], 0x0, 0x2, 0x0}) [ 974.898569][ T3681] usb 6-1: new high-speed USB device number 33 using dummy_hcd 13:16:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000011, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:16:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x0, 0x0) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = memfd_create(&(0x7f0000000140)='sysr\x01\xdf;HX%\x8f\xdd\xff\xff\xffa`e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f{\x85\x19\xe4\xf6n{B\x88\xd6\xacQ\xa9\a\xb7<@\xdd\xab\x8c\xe5\x82o\xd1lyk\x11\x11\xa4\xff\x92\x04\x15R!\xa0\x17g\xb1\x91\xb6/\x8a\xb18\xa0\xbe\'\xa8$\x03\x9d\x93\xf9\x1a\\\xe2\xa1,\xbe\x01\x8a\xfe4\xa7\xc8\x9eP\xc2\x01\x10\"\x00'/115, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a459830a1e94788cdaef5ddecbc6e40e06d94342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc73180e3c56001709c67"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$msdos(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0) 13:16:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}], 0x0, 0x2, 0x0}) [ 975.148536][ T3681] usb 6-1: Using ep0 maxpacket: 8 13:16:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xc, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}], 0x0, 0x2, 0x0}) [ 975.279082][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 975.312256][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 975.361711][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 975.408296][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 975.477896][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 975.538577][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.599121][T26522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 975.618645][T26522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 975.649547][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 975.655681][ T3681] hub: probe of 6-1:1.0 failed with error -5 [ 975.876402][T26522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 975.891188][T26522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 976.163593][ T3681] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 976.798553][T26522] usb 6-1: reset high-speed USB device number 33 using dummy_hcd [ 977.058493][T26522] usb 6-1: Using ep0 maxpacket: 8 [ 977.159196][T26578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 977.166213][T26578] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 977.238456][ C0] usblp0: nonzero read bulk status received: -71 [ 977.488856][ T2707] usb 6-1: USB disconnect, device number 33 [ 977.513806][ T2707] usblp0: removed [ 978.228497][ T2707] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 978.468572][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 978.609454][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 978.620808][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 978.631610][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 978.641700][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 978.654919][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 978.664192][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.689306][T26594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 978.696252][T26594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 978.719499][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 978.725506][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:16:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0xc, &(0x7f00000003c0)=[@reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) 13:16:35 executing program 0: pipe(&(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:16:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000300ac"], 0x90}}, 0x0) 13:16:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x7, 0x3) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0xffff, 0x3) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "6815d3", 0x11e4, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2={0xfc, 0x2, [], 0x1}, {[@routing={0x87, 0x4, 0x1, 0x4, 0x0, [@mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @dstopts={0x3c, 0x6, [], [@generic={0xeb, 0x30, "e04bc30d7bedc68b906f4bdb262442b317ac63ed60ae8e4f4676053d558a414f3f78395e8019525b92771de2fa55c4f3"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x62, 0x4, [], [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @local}, @pad1]}, @routing={0x0, 0x6, 0x0, 0x5, 0x0, [@empty, @local, @empty]}, @routing={0x2b, 0x6, 0x2, 0x0, 0x0, [@private0, @mcast2, @ipv4={[], [], @multicast1}]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x67}, @routing={0x3a, 0x14, 0x2, 0xff, 0x0, [@remote, @remote, @empty, @remote, @dev={0xfe, 0x80, [], 0x43}, @ipv4={[], [], @local}, @mcast1, @private2, @mcast1, @private1]}], {{0x4e20, 0x4e20, r5, r6, 0x1, 0x0, 0xb, 0x40, 0x6, 0x0, 0x40, {[@generic={0x8, 0xf, "e1d0d0c9da03393e613dbe7b15"}, @generic={0x3, 0x3, 'p'}, @eol, @mss={0x2, 0x4, 0x14}]}}, {"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"}}}}}}}}, 0x121e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 978.788671][ T2707] usblp: can't set desired altsetting 0 on interface 0 [ 978.819484][ T2707] usb 6-1: USB disconnect, device number 34 13:16:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000200)="161e825ae09f39bc542f2b40ebf0e542a8fe2d7aac340576a90d5b28f87b43b6bc1ae965b257220b65e29cf6b2e32df03dc6feab47971784ac64556c498f5dae984708290a279b4c40630fbd5c7c56068ef46c834eaa54bb2ac4c86feb41caa364198dd655bf06dd4d8cf05ae76f26bbbf4bedcda38668fb0944c57191a8caad6af677fd9a273fce37862431a7ce4d5f3863d88dfd744472c14305bc2d1002dcc505d6b1bde0d24136d58450d614bb10d10763e7fbebe123b553a227a80cf1e92985ba", 0xc3, 0x3}, {&(0x7f0000000300)="0b2dfea67a186c0f67ad2e09fb99c629b7fd785fbed7be26153406f053937b3d6c3df4744f962ffafcaba36d929de23b6782089a04958efeb0c3dc530afd65303c772490884e8e61e27fde00ca22a4934fc4913c730e1e21e61c2d923050312b4c6077569a64ae6470", 0x69}], 0x2004010, &(0x7f00000003c0)={[{@nocompress='nocompress'}, {@map_normal='map=normal'}, {@sbsector={'sbsector', 0x3d, 0x1ff}}, {@norock='norock'}, {@utf8='utf8'}, {@check_strict='check=strict'}, {@unhide='unhide'}], [{@dont_appraise='dont_appraise'}, {@obj_role={'obj_role'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_gt={'fowner>', r2}}, {@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 978.926876][T26613] binder: 26609:26613 unknown command 0 [ 978.937991][T26617] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 978.945853][T26613] binder: 26609:26613 ioctl c0306201 20000540 returned -22 [ 978.958037][T26617] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 13:16:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@val={0x2}, @void, @eth={@random="9f84bb57964b", @random="090986251a20", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1100}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x6}}}}}}}}, 0x6a) 13:16:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010044) sendto(0xffffffffffffffff, &(0x7f0000000280)="39936a194d37df3cbe7e9614faca2cb867d53a68fb48fc2afe6a37d62cae70d0cdd4bb53256fe3c62139892c334b762def9450d7082320302c4289890d358c83313c9840587c532e2850ca506e2b09da8e2585752f72545dd8bd57ecf9a49e3a340859b70e83078ce92a08c56eb25b1449695a1c7eab917d01abb16f56e0ffc341d1ae285562ffee93b3a673e23a5c5ac3b8394ff5169e819bff16ba2894bd65553a15e01e0bc28cb566e1e1a1d0c7db7819b767a2771160de34e1b2a0e9871285ec8eff", 0xc4, 0x20000004, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 13:16:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0xc, &(0x7f00000003c0)=[@reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 979.160594][T26632] binder: 26629:26632 unknown command 0 [ 979.177479][T26632] binder: 26629:26632 ioctl c0306201 20000540 returned -22 13:16:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0xc, &(0x7f00000003c0)=[@reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2, 0x0}) [ 979.319119][T26641] binder: 26639:26641 unknown command 0 [ 979.343220][T26641] binder: 26639:26641 ioctl c0306201 20000540 returned -22 13:16:36 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'gre0\x00'}]}, 0x30}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) [ 979.414724][ T2707] usb 6-1: new high-speed USB device number 35 using dummy_hcd 13:16:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 979.678614][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 979.824089][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 979.840331][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 979.858111][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 979.869944][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.890565][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 979.906036][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.939069][T26621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 979.946107][T26621] raw-gadget gadget: fail, usb_ep_enable returned -22 13:16:36 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0xb27a03, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='0', 0x1}, {&(0x7f0000000240)="1a", 0x1}], 0x2) [ 979.999552][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 980.005581][ T2707] hub: probe of 6-1:1.0 failed with error -5 13:16:36 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000800000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000010000027465616d5f736c6176655f3100080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a00080000000000000000b802000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff0e576e628d0395ce33344fe4185b5fcf1d4f90dd670b4ed6f80b023655376c45dbed0349efce8e565ba494d13ea81503d66593800ac8cf4f868995f01116619a18423f07856f2a7ca00d6234111c190b6d54bf880cc1b511547e976c24635803d9e8e6f88527939dbb66fcb92b348d39f8dda40a961d5319c0f9908d75aee009bc"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f0000004d00)) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000603}}], 0xc6, 0x0) [ 980.126938][T26667] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 13:16:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 980.201458][T26621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.219948][T26621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 980.490414][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 13:16:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$revoke(0x3, r3) 13:16:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffffffffffffffff86dd60b8044400383a0020010000000000000000000000000001ff02000000000000000000000000000101009078000000006086004000003200fe8000000000000000000000000000bbfe8000000000000010000000000000aa0000000000000000"], 0x72) socket$bt_hidp(0x1f, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) [ 980.922657][T26668] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 981.318542][T26621] usb 6-1: reset high-speed USB device number 35 using dummy_hcd [ 981.568557][T26621] usb 6-1: Using ep0 maxpacket: 8 [ 981.669183][T26683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.676106][T26683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 981.748467][ C1] usblp0: nonzero read bulk status received: -71 [ 981.984634][T21419] usb 6-1: USB disconnect, device number 35 [ 981.993403][T21419] usblp0: removed [ 982.718618][T21419] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 982.958593][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 983.078574][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 983.093862][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 983.106188][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 983.119375][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 983.136353][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 983.147560][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.181130][T26683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 983.191871][T26683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 983.219541][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 983.225964][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 983.278654][T21419] usblp: can't set desired altsetting 0 on interface 0 13:16:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9Dn\xa2\'z\x81\x00\x00\x00\x00\x00\x00\x00oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)) 13:16:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@attr2='attr2'}]}) 13:16:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000080000000b000100666c6f776572"], 0x48}}, 0x0) 13:16:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "860040", 0x0, 0x32, 0xff, @remote, @local, [@dstopts]}}}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18102, 0x0) 13:16:40 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x6, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 983.319968][T21419] usb 6-1: USB disconnect, device number 36 [ 983.432804][T26737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:16:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 983.527051][T26736] XFS (loop1): Invalid superblock magic number [ 983.848688][T21419] usb 6-1: new high-speed USB device number 37 using dummy_hcd 13:16:40 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000cc0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 13:16:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:16:40 executing program 4: 13:16:40 executing program 4: [ 984.108575][T21419] usb 6-1: Using ep0 maxpacket: 8 13:16:40 executing program 4: [ 984.228757][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 984.286638][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 984.318474][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 984.347692][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 984.391406][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 984.414048][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.459074][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.467191][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.484248][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 984.507570][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 984.689222][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.698127][T26746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 984.955241][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 985.578583][T26746] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 985.730148][T21419] Bluetooth: hci0: command 0x1003 tx timeout [ 985.739472][T10810] Bluetooth: hci0: sending frame failed (-49) [ 985.848711][T26746] usb 6-1: Using ep0 maxpacket: 8 [ 985.959305][T26799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 985.967149][T26799] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 986.028588][ C1] usblp0: nonzero read bulk status received: -71 [ 986.368905][ T2707] usb 6-1: USB disconnect, device number 37 [ 986.385978][ T2707] usblp0: removed [ 987.168668][ T2707] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 987.418664][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 987.538763][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 987.553785][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 987.566074][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 987.581882][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 987.618578][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 13:16:44 executing program 4: 13:16:44 executing program 3: 13:16:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) [ 987.648518][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.678967][ T2707] usb 6-1: can't set config #1, error -71 13:16:44 executing program 1: 13:16:44 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1, @ANYBLOB="55c9bd867c3ee5d7a1be41e2115bb43fe9ba4f32e168bdd16d6edc0c566b843a3e51ee9afad30fe41a88a80f6fcca4fbb896b032c3aaebc14ab1131962a5b1cacb7a35e2a1c81241402d3394e9425806058976a691d4453f7a398533b8ad093a80dd2f23de748ed6e381c7503cebb0528a7d71b5358b2d6345031ab30edfb2e0d2b9b55a8e97ef03d75122ebc1240ef1bdc67f34a7ea67ee47127bca5e6b419f080c754af5ea8a79c6fbd964fe8f079ec87bd62ff5a3b8778cadd9770819735bf4b0973b761442fc65611998c328aa5f8ec6bd73015b612e4d3e92b5e3a740036a0c7cb2", @ANYRESDEC=r2, @ANYBLOB="e25dc62fae36585e1c9dd5d48d892778bb6104e6336e36e00ba4ec2bde410e1f77cc8ae5ca", @ANYRES32, @ANYRES16=r0, @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) eventfd2(0x0, 0xea26b868f9303d1) [ 987.706705][ T2707] usb 6-1: USB disconnect, device number 38 13:16:44 executing program 3: [ 987.808838][ T8069] Bluetooth: hci0: command 0x1001 tx timeout [ 987.839893][T10810] Bluetooth: hci0: sending frame failed (-49) [ 988.218718][ T2707] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 988.488616][ T2707] usb 6-1: device descriptor read/64, error 18 [ 988.878654][ T2707] usb 6-1: device descriptor read/64, error 18 [ 989.148548][ T2707] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 989.418585][ T2707] usb 6-1: device descriptor read/64, error 18 [ 989.808649][ T2707] usb 6-1: device descriptor read/64, error 18 [ 989.888765][ T8069] Bluetooth: hci0: command 0x1009 tx timeout [ 989.928775][ T2707] usb usb6-port1: attempt power cycle [ 990.638645][ T2707] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 990.808540][ T2707] usb 6-1: device descriptor read/8, error -71 [ 991.018674][ T2707] usb 6-1: device descriptor read/8, error -71 [ 993.971815][ T0] NOHZ: local_softirq_pending 08 13:16:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:16:50 executing program 4: 13:16:50 executing program 1: 13:16:50 executing program 3: 13:16:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:16:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) ioctl$RTC_VL_CLR(r2, 0x7014) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000240)={0x3f, 0x1, 0xde, 0x6}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r4, 0x0, 0x3a, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe6b837969bff35b491f861e62488aeed26a1f8d") syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:16:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:16:50 executing program 3: 13:16:50 executing program 4: 13:16:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000280)=""/253) 13:16:51 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000001c0)={'sit0\x00'}) [ 994.398551][T21419] usb 6-1: new high-speed USB device number 43 using dummy_hcd 13:16:51 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@private2={0xfc, 0x2, [], 0x1}, @private1, @remote, 0x2, 0x6, 0x4, 0x500, 0xfffffffffffffffb, 0x802c0, r3}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 994.649605][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 994.789553][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 994.826713][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 994.841036][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 994.854647][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 994.869714][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 994.880784][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.909163][T26855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 994.917098][T26855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 994.929652][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 994.935945][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 995.162363][T26855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 995.170332][T26855] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 995.400164][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 996.038587][T26855] usb 6-1: reset high-speed USB device number 43 using dummy_hcd [ 996.208724][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 996.217495][ T1523] Bluetooth: hci0: sending frame failed (-49) [ 996.288594][T26855] usb 6-1: Using ep0 maxpacket: 8 [ 996.368666][ T3681] Bluetooth: hci1: command 0x1003 tx timeout [ 996.375604][ T1523] Bluetooth: hci1: sending frame failed (-49) [ 996.419146][T26893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 996.426626][T26893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 996.498461][ C1] usblp0: nonzero read bulk status received: -71 [ 997.546199][T26898] udc-core: couldn't find an available UDC or it's busy [ 997.554190][T26898] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 998.288621][ T8757] Bluetooth: hci0: command 0x1001 tx timeout [ 998.295557][ T1523] Bluetooth: hci0: sending frame failed (-49) [ 998.448630][ T8757] Bluetooth: hci1: command 0x1001 tx timeout [ 998.454738][ T1523] Bluetooth: hci1: sending frame failed (-49) [ 998.577313][ T8757] usb 6-1: USB disconnect, device number 43 [ 998.615854][ T8757] usblp0: removed [ 1000.368642][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1000.538544][ T8757] Bluetooth: hci1: command 0x1009 tx timeout 13:17:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) 13:17:00 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/88) 13:17:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, &(0x7f00000000c0)) 13:17:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x2, 0x7ff, 0x188, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:01 executing program 2: [ 1004.598644][ T8757] usb 6-1: new high-speed USB device number 44 using dummy_hcd 13:17:01 executing program 1: 13:17:01 executing program 4: 13:17:01 executing program 3: 13:17:01 executing program 2: [ 1004.868497][ T8757] usb 6-1: Using ep0 maxpacket: 8 13:17:01 executing program 4: 13:17:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) syz_genetlink_get_family_id$netlbl_unlabel(0x0) [ 1004.988939][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1005.028053][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1005.065594][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1005.094639][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1005.122388][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1005.158238][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.246341][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.278774][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.315839][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1005.325015][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1005.515563][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.523739][T26921] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1005.763249][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1006.368623][T26921] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 1006.528547][ T2486] Bluetooth: hci0: command 0x1003 tx timeout [ 1006.534665][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1006.618594][T26921] usb 6-1: Using ep0 maxpacket: 8 [ 1006.719161][T26973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1006.726107][T26973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1006.778475][ C1] usblp0: nonzero read bulk status received: -71 [ 1006.989740][ T8757] usb 6-1: USB disconnect, device number 44 [ 1007.020810][ T8757] usblp0: removed [ 1007.788477][ T8069] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1008.048565][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1008.188917][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1008.200056][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1008.212309][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1008.222715][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1008.236306][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1008.245601][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.279123][T26973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1008.286158][T26973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1008.328682][ T8069] usb 6-1: can't set config #1, error -71 [ 1008.336202][ T8069] usb 6-1: USB disconnect, device number 45 [ 1008.608533][ T8757] Bluetooth: hci0: command 0x1001 tx timeout [ 1008.614737][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1010.688533][ T8757] Bluetooth: hci0: command 0x1009 tx timeout 13:17:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:11 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x6, 0x0, 0xffffa8a3, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/671], 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x27}, 0x3}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x10d, 0x5}, 0x101, 0x4, 0x0, 0x0, 0x0, 0x0, 0xcd6}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0xff, 0x7ff, 0xfd}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0xff, 0x7ff}, 0x10) 13:17:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 13:17:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendfile(r0, r0, 0x0, 0x24000000) 13:17:11 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:17:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) dup3(r3, r2, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:12 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) geteuid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) syz_usb_connect(0x0, 0x48, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x37, 0xd0, 0xa3, 0x8, 0x413c, 0x8129, 0xef1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x47, 0x24, 0x63, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xd64245ab57988c06}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "d55bb040b71ae6"}]}}]}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1015.548542][ T3681] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1015.556253][ T8757] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1015.798483][ T3681] usb 3-1: Using ep0 maxpacket: 16 [ 1015.798579][ T8069] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1015.818845][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1015.929241][ T3681] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 1015.940167][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1015.952278][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1015.963684][ T3681] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1015.975857][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1015.986954][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1016.003567][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1016.015468][ T3681] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 13:17:12 executing program 1: [ 1016.031873][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1016.053578][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 32 [ 1016.058549][ T8069] usb 5-1: Using ep0 maxpacket: 8 13:17:12 executing program 3: [ 1016.098608][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1016.109681][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.157056][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.167045][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.199112][ T8069] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 1016.209417][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1016.210695][ T8069] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1016.215508][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1016.238724][ T3681] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 13:17:12 executing program 3: [ 1016.243248][ T8069] usb 5-1: config 0 has no interface number 1 [ 1016.247819][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1016.247839][ T3681] usb 3-1: Product: syz [ 1016.271956][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1016.278577][ T3681] usb 3-1: config 0 descriptor?? 13:17:13 executing program 1: [ 1016.291005][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1016.332378][ T8069] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1016.375383][ T8069] usb 5-1: too many endpoints for config 0 interface 213 altsetting 91: 176, using maximum allowed: 30 13:17:13 executing program 1: 13:17:13 executing program 3: [ 1016.428536][ T8069] usb 5-1: config 0 interface 213 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 1016.450622][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.457601][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.485189][ T8069] usb 5-1: config 0 interface 213 has no altsetting 0 [ 1016.668874][ T8069] usb 5-1: New USB device found, idVendor=413c, idProduct=8129, bcdDevice=ef.1a [ 1016.677967][ T8069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.686325][ T8069] usb 5-1: Product: syz [ 1016.694529][ T8069] usb 5-1: Manufacturer: syz [ 1016.704865][ T8069] usb 5-1: SerialNumber: syz [ 1016.715308][ T8069] usb 5-1: config 0 descriptor?? [ 1016.735371][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1016.759770][ T8069] option 5-1:0.0: GSM modem (1-port) converter detected [ 1016.989320][ T8069] option 5-1:0.213: GSM modem (1-port) converter detected [ 1017.007820][ T8069] usb 5-1: USB disconnect, device number 55 [ 1017.025900][ T8069] option 5-1:0.0: device disconnected [ 1017.046189][ T8069] option 5-1:0.213: device disconnected [ 1017.418618][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 1017.424758][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1017.728632][ T8069] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1017.758763][T27066] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 1017.978487][ T8069] usb 5-1: Using ep0 maxpacket: 8 [ 1018.008545][T27066] usb 6-1: Using ep0 maxpacket: 8 [ 1018.098697][ T8069] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 1018.107014][ T8069] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1018.119204][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1018.123407][ T8069] usb 5-1: config 0 has no interface number 1 [ 1018.127139][T27015] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1018.137378][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1018.154269][ T8069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1018.165493][ T8069] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1018.177906][ T8069] usb 5-1: too many endpoints for config 0 interface 213 altsetting 91: 176, using maximum allowed: 30 [ 1018.189881][ T8069] usb 5-1: config 0 interface 213 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 1018.204461][ T8069] usb 5-1: config 0 interface 213 has no altsetting 0 [ 1018.218502][ C1] usblp0: nonzero read bulk status received: -71 [ 1018.239763][ T3681] usb 3-1: USB disconnect, device number 68 [ 1018.368982][ T8069] usb 5-1: New USB device found, idVendor=413c, idProduct=8129, bcdDevice=ef.1a [ 1018.378259][ T8069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.415252][ T8069] usb 5-1: Product: syz [ 1018.420575][ T8069] usb 5-1: Manufacturer: syz [ 1018.425394][ T8069] usb 5-1: SerialNumber: syz [ 1018.438852][ T8757] usb 6-1: USB disconnect, device number 46 [ 1018.440635][ T8069] usb 5-1: config 0 descriptor?? [ 1018.460519][ T8757] usblp0: removed [ 1018.489720][ T8069] option 5-1:0.0: GSM modem (1-port) converter detected [ 1018.579373][ T8069] option 5-1:0.213: GSM modem (1-port) converter detected [ 1018.609078][ T8069] usb 5-1: USB disconnect, device number 56 [ 1018.616594][ T8069] option 5-1:0.0: device disconnected [ 1018.631074][ T8069] option 5-1:0.213: device disconnected [ 1019.488514][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 1019.495535][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1021.568653][ T8757] Bluetooth: hci0: command 0x1009 tx timeout 13:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:22 executing program 1: 13:17:22 executing program 3: 13:17:22 executing program 2: 13:17:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffc00, 0x40) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x2020000, 0x9}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:22 executing program 4: 13:17:22 executing program 3: 13:17:22 executing program 2: 13:17:22 executing program 1: 13:17:22 executing program 4: 13:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:23 executing program 1: 13:17:23 executing program 3: 13:17:23 executing program 2: 13:17:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1026.378641][ T2707] usb 6-1: new high-speed USB device number 47 using dummy_hcd 13:17:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1026.488982][T27150] binder: 27148:27150 unknown command 268435456 [ 1026.510289][T27150] binder: 27148:27150 ioctl c0306201 20000540 returned -22 [ 1026.618545][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 1026.756936][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1026.777653][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1026.802080][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1026.812802][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1026.850287][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1026.863492][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.909103][T27135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.916125][T27135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1026.929300][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 1026.935317][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 1027.130069][T27135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1027.137315][T27135] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1027.380058][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1027.988652][T27135] usb 6-1: reset high-speed USB device number 47 using dummy_hcd [ 1028.228582][T27135] usb 6-1: Using ep0 maxpacket: 8 [ 1028.329235][T27170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.336720][T27170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1028.388475][ C1] usblp0: nonzero read bulk status received: -71 [ 1028.628968][ T8069] usb 6-1: USB disconnect, device number 47 [ 1028.637200][ T8069] usblp0: removed [ 1029.368544][ T8069] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1029.628549][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1029.758830][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1029.769957][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1029.781878][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1029.792507][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1029.806590][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1029.816718][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.849294][T27170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1029.856778][T27170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1029.869361][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1029.875355][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1029.910903][ T8069] usblp: can't set desired altsetting 0 on interface 0 13:17:26 executing program 1 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:17:26 executing program 2 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1029.953193][ T8069] usb 6-1: USB disconnect, device number 48 13:17:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="df108e0c89627f92aa6bd7b97e1a89430c600764cebbee3ecd9c00e413685a10304d2808d7c1c36486a1b5bf97cca3a4d5e923ad1d42c927ee26a9334a8e8dbbc6582faffdd765233bf04b7db6f0b705435a8f3e816e983a136c9c69138975dcb65aa57454fb9df605d71e7a4651071158c4685d2493f0d9955c897ff582685613adab36ade859a8f424d6415847d3783e122d8723cc5ca6fdeefdb5bb98445a33"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1030.086829][T27207] binder: 27198:27207 unknown command 268435456 [ 1030.087592][T27203] FAULT_INJECTION: forcing a failure. [ 1030.087592][T27203] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.096956][T27207] binder: 27198:27207 ioctl c0306201 20000540 returned -22 [ 1030.171069][T27203] CPU: 0 PID: 27203 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 1030.179789][T27203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.189851][T27203] Call Trace: [ 1030.193187][T27203] dump_stack+0x18f/0x20d [ 1030.197532][T27203] should_fail.cold+0x5/0x14 [ 1030.202296][T27203] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1030.208037][T27203] should_failslab+0x5/0xf [ 1030.212459][T27203] __kmalloc+0x27d/0x340 [ 1030.216795][T27203] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1030.222357][T27203] tomoyo_realpath_from_path+0xc3/0x620 [ 1030.227915][T27203] ? tomoyo_profile+0x42/0x50 [ 1030.232634][T27203] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1030.238187][T27203] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1030.243834][T27203] ? tomoyo_execute_permission+0x470/0x470 [ 1030.249687][T27203] ? __lockdep_free_key_range+0x110/0x110 [ 1030.255469][T27203] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1030.261016][T27203] ? lock_is_held_type+0xb0/0xe0 [ 1030.266027][T27203] ? __fget_files+0x294/0x400 [ 1030.270804][T27203] security_file_ioctl+0x50/0xb0 [ 1030.280117][T27203] ksys_ioctl+0x50/0x180 [ 1030.284371][T27203] __x64_sys_ioctl+0x6f/0xb0 [ 1030.288973][T27203] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1030.294111][T27203] do_syscall_64+0x60/0xe0 [ 1030.298539][T27203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1030.304454][T27203] RIP: 0033:0x45cb29 [ 1030.308377][T27203] Code: Bad RIP value. [ 1030.312445][T27203] RSP: 002b:00007faf92c10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:17:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:26 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:17:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1030.320882][T27203] RAX: ffffffffffffffda RBX: 00000000004e1e60 RCX: 000000000045cb29 [ 1030.328917][T27203] RDX: 0000000020000540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1030.336919][T27203] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1030.344928][T27203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1030.352921][T27203] R13: 000000000000021f R14: 00000000004c476c R15: 00007faf92c116d4 13:17:27 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:17:27 executing program 2 (fault-call:5 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1030.409195][T27203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1030.416563][T27203] binder: 27201:27203 unknown command 268435456 [ 1030.425008][T27203] binder: 27201:27203 ioctl c0306201 20000540 returned -22 [ 1030.512330][T27222] binder: 27220:27222 unknown command 268435456 [ 1030.533467][T27222] binder: 27220:27222 ioctl c0306201 20000540 returned -22 [ 1030.556740][T27225] FAULT_INJECTION: forcing a failure. [ 1030.556740][T27225] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.587850][T27225] CPU: 0 PID: 27225 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 1030.596557][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.606630][T27225] Call Trace: [ 1030.609980][T27225] dump_stack+0x18f/0x20d [ 1030.614339][T27225] should_fail.cold+0x5/0x14 [ 1030.618959][T27225] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1030.624350][T27225] should_failslab+0x5/0xf [ 1030.628790][T27225] __kmalloc+0x27d/0x340 [ 1030.633062][T27225] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1030.638806][T27225] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1030.644049][T27225] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1030.649795][T27225] tomoyo_encode+0x28/0x50 [ 1030.654348][T27225] tomoyo_realpath_from_path+0x186/0x620 [ 1030.660044][T27225] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1030.665528][T27225] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1030.671207][T27225] ? tomoyo_execute_permission+0x470/0x470 [ 1030.677091][T27225] ? __lockdep_free_key_range+0x110/0x110 [ 1030.682906][T27225] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1030.688776][T27225] ? lock_is_held_type+0xb0/0xe0 [ 1030.693741][T27225] ? __fget_files+0x294/0x400 [ 1030.698445][T27225] security_file_ioctl+0x50/0xb0 [ 1030.703404][T27225] ksys_ioctl+0x50/0x180 [ 1030.707702][T27225] __x64_sys_ioctl+0x6f/0xb0 [ 1030.712314][T27225] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1030.717442][T27225] do_syscall_64+0x60/0xe0 [ 1030.722051][T27225] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1030.727958][T27225] RIP: 0033:0x45cb29 [ 1030.731856][T27225] Code: Bad RIP value. [ 1030.735922][T27225] RSP: 002b:00007faf92c10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.744341][T27225] RAX: ffffffffffffffda RBX: 00000000004e1e60 RCX: 000000000045cb29 [ 1030.752325][T27225] RDX: 0000000020000540 RSI: 00000000c0306201 RDI: 0000000000000003 13:17:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1030.760317][T27225] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1030.768325][T27225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1030.776312][T27225] R13: 000000000000021f R14: 00000000004c476c R15: 00007faf92c116d4 13:17:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:17:27 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:17:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1030.868628][ T8069] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1030.929457][T27234] binder: 27231:27234 unknown command 268435456 [ 1030.937646][T27234] binder: 27231:27234 ioctl c0306201 20000540 returned -22 [ 1031.038826][T27225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.046282][T27225] binder: 27223:27225 unknown command 268435456 [ 1031.056070][T27225] binder: 27223:27225 ioctl c0306201 20000540 returned -22 [ 1031.168509][ T8069] usb 6-1: device descriptor read/64, error 18 [ 1031.568644][ T8069] usb 6-1: device descriptor read/64, error 18 [ 1031.848571][ T8069] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1032.128546][ T8069] usb 6-1: device descriptor read/64, error 18 [ 1032.518499][ T8069] usb 6-1: device descriptor read/64, error 18 [ 1032.638706][ T8069] usb usb6-port1: attempt power cycle 13:17:29 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) dup2(r0, r0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:29 executing program 2 (fault-call:5 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x3f00, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000500)={0x40, 0x23, 0x36, {0x36, 0x30, "4e9584b44a231daaf4ee5da331e251dbf741e61731e96239c2a3635a979d47bebff144693ee793a558a7f0b84347009b73b3ca3b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000d00)={0x44, &(0x7f00000005c0)={0x0, 0x17, 0xec, "b58abcc7fc865207b0b3e3bbc9e595d6af4f671adbe7bca6bc6cac8173f9e786225514a143e7cfb129e681da8a67bdf83c641ea32088a025d85f2b39b498f918aa4611ec57baa4ffad28dc7ec14b369f23d1d2d23d0b1be72d87b0acd1b7baa9742034f52b2073261dc535b62c0b6601c05c4f60be06a015b23c7ae0461963097eb844577fcb7c61ddc07b32013b9893dc34bc377cd7ba7dd0e5289a3d14d936c6a7605dc6c6274bc72ebe0787619e86dd621d601b1d340e158b31962c41f115107e6a0fde6063d805c4acc667068b1d511e6a9be7479bf72acd346a56f512314abb33660230c4b4941d55b1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, 'r'}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "1e"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "74e480"}, &(0x7f0000000c80)={0x20, 0x84, 0x3, "67d4dc"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "c87df1"}}) 13:17:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1033.222230][T27255] binder: 27250:27255 unknown command 268435456 [ 1033.242346][T27254] FAULT_INJECTION: forcing a failure. [ 1033.242346][T27254] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.248313][T27255] binder: 27250:27255 ioctl c0306201 20000540 returned -22 [ 1033.288596][T27254] CPU: 1 PID: 27254 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 1033.297319][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.307375][T27254] Call Trace: [ 1033.310709][T27254] dump_stack+0x18f/0x20d [ 1033.315079][T27254] should_fail.cold+0x5/0x14 [ 1033.319682][T27254] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1033.325060][T27254] should_failslab+0x5/0xf [ 1033.329497][T27254] __kmalloc+0x27d/0x340 [ 1033.333762][T27254] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1033.339498][T27254] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1033.344815][T27254] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1033.350550][T27254] tomoyo_encode+0x28/0x50 [ 1033.354978][T27254] tomoyo_realpath_from_path+0x186/0x620 [ 1033.360635][T27254] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1033.366112][T27254] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1033.371759][T27254] ? tomoyo_execute_permission+0x470/0x470 [ 1033.377589][T27254] ? __lockdep_free_key_range+0x110/0x110 [ 1033.383372][T27254] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1033.388931][T27254] ? lock_is_held_type+0xb0/0xe0 [ 1033.393890][T27254] ? __fget_files+0x294/0x400 [ 1033.398937][T27254] security_file_ioctl+0x50/0xb0 [ 1033.403889][T27254] ksys_ioctl+0x50/0x180 [ 1033.408150][T27254] __x64_sys_ioctl+0x6f/0xb0 [ 1033.412759][T27254] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1033.418137][T27254] do_syscall_64+0x60/0xe0 [ 1033.422569][T27254] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1033.428466][T27254] RIP: 0033:0x45cb29 [ 1033.432355][T27254] Code: Bad RIP value. 13:17:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1033.436418][T27254] RSP: 002b:00007faf92c10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.444840][T27254] RAX: ffffffffffffffda RBX: 00000000004e1e60 RCX: 000000000045cb29 [ 1033.452838][T27254] RDX: 0000000020000540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1033.460813][T27254] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1033.468872][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1033.476843][T27254] R13: 000000000000021f R14: 00000000004c476c R15: 00007faf92c116d4 [ 1033.528102][T27254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1033.561823][T27254] binder: 27252:27254 unknown command 268435456 13:17:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1033.591736][T27254] binder: 27252:27254 ioctl c0306201 20000540 returned -22 [ 1033.603302][T27266] binder: 27264:27266 unknown command 268435456 [ 1033.614868][T27266] binder: 27264:27266 ioctl c0306201 20000540 returned -22 13:17:30 executing program 2 (fault-call:5 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1033.757694][T27272] binder: 27269:27272 unknown command 268435456 [ 1033.768488][T27272] binder: 27269:27272 ioctl c0306201 20000540 returned -22 [ 1033.788539][ T8069] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1033.799058][T27274] FAULT_INJECTION: forcing a failure. 13:17:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1033.799058][T27274] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.840162][T27274] CPU: 0 PID: 27274 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 1033.850138][T27274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.860211][T27274] Call Trace: [ 1033.863529][T27274] dump_stack+0x18f/0x20d [ 1033.867916][T27274] should_fail.cold+0x5/0x14 [ 1033.872532][T27274] should_failslab+0x5/0xf [ 1033.876997][T27274] kmem_cache_alloc_trace+0x240/0x2d0 [ 1033.882754][T27274] binder_inc_ref_for_node+0x2d2/0xe00 [ 1033.888336][T27274] binder_thread_write+0x13e3/0x2c20 [ 1033.893652][T27274] ? lock_acquire+0x1f1/0xad0 [ 1033.898346][T27274] ? binder_transaction+0x65b0/0x65b0 [ 1033.903726][T27274] ? find_held_lock+0x2d/0x110 [ 1033.908529][T27274] ? __might_fault+0x11f/0x1d0 [ 1033.913318][T27274] ? lock_downgrade+0x820/0x820 [ 1033.918198][T27274] ? __might_fault+0x190/0x1d0 [ 1033.923419][T27274] binder_ioctl+0x11af/0x6118 [ 1033.928125][T27274] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1033.933780][T27274] ? tomoyo_execute_permission+0x470/0x470 [ 1033.939619][T27274] ? __lockdep_free_key_range+0x110/0x110 [ 1033.945355][T27274] ? binder_thread_write+0x2c20/0x2c20 [ 1033.950920][T27274] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1033.956833][T27274] ? do_vfs_ioctl+0x27d/0x1090 [ 1033.961614][T27274] ? generic_block_fiemap+0x60/0x60 [ 1033.966846][T27274] ? __fget_files+0x294/0x400 [ 1033.971554][T27274] ? binder_thread_write+0x2c20/0x2c20 [ 1033.977027][T27274] ksys_ioctl+0x11a/0x180 [ 1033.981367][T27274] __x64_sys_ioctl+0x6f/0xb0 [ 1033.985986][T27274] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1033.991106][T27274] do_syscall_64+0x60/0xe0 [ 1033.995543][T27274] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1034.001447][T27274] RIP: 0033:0x45cb29 [ 1034.005355][T27274] Code: Bad RIP value. [ 1034.009421][T27274] RSP: 002b:00007faf92c10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.017924][T27274] RAX: ffffffffffffffda RBX: 00000000004e1e60 RCX: 000000000045cb29 [ 1034.026338][T27274] RDX: 0000000020000540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1034.034342][T27274] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.042479][T27274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1034.050436][T27274] R13: 000000000000021f R14: 00000000004c476c R15: 00007faf92c116d4 [ 1034.071842][T27274] binder: 27270:27274 unknown command 268435456 [ 1034.086294][T27274] binder: 27270:27274 ioctl c0306201 20000540 returned -22 [ 1034.108749][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1034.228944][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1034.245926][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1034.259075][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1034.270787][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1034.285391][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1034.311976][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.339081][T27259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.346077][T27259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.359323][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1034.365324][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1034.573595][T27259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.581027][T27259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1034.822567][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1035.428584][T27259] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1035.668529][T27259] usb 6-1: Using ep0 maxpacket: 8 [ 1035.778920][T27294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1035.785858][T27294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1035.838508][ C0] usblp0: nonzero read bulk status received: -71 [ 1036.028973][T21419] usb 6-1: USB disconnect, device number 51 [ 1036.051157][T21419] usblp0: removed [ 1036.768558][ T8069] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1037.008533][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1037.128710][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1037.139806][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1037.151483][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1037.162751][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1037.176805][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1037.186783][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.211066][T27294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1037.218312][T27294] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1037.249455][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1037.255499][ T8069] hub: probe of 6-1:1.0 failed with error -5 13:17:34 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)="385ba0788c6c2cdbbd8eb9c7299be2009fcb7a1a8c668eef250c2f2976c5448c2451e835d36b1eeaef8f47d2b3aeb6b8e303d532f2b3704bd451e3cd9cc93456a19eb3461f41b5cb91d053850f8919402b82fb76069867d1ec97f330c66b4b82597f3260f9b2e4b5cf8cbb6c75bdcf1eef025fd7befc71601a0171330a40419ac72a3177fea1cbc32c508a62", 0x8c}, {&(0x7f0000000280)="07ae62a2867f8b12fb4ca10c9bb90957d15857e658303ce353ae9530e85cc84346a2cf1fe4a0e3a00d45d0bda9d384cc76e26bca61bd57998ea9f8bf07ad0341c5520fef0a5bfe99dc0f793389b7b485950cf21b4d256c088cb2f3567641187964f56c238316c2c14adc3afd7e6119e04aef74927731b7a1981fb6413d9bb8df877f8b9b7e4929abf82cb4db6e30722a6a067fa50890043f090553a4c700be742f77e4a8db1d457cb03fa32ec7a8ebb72b12348199e212d92308f9bb641a071962b6863229c0fcd566ba35a8ed8533edcba9ba38879a71c3d3df393b008b", 0xde}, {&(0x7f0000000380)="3282a5083c1c5e3d7d919f304ad7255716c9af5d23ced099b9921b22bb582c9a883a868cd0366c264ddd535a6ec5fead32ee0d2dbf019adb820a1df3649391b69e705afe1a2defd787b78661d96980bec4b349c8273d72de10a224a8cf6662386439cd7eb2", 0x65}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000400)="3ba18efeadfc78be637438f6a0a0142b4dc39f3f525d23a5d2e847cc9d9187fc6e367e38997df7e7ba6e4f795d828cde48f2174fd9200baf18d91c95f1f53e5471ce1fb53854579e3247b4c7dd6ba6370d42faf51b2ded9c979456cccaf7126d6d4529db9dc87733ae464bf5a9b140d58e21a0ec3da45d76a18e46dcf81b5e6d995b2b34426d417a2ee19bb14980f8ea", 0x90}], 0x5, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000001090224000101000000b70b35fb8a179f6e81e60e3900"/50], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 13:17:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:34 executing program 2 (fault-call:5 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:34 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x3f000000, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1037.318633][ T8069] usblp: can't set desired altsetting 0 on interface 0 [ 1037.359411][ T8069] usb 6-1: USB disconnect, device number 52 [ 1037.451618][T27329] binder: 27319:27329 unknown command 268435456 [ 1037.455209][T27331] binder: 27320:27331 unknown command 268435456 [ 1037.464721][T27329] binder: 27319:27329 ioctl c0306201 20000540 returned -22 [ 1037.474055][T27331] binder: 27320:27331 ioctl c0306201 20000540 returned -22 13:17:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1037.690798][T27342] binder: 27341:27342 unknown command 268435456 [ 1037.694063][T27340] binder: 27338:27340 unknown command 268435456 [ 1037.703700][T27340] binder: 27338:27340 ioctl c0306201 20000540 returned -22 [ 1037.717837][T27342] binder: 27341:27342 ioctl c0306201 20000540 returned -22 13:17:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1037.896629][T27351] binder: 27349:27351 unknown command 268435456 [ 1037.908585][ T8069] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1037.912274][T27351] binder: 27349:27351 ioctl c0306201 20000540 returned -22 [ 1038.166863][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1038.298575][ T8069] usb 6-1: config 1 has an invalid descriptor of length 183, skipping remainder of the config [ 1038.309225][ T8069] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1038.320732][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1038.330555][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.476391][T27360] udc-core: couldn't find an available UDC or it's busy [ 1039.483433][T27360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1040.508992][ T3683] usb 6-1: USB disconnect, device number 53 13:17:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) r1 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xf9, 0x80, 0x80}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x5, 0x81, 0x10, 0x9}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xd0, 0x8, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x7, 0x8e7d}]}, 0x4, [{0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="af038875e7df77ebde04b91dc6cdcd508b4cee7049ffc646fac78092ef7fa3bdae6c363db3538c8a4b3e9c0731e2e8bcd5cb87172cb62a1492bc38d4a45db19fe325c560ab0f3cad02c41c274753c4ac78c64ece7ed13963c87869c65aa7b7b6c9a179996d2aa9ba1dd38aba627cdcae613d68d9138af2332bb71b4b69359ce4d92034743d18f54c6bae5c1ca953a8315e153b533042154e852200394ddaaa0d674aa912dedc842184965cabb47e14a2ca61200512d059edd1239763c3532e44b20cfca8f9376956"]}, {0x35, &(0x7f0000000300)=@string={0x35, 0x3, "32a5e3875a13549aaef0b06260e797bea01a1433ff26994d65a65bcfa754b057e7e1b7f9042ad8bd7475f6614c31feb7d915ca"}}, {0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="40037738a31fdc470021292bad4ec3a754977418990900000092213e9c70408543c7e7320efac1"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x424080, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd0, 0x1e0, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="acd305797abb", 0x2, 0x0, [0xb, 0x29, 0x5, 0x2e, 0x24, 0xb, 0x1d, 0x29, 0x31, 0x3b, 0x1d, 0x2e, 0xc, 0x2e, 0x3b, 0x19], 0x0, 0x81, 0x8}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0xffffffffffffffff, [0x7, 0x0, 0x2, 0x6, 0x4, 0x2], 0x6, 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x0, 0x4, 0x4, 0x3], 0x0, 0x4}, {0xffffffffffffffff, [0x5, 0x2, 0x5, 0x0, 0x3, 0x3], 0x1}}}}, {{@ip={@multicast1, @local, 0xff, 0xffffff00, 'veth1_to_bridge\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x89, 0x3, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}, {0xff9a, 0x1, 0x1}}, @common=@set={{0x40, 'set\x00'}, {{0xffffffffffffffff, [0x1, 0x1, 0x2, 0x0, 0x1, 0x3], 0x1, 0x4}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000002c0)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:17:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 13:17:37 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x3f00000000000000, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1040.721368][T27372] binder: 27367:27372 ioctl 10 20000540 returned -22 [ 1040.761318][T27376] binder: 27371:27376 unknown command 268435456 13:17:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c00, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1040.780427][T27376] binder: 27371:27376 ioctl c0306201 20000540 returned -22 13:17:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1040.895511][T27385] binder: 27381:27385 ioctl 4c00 20000540 returned -22 13:17:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1040.979403][T27388] binder: 27387:27388 unknown command 268435456 [ 1041.000298][T27388] binder: 27387:27388 ioctl c0306201 20000540 returned -22 13:17:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1041.041191][T27391] binder: 27389:27391 ioctl 4c01 20000540 returned -22 [ 1041.068502][ T8069] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1041.188305][T27396] binder: 27395:27396 unknown command 268435456 [ 1041.203371][T27396] binder: 27395:27396 ioctl c0306201 20000540 returned -22 [ 1041.318693][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1041.438581][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1041.450078][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1041.461602][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1041.472912][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1041.486881][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1041.496597][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.518930][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.525890][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.539199][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1041.545263][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1041.740291][T27378] udc-core: couldn't find an available UDC or it's busy [ 1041.747465][T27378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1041.765367][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1041.772970][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1042.026254][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1042.069636][ T8069] usb 6-1: USB disconnect, device number 54 [ 1042.077603][ T8069] usblp0: removed [ 1042.588540][ T8069] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1042.828526][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1042.948724][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1042.960261][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1042.970483][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1042.981035][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1042.995205][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1043.004585][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.039199][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.046146][T27378] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1043.059537][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1043.065547][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1043.249870][ T0] NOHZ: local_softirq_pending 08 [ 1043.268543][ T8069] usblp: can't set desired altsetting 0 on interface 0 [ 1043.299438][ T8069] usb 6-1: USB disconnect, device number 55 [ 1044.058576][ T3683] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1044.298555][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1044.418747][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1044.429880][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1044.441672][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1044.452766][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1044.466951][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1044.476711][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.509079][T27436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1044.516126][T27436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1044.529349][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1044.535348][ T3683] hub: probe of 6-1:1.0 failed with error -5 13:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c04, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0, {[0x3f00]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:17:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xca, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000000c0)=0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r4, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1044.619403][ T3683] usblp: can't set desired altsetting 0 on interface 0 [ 1044.699068][ T3683] usb 6-1: USB disconnect, device number 56 [ 1044.729065][T27454] binder: 27446:27454 ioctl 4c04 20000540 returned -22 13:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c05, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1044.747698][T27455] binder: 27447:27455 unknown command 268435456 [ 1044.759837][T27455] binder: 27447:27455 ioctl c0306201 20000540 returned -22 13:17:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1044.904170][T27467] binder: 27465:27467 ioctl 4c05 20000540 returned -22 13:17:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1044.975289][T27470] binder: 27468:27470 unknown command 268435456 [ 1045.004294][T27470] binder: 27468:27470 ioctl c0306201 20000540 returned -22 13:17:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1045.117332][T27475] binder: 27474:27475 ioctl 541b 20000540 returned -22 13:17:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1045.188647][ T3683] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1045.220820][T27480] binder: 27479:27480 unknown command 268435456 13:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) [ 1045.241100][T27480] binder: 27479:27480 ioctl c0306201 20000540 returned -22 13:17:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0, {[0x3f000000]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5423, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1045.373876][ T202] Bluetooth: hci0: Frame reassembly failed (-84) [ 1045.382185][T27486] Bluetooth: hci0: Frame reassembly failed (-84) [ 1045.428466][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1045.489839][T27493] binder: 27491:27493 ioctl 5423 20000540 returned -22 [ 1045.548785][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1045.560413][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1045.571449][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1045.582414][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1045.596713][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1045.606629][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.639064][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.646435][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.699369][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1045.705402][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1045.905019][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.912664][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1046.168159][ T3683] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1046.478794][ T3683] usb 6-1: USB disconnect, device number 57 [ 1046.494564][ T3683] usblp0: removed [ 1046.828447][ T12] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1047.078587][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 1047.208836][ T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1047.220095][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1047.230714][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1047.242001][ T12] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1047.255155][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1047.264317][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.302867][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1047.310037][T27459] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1047.324081][ T12] hub 6-1:1.0: bad descriptor, ignoring hub [ 1047.330335][ T12] hub: probe of 6-1:1.0 failed with error -5 [ 1047.418599][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 1047.429351][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1047.534580][ T12] usblp: can't set desired altsetting 0 on interface 0 [ 1047.570751][ T12] usb 6-1: USB disconnect, device number 58 [ 1048.298624][ T3681] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1048.558470][ T3681] usb 6-1: Using ep0 maxpacket: 8 [ 1048.688639][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1048.699732][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1048.711980][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1048.722400][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1048.736282][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1048.745698][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:17:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:17:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1048.779267][T27534] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1048.786197][T27534] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1048.799301][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 1048.805539][ T3681] hub: probe of 6-1:1.0 failed with error -5 13:17:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0, {[0x3f00000000000000]}}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1048.852620][ T3681] usblp: can't set desired altsetting 0 on interface 0 13:17:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0xea, 0x0, 0x3f, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x10080, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r1, 0x0, 0x3a, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe6b837969bff35b491f861e62488aeed26a1f8d") syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f69a4243474cabd59716fb7e541db003dddafbedbf6f7c82161f4277a4e04b790dbbf2d571c5503e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@hoplimit={{0x14, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r2], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1048.917852][T27549] binder: 27545:27549 unknown command 268435456 [ 1048.925625][ T3681] usb 6-1: USB disconnect, device number 59 [ 1048.951989][T27549] binder: 27545:27549 ioctl c0306201 20000540 returned -22 13:17:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1049.105041][T27565] binder: 27563:27565 unknown command 268435456 [ 1049.115159][T27565] binder: 27563:27565 ioctl c0306201 20000540 returned -22 13:17:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1049.248656][T27571] binder: 27570:27571 unknown command 268435456 [ 1049.268453][T27571] binder: 27570:27571 ioctl c0306201 20000540 returned -22 [ 1049.348624][ T3681] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1049.488619][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1049.494689][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1049.618558][ T3681] usb 6-1: Using ep0 maxpacket: 8 [ 1049.758829][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1049.769861][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1049.779904][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1049.789967][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1049.803172][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1049.812436][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.838988][T27557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1049.848334][T27557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1049.859238][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 1049.865262][ T3681] hub: probe of 6-1:1.0 failed with error -5 [ 1050.059990][T27557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1050.067139][T27557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1050.304940][ T3681] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1050.547173][T27589] udc-core: couldn't find an available UDC or it's busy [ 1050.554348][T27589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1050.638462][ C1] usblp0: nonzero read bulk status received: -71 [ 1050.769015][T27557] udc-core: couldn't find an available UDC or it's busy [ 1050.776040][T27557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1050.818982][ T3683] usb 6-1: USB disconnect, device number 60 [ 1050.826624][ T3683] usblp0: removed [ 1051.558541][ T3683] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1051.568740][ T3681] Bluetooth: hci0: command 0x1009 tx timeout [ 1051.808543][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1051.928781][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1051.939836][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1051.950005][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1051.960109][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1051.973460][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1051.982925][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.009139][T27589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1052.016122][T27589] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1052.029391][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1052.035415][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1052.116643][ T3683] usblp: can't set desired altsetting 0 on interface 0 [ 1052.169508][ T3683] usb 6-1: USB disconnect, device number 61 13:17:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:17:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x19, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x9, 0x1f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x65, 0x7, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x81, 0x7, 0xff}, 0xc2, &(0x7f00000001c0)={0x5, 0xf, 0xc2, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x80, 0x5d, 0xd3, 0x9}, @ptm_cap={0x3}, @generic={0xa1, 0x10, 0xb, "ed71c986375cd294db185bd98c7b155169c231563303e2bbd304e005a946ffa5e7ca2dc8d2f15310b8ac538b3cca3489a2401b0bcd5cfec9172173e01021e1839b44cf1162dcb75925496ad72cb3162ec27fa37c6550b2bc1fae5dbf10f8c07025288918c3508e5afbef8483e5ad1f15dcd0464fb512191b56a574f3763f020e4b10e7e813fa8bbc409823607695db0b250fb4e1827ed23b811521d91110"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x0, 0x69d}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xd, 0x3}]}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x2, 0x0) read$char_usb(r3, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$addseals(r2, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r2, 0x0) dup3(r5, r0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000300)={0x565, "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"}) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:17:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:17:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x8}}, 0x18) [ 1055.564173][T27629] binder: 27620:27629 unknown command 268435456 [ 1055.578729][T27629] binder: 27620:27629 ioctl c0306201 20000540 returned -22 13:17:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5501, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1055.656654][ T8472] Bluetooth: hci0: Frame reassembly failed (-84) [ 1055.658257][T27633] Bluetooth: hci0: Frame reassembly failed (-84) [ 1055.760123][T27640] binder: 27638:27640 unknown command 268435456 [ 1055.781473][T27640] binder: 27638:27640 ioctl c0306201 20000540 returned -22 [ 1055.793974][T27642] binder: 27639:27642 ioctl 5501 20000540 returned -22 13:17:52 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:17:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5509, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1055.818505][ T3683] usb 6-1: new high-speed USB device number 62 using dummy_hcd 13:17:52 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1055.956428][T27647] binder: 27645:27647 ioctl 5509 20000540 returned -22 13:17:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x550c, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1056.068590][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1056.123120][T27653] binder: 27652:27653 ioctl 550c 20000540 returned -22 [ 1056.188899][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1056.200262][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1056.216885][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1056.234630][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1056.249736][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1056.268565][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.309044][T27626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1056.319727][T27626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1056.349558][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1056.364294][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1056.550964][T27626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1056.557863][T27626] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1056.789968][ T3683] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1057.388535][T27626] usb 6-1: reset high-speed USB device number 62 using dummy_hcd [ 1057.628584][T27626] usb 6-1: Using ep0 maxpacket: 8 [ 1057.728559][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 1057.734657][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1057.749589][T27668] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1057.756493][T27668] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1057.808590][ C0] usblp0: nonzero read bulk status received: -71 [ 1058.149842][ T8069] usb 6-1: USB disconnect, device number 62 [ 1058.157550][ T8069] usblp0: removed [ 1058.948554][ T12] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1059.189070][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 1059.308822][ T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1059.319931][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1059.331363][ T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1059.342240][ T12] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1059.356166][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1059.365980][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.418583][ T12] usb 6-1: can't set config #1, error -71 [ 1059.438765][ T12] usb 6-1: USB disconnect, device number 63 [ 1059.808629][ T8757] Bluetooth: hci0: command 0x1001 tx timeout [ 1059.815719][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1061.888614][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1063.729413][ T0] NOHZ: local_softirq_pending 08 13:18:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:18:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:03 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x916, 0xff, "5dea8d164e00e96bf9402100abbda37fa5cd84", 0x75, 0x401}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:18:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0xf1, 0x7fffffff, 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:18:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1066.452085][T27706] binder: 27703:27706 ioctl 6364 20000540 returned -22 [ 1066.514704][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 1066.516534][T27713] Bluetooth: hci0: Frame reassembly failed (-84) 13:18:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1066.666223][T27724] binder: 27721:27724 ioctl 8912 20000540 returned -22 [ 1066.688581][ T8069] usb 6-1: new high-speed USB device number 64 using dummy_hcd 13:18:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1066.812678][T27729] binder: 27727:27729 ioctl 8933 20000540 returned -22 [ 1066.913941][T27732] binder: 27731:27732 unknown command 268435456 [ 1066.926495][T27732] binder: 27731:27732 ioctl c0306201 20000540 returned -22 [ 1066.949683][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1067.088959][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1067.110903][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1067.123717][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1067.141022][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1067.154934][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1067.165179][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.189112][T27705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.199328][T27705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.229303][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1067.236656][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1067.444775][T27705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.453857][T27705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1067.693681][ T8069] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1068.308509][T27705] usb 6-1: reset high-speed USB device number 64 using dummy_hcd [ 1068.528830][ T8757] Bluetooth: hci0: command 0x1003 tx timeout [ 1068.534984][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1068.568642][T27705] usb 6-1: Using ep0 maxpacket: 8 [ 1068.669261][T27748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1068.676274][T27748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1068.738514][ C1] usblp0: nonzero read bulk status received: -71 [ 1068.959861][ T8069] usb 6-1: USB disconnect, device number 64 [ 1068.969199][ T8069] usblp0: removed [ 1069.748647][ T8069] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1069.991369][ T8069] usb 6-1: Using ep0 maxpacket: 8 [ 1070.129837][ T8069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1070.140949][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1070.151509][ T8069] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1070.161646][ T8069] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1070.175244][ T8069] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1070.184502][ T8069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.229167][T27748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1070.236206][T27748] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1070.250798][ T8069] hub 6-1:1.0: bad descriptor, ignoring hub [ 1070.256787][ T8069] hub: probe of 6-1:1.0 failed with error -5 [ 1070.308541][ T8069] usblp: can't set desired altsetting 0 on interface 0 [ 1070.340837][ T8069] usb 6-1: USB disconnect, device number 65 [ 1070.608716][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1070.614948][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1072.688626][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1072.695726][ T0] NOHZ: local_softirq_pending 08 13:18:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:18:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x89f1, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x101, 0xf000}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000000)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:18:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000001c0)="9b7ed660c5ce79fa43c5bd5925c2b5fbf32af939f48a24ac23c88744a9e4403ec4ad09c0bd33c4d51f3a2d5201d04a139916ee137944dc5ec87484d93113c5b5df00ecb047661fd892af0938d18589e3bb8e04ef") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1076.627762][T27787] binder: 27782:27787 ioctl 89f1 20000540 returned -22 [ 1076.662364][T27789] binder: 27784:27789 unknown command 268435456 13:18:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1076.680986][T27789] binder: 27784:27789 ioctl c0306201 20000540 returned -22 13:18:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1076.862882][T27803] binder: 27801:27803 ioctl 400454ca 20000540 returned -22 13:18:13 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40045506, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1076.906086][T27806] binder: 27804:27806 unknown command 268435456 [ 1076.943551][T27806] binder: 27804:27806 ioctl c0306201 20000540 returned -22 13:18:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1077.008822][ T8757] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1077.085767][T27812] binder: 27810:27812 ioctl 40045506 20000540 returned -22 [ 1077.133743][T27814] binder: 27813:27814 unknown command 268435456 [ 1077.148128][T27814] binder: 27813:27814 ioctl c0306201 20000540 returned -22 [ 1077.248622][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1077.368921][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1077.396689][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1077.428515][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1077.468511][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1077.496061][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1077.517873][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.549120][T27793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1077.556093][T27793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1077.589424][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1077.595453][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1077.790448][T27793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1077.797732][T27793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1078.050086][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1078.688561][T27793] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 1078.768500][ T8757] Bluetooth: hci0: command 0x1003 tx timeout [ 1078.776618][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1078.928683][T27793] usb 6-1: Using ep0 maxpacket: 8 [ 1079.029038][T27795] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1079.035931][T27795] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1079.088496][ C1] usblp0: nonzero read bulk status received: -71 [ 1079.330119][ T8069] usb 6-1: USB disconnect, device number 66 [ 1079.337710][ T8069] usblp0: removed [ 1080.068508][ T8757] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1080.308512][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1080.428756][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1080.443882][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1080.456765][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1080.472253][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1080.485637][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1080.499497][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.536801][T27795] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1080.546341][T27795] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1080.569949][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1080.577632][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1080.621996][ T8757] usblp: can't set desired altsetting 0 on interface 0 [ 1080.660127][ T8757] usb 6-1: USB disconnect, device number 67 [ 1080.848637][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 1080.854788][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1082.928761][ T8757] Bluetooth: hci0: command 0x1009 tx timeout 13:18:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:18:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4004550a, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:23 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1eb063546ccd56fce70cbf65d11bbcdfe2fb44e146fffc7373cfe058b91471b1f91fa3eedadf91434cf20332335cc5ef47a2f11a9ccfb3dfdf7a3bd909ac85b3"}}}, {{@ipv6={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r1 = dup(r0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={r4, 0x9, &(0x7f0000000000)=[0x0, 0x7, 0x101, 0x9, 0x800, 0x8, 0x1, 0x3f, 0x400], &(0x7f0000000040)=[0x101, 0x0, 0x4, 0x1ff, 0x1, 0xe5, 0x5, 0x8, 0x20], 0x14, 0x5, 0x1, &(0x7f0000000080)=[0x1, 0x6, 0x5, 0x3, 0x6], &(0x7f00000000c0)=[0x5]}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:18:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) r6 = openat2(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x4000, 0x28, 0x15}, 0x18) readlinkat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1086.905702][T27869] binder: 27866:27869 ioctl 4004550a 20000540 returned -22 [ 1086.923858][T27872] binder: 27865:27872 unknown command 268435456 13:18:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1086.951043][T27872] binder: 27865:27872 ioctl c0306201 20000540 returned -22 13:18:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1087.147074][T27885] binder: 27883:27885 unknown command 268435456 [ 1087.168603][ T8757] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1087.176422][T27885] binder: 27883:27885 ioctl c0306201 20000540 returned -22 13:18:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1087.265988][T27889] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.276249][T27889] binder: 27888:27889 ioctl 40046207 20000540 returned -16 [ 1087.343931][T27893] binder: 27891:27893 ioctl c0306201 0 returned -14 [ 1087.383509][T27893] binder: 27891:27893 unknown command 268435456 [ 1087.403762][T27893] binder: 27891:27893 ioctl c0306201 20000540 returned -22 [ 1087.428547][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1087.548982][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1087.566846][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1087.590905][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1087.607562][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1087.628945][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1087.649017][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.679985][T27870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1087.686936][T27870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1087.707251][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1087.714284][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1087.915527][T27870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1087.923840][T27870] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1088.170380][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1088.828667][T27870] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1089.088571][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 1089.094756][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1089.098549][T27870] usb 6-1: device descriptor read/64, error 18 [ 1089.488634][T27870] usb 6-1: device descriptor read/64, error 18 [ 1089.768678][T27870] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1091.168607][ T8757] Bluetooth: hci0: command 0x1001 tx timeout [ 1091.176372][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1093.248590][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1095.098643][T27870] usb 6-1: device descriptor read/64, error -110 [ 1095.428599][T27870] usb 6-1: device descriptor read/64, error -32 [ 1095.698544][T27870] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1095.808713][T27870] usb 6-1: device descriptor read/8, error -32 [ 1096.018608][T27870] usb 6-1: device descriptor read/8, error -32 [ 1096.298661][T27870] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1096.370417][ T0] NOHZ: local_softirq_pending 08 [ 1096.428684][T27870] usb 6-1: device descriptor read/8, error -32 [ 1096.638651][T27870] usb 6-1: device descriptor read/8, error -32 [ 1096.759724][ T2707] usb 6-1: USB disconnect, device number 68 [ 1096.776987][ T2707] usblp0: removed 13:18:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 13:18:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:34 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x20000, 0x0) read$fb(r1, &(0x7f00000000c0)=""/69, 0x45) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) getpriority(0x2, r2) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x40) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0x1f) 13:18:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1097.763688][T27940] binder: 27933:27940 ioctl c0306201 0 returned -14 [ 1097.786219][T27940] binder: 27933:27940 unknown command 268435456 [ 1097.800339][T27940] binder: 27933:27940 ioctl c0306201 20000540 returned -22 13:18:34 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket(0x2c, 0x3, 0x0) 13:18:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40085503, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1098.070294][T27957] binder: 27955:27957 ioctl c0306201 0 returned -14 [ 1098.100739][T27957] binder: 27955:27957 unknown command 268435456 [ 1098.109378][T27958] binder: 27956:27958 ioctl 40085503 20000540 returned -22 [ 1098.121465][T27957] binder: 27955:27957 ioctl c0306201 20000540 returned -22 [ 1098.128700][ T2707] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1098.368712][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 1098.488911][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1098.501947][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1098.514218][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1098.525317][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1098.540067][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1098.550539][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.580282][T27941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.587355][T27941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.619563][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 1098.625578][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 1098.824629][T27941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1098.832347][T27941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1099.082410][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1099.688519][T27941] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 1099.888665][ T8757] Bluetooth: hci0: command 0x1003 tx timeout [ 1099.894885][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1099.958594][T27941] usb 6-1: device descriptor read/64, error 18 [ 1100.219787][ T8163] kworker/dying (8163) used greatest stack depth: 22840 bytes left [ 1100.368708][T27941] usb 6-1: device descriptor read/64, error 18 [ 1100.638551][T27941] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 1101.968563][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1101.975815][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1104.048549][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1105.908633][T27941] usb 6-1: device descriptor read/64, error -110 [ 1106.248567][T27941] usb 6-1: device descriptor read/64, error -32 [ 1106.518709][T27941] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 1106.658733][T27941] usb 6-1: device descriptor read/8, error -32 [ 1106.878723][T27941] usb 6-1: device descriptor read/8, error -32 [ 1107.148708][T27941] usb 6-1: reset high-speed USB device number 70 using dummy_hcd [ 1107.259663][T27941] usb 6-1: device descriptor read/8, error -32 [ 1107.468652][T27941] usb 6-1: device descriptor read/8, error -32 [ 1107.589054][ T2707] usb 6-1: USB disconnect, device number 70 [ 1107.606489][ T2707] usblp0: removed 13:18:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 13:18:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40095505, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:44 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = dup2(r0, r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001032100000921000000012201000905810308"], 0x0) syz_usb_ep_write(r3, 0x0, 0x3a, &(0x7f0000000680)="893c8aa1eeea37ba87e9e889c6764ec115fac98cac7235000000000000000014961f00000081fe6b837969bff35b491f861e62488aeed26a1f8d") syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x5, 0x39, {0x39, 0xd, "014b6569818f98055bdc4945570cd3b5a4d51ba4cf1115741a3bbd8d1c41c88b3c8253b0af844f9df8a3a2ca302a481e8ef5862aaab836"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f00000001c0)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x7ffffc1, 0xf000, 0xd6a, [0x3f0f, 0xff0030, 0xc000, 0x3fc0, 0xff00c0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "98b9dab57bfd7d7b71fb15839b567484"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x5, 0x1, 0xfbb}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x2, 0x6, 0x1, "82ea04cf", "1193f72b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x27, 0x40, 0x8, 0xaaf, 0x101}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0x18, 0x4c, "92a270a9b89066b48c1b8cab0cd1c33be43e62ffeaab1ac180b0d351b86bbc0d50e168c1b654b57890e7fad969b972dab7fa22b79c3c0ee9c9f05a103af4ee4e799a14d9b9e26dfbd50f8e87"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x80, 0x8}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1f85}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000500)={0x40, 0xb, 0x2, "5cbb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "26c5"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x7, 0x4) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) 13:18:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) [ 1107.983396][T28005] binder: 28000:28005 ioctl c0306201 200000c0 returned -14 [ 1108.010627][T28010] binder: 28003:28010 ioctl 40095505 20000540 returned -22 13:18:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1108.050549][T28016] binder: 28000:28016 unknown command 268435456 [ 1108.095606][T28016] binder: 28000:28016 ioctl c0306201 20000540 returned -22 13:18:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1108.252059][T28023] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.271715][T28023] binder: 28021:28023 ioctl 4018620d 20000540 returned -16 [ 1108.280642][ T3683] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1108.298648][ T2707] usb 6-1: new high-speed USB device number 71 using dummy_hcd 13:18:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1108.325290][T28025] binder: 28024:28025 ioctl c0306201 200000c0 returned -14 13:18:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1108.377959][T28025] binder: 28024:28025 unknown command 268435456 [ 1108.400288][T28025] binder: 28024:28025 ioctl c0306201 20000540 returned -22 [ 1108.513287][T28034] binder: 28033:28034 ioctl 40186366 20000540 returned -22 [ 1108.548616][ T2707] usb 6-1: Using ep0 maxpacket: 8 [ 1108.638985][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.658516][ T3683] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1108.676498][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.697212][ T2707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1108.699797][ T3683] usb 2-1: config 0 descriptor?? [ 1108.710307][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1108.725415][ T2707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1108.736019][ T2707] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1108.750204][ T2707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1108.759933][ T2707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.788980][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1108.796530][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1108.809316][ T2707] hub 6-1:1.0: bad descriptor, ignoring hub [ 1108.815608][ T2707] hub: probe of 6-1:1.0 failed with error -5 [ 1109.016897][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1109.024762][T28006] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1109.261496][ T2707] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1109.640014][ T3683] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1109.651652][ T3683] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input16 [ 1109.749913][ T3683] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1109.849519][T21419] usb 2-1: USB disconnect, device number 34 [ 1109.898605][T28006] usb 6-1: reset high-speed USB device number 71 using dummy_hcd [ 1110.128615][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 1110.136127][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1110.148670][T28006] usb 6-1: Using ep0 maxpacket: 8 [ 1110.248925][T28051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1110.256003][T28051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1110.308528][ C1] usblp0: nonzero read bulk status received: -71 [ 1110.478694][T21419] usb 6-1: USB disconnect, device number 71 [ 1110.502075][T21419] usblp0: removed [ 1110.668713][ T2707] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1111.258557][T21419] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1111.498553][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 1111.618812][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1111.634745][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1111.646249][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1111.663143][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.677437][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1111.693212][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.719358][T28051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1111.726296][T28051] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1111.760288][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 1111.766498][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 1111.818707][T21419] usblp: can't set desired altsetting 0 on interface 0 [ 1111.853071][T21419] usb 6-1: USB disconnect, device number 72 [ 1112.208611][ T3681] Bluetooth: hci0: command 0x1001 tx timeout [ 1112.214895][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1114.288693][ T3683] Bluetooth: hci0: command 0x1009 tx timeout 13:18:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 13:18:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x7cc4, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @private=0xa010101}}}, 0x108) 13:18:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200000000400204) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:18:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x41015500, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:18:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1118.276609][T28144] binder: 28136:28144 ioctl c0306201 200000c0 returned -14 [ 1118.299304][T28144] binder: 28136:28144 unknown command 268435456 [ 1118.311656][T28144] binder: 28136:28144 ioctl c0306201 20000540 returned -22 13:18:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1118.436729][T28154] binder: 28153:28154 ioctl 41015500 20000540 returned -22 13:18:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:18:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x800455cc, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1118.528767][ T3681] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1118.574322][T28157] binder: 28156:28157 unknown command 0 [ 1118.587414][T28157] binder: 28156:28157 ioctl c0306201 200000c0 returned -22 [ 1118.623634][T28163] binder: 28160:28163 ioctl 800455cc 20000540 returned -22 [ 1118.652269][T28157] binder: 28156:28157 unknown command 268435456 13:18:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000f00)) [ 1118.685627][T28157] binder: 28156:28157 ioctl c0306201 20000540 returned -22 [ 1118.808573][ T3681] usb 6-1: Using ep0 maxpacket: 8 [ 1118.928765][ T3681] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1118.948685][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1118.967711][ T3681] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1118.992097][ T3681] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1119.018996][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1119.030388][ T3681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.069108][T28142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1119.076343][T28142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1119.089730][ T3681] hub 6-1:1.0: bad descriptor, ignoring hub [ 1119.096164][ T3681] hub: probe of 6-1:1.0 failed with error -5 [ 1119.294838][T28142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1119.302910][T28142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1119.553784][ T3681] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1120.178567][T28142] usb 6-1: reset high-speed USB device number 73 using dummy_hcd [ 1120.368576][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 1120.374683][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1120.448649][T28142] usb 6-1: device descriptor read/64, error 18 [ 1120.848639][T28142] usb 6-1: device descriptor read/64, error 18 [ 1121.118607][T28142] usb 6-1: reset high-speed USB device number 73 using dummy_hcd [ 1122.448627][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1122.455706][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1124.528633][ T3683] Bluetooth: hci0: command 0x1009 tx timeout [ 1126.388713][T28142] usb 6-1: device descriptor read/64, error -110 [ 1126.718635][T28142] usb 6-1: device descriptor read/64, error -32 [ 1126.988646][T28142] usb 6-1: reset high-speed USB device number 73 using dummy_hcd [ 1127.098800][T28142] usb 6-1: device descriptor read/8, error -32 [ 1127.308660][T28142] usb 6-1: device descriptor read/8, error -32 [ 1127.578580][T28142] usb 6-1: reset high-speed USB device number 73 using dummy_hcd [ 1127.698725][T28142] usb 6-1: device descriptor read/8, error -32 [ 1127.908742][T28142] usb 6-1: device descriptor read/8, error -32 [ 1128.048754][T21419] usb 6-1: USB disconnect, device number 73 [ 1128.058275][T21419] usblp0: removed 13:19:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000f00)) 13:19:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80046402, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 13:19:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:05 executing program 1: keyctl$get_keyring_id(0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7dfda65ca9620a40de61d957972ad94fd225f923fcc6c2251a4e753251e3cad66fa3e62cb78f745285e9174b552422772b921b8df77b1d9e5539d4641ba217d71df3283d4d092c36596ff207ff59a3abf9d1b801c7588bc3d127c3f65fd7c36a70491334dba90d1ca3f25e", @ANYRES16=r7, @ANYBLOB="04002dbd7000ffdbdf250700000008000400ac1414bb08000500e000000114000300000000000000000000000000000000012800070073797374656d5f753a6f626a6563745f723a64706b675f7661725f6c69625f743a73300008000500ac141433140006007465616d5f736c6176655f3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x40) 13:19:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000280)={0x0, @motion_det}) [ 1128.471453][T28208] binder: 28202:28208 ioctl 80046402 20000540 returned -22 [ 1128.475311][T28211] binder: 28204:28211 unknown command 0 [ 1128.492382][T28211] binder: 28204:28211 ioctl c0306201 200000c0 returned -22 13:19:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000f00)) 13:19:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80085502, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1128.550525][T28211] binder: 28204:28211 unknown command 268435456 [ 1128.570604][T28211] binder: 28204:28211 ioctl c0306201 20000540 returned -22 13:19:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1128.666350][T28226] binder: 28224:28226 ioctl 80085502 20000540 returned -22 13:19:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1128.805669][T28229] binder: 28228:28229 ioctl 80086301 20000540 returned -22 13:19:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1128.866936][T28232] binder: 28230:28232 unknown command 0 [ 1128.906220][T28232] binder: 28230:28232 ioctl c0306201 200000c0 returned -22 13:19:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) [ 1128.927350][T28235] binder: 28230:28235 unknown command 268435456 [ 1128.961733][T28235] binder: 28230:28235 ioctl c0306201 20000540 returned -22 [ 1128.970009][T21419] usb 6-1: new high-speed USB device number 74 using dummy_hcd 13:19:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1129.109999][T28243] binder: 28242:28243 unknown command 0 [ 1129.125786][T28243] binder: 28242:28243 ioctl c0306201 200000c0 returned -22 [ 1129.179289][T28247] binder: 28242:28247 unknown command 268435456 [ 1129.185670][T28247] binder: 28242:28247 ioctl c0306201 20000540 returned -22 [ 1129.268628][T21419] usb 6-1: device descriptor read/64, error 18 [ 1129.698539][T21419] usb 6-1: device descriptor read/64, error 18 [ 1129.968644][T21419] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1130.248557][T21419] usb 6-1: device descriptor read/64, error 18 [ 1130.608632][ T3681] Bluetooth: hci0: command 0x1003 tx timeout [ 1130.615143][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1130.658659][T21419] usb 6-1: device descriptor read/64, error 18 [ 1130.790567][T21419] usb usb6-port1: attempt power cycle [ 1132.688618][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1132.696038][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1134.768610][ T3683] Bluetooth: hci0: command 0x1009 tx timeout 13:19:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x21c4, 0x2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@nested={0x21ae, 0x29, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffffff00}, @generic="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", @generic="3335dcc31bf9864ef362f5d3c1b1670c01f35386799030042b4fcdd1762a9958c15f47ef3308a3bfeab48ba6726a0d716d0418d9c6f581d69ac8fe39752024380c38051cc95f6abcabf5867c05e4fff755e809e79251dd576e73d033ea346a2e7f38d6d543c906088cfdccb1345ea019ffdd33bc4dd7299b77208c9b5dad476f925813c83c2bd7d79a1998c08f384061b46ff7e74348a6004eb426fa04f5f0b7f0920caf7cd76f64a18d35343871faa9376f60382aa0d4f465fe04e68b15a31ef401", @typed={0xb1, 0x6f, 0x0, 0x0, @binary="e02c3fcdcba83ddb5492e526797f096b9458f281e594620896e77da08e5886f1de08c95455baeb89546bcb4a9c21d048388f37265842ff35d92c4283d940c5bcf2f2b9e7004f52f19ba57c1ce0b38e6d0fd101e5ec8e243af0d45cc069b388e302962a4805441d0a2367e3bb8e9f34d7eb8c0590296f7fc1c477b5ab4589575e61ca4eddee74f8d3bd555d52428b6a6c07ac695944e76085c3754a63d518455f4e22642d8bd82f4ab4fb68debd"}, @typed={0x1004, 0x43, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x27, 0x0, 0x0, @u32=0xff}, @typed={0x1d, 0x77, 0x0, 0x0, @str='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac'}]}]}, 0x21c4}, 0x1, 0x0, 0x0, 0x1}, 0x4044c00) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) 13:19:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)="6566440f38239a0f000000db4e6b64660ffd2ac462f9db64eb0467400fc70ec4637d7deb00c4c389480f4cf22e430f00ab890000009dc4e1596701"}, 0x8, &(0x7f0000000f00)) 13:19:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, 0x0, 0x8, &(0x7f0000000f00)) 13:19:15 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x3, 0x7, 0x401, 0x1, 0x6, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) fstat(r1, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3, @ANYRESHEX], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000100)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1138.730641][T28270] binder: 28264:28270 unknown command 0 [ 1138.749546][T28270] binder: 28264:28270 ioctl c0306201 200000c0 returned -22 13:19:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0085504, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) [ 1138.782655][T28270] binder: 28264:28270 unknown command 268435456 [ 1138.813639][T28270] binder: 28264:28270 ioctl c0306201 20000540 returned -22 13:19:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 13:19:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1138.937318][T28282] binder: 28279:28282 ioctl c0085504 20000540 returned -22 13:19:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0, 0x0) [ 1139.038691][ T3683] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1139.069049][T28289] binder: 28287:28289 unknown command 0 [ 1139.082044][T28289] binder: 28287:28289 ioctl c0306201 200000c0 returned -22 [ 1139.113258][T28289] binder: 28287:28289 unknown command 268435456 [ 1139.136980][T28289] binder: 28287:28289 ioctl c0306201 20000540 returned -22 [ 1139.338681][ T3683] usb 6-1: device descriptor read/64, error 18 [ 1139.768648][ T3683] usb 6-1: device descriptor read/64, error 18 [ 1140.048596][ T3683] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1140.318558][ T3683] usb 6-1: device descriptor read/64, error 18 [ 1140.708560][ T3683] usb 6-1: device descriptor read/64, error 18 [ 1140.828763][ T3683] usb usb6-port1: attempt power cycle [ 1141.008767][ T8757] Bluetooth: hci0: command 0x1003 tx timeout [ 1141.016820][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1141.558561][ T3683] usb 6-1: new high-speed USB device number 79 using dummy_hcd 13:19:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:19:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0, 0x0) 13:19:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x200, 0x50bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b58c3cda22"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x24048894) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}]}]}}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ba32f5766517"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20010000}, 0x20000000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1141.737070][ T3683] usb 6-1: device descriptor read/8, error -71 [ 1141.811043][T28310] binder: 28306:28310 unknown command 25348 [ 1141.821873][T28311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1141.822170][T28308] binder: 28307:28308 ioctl c018620c 20000540 returned -22 13:19:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0, 0x0) 13:19:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1141.857090][T28310] binder: 28306:28310 ioctl c0306201 200000c0 returned -22 [ 1141.873199][T28319] binder: 28306:28319 unknown command 268435456 [ 1141.889803][T28319] binder: 28306:28319 ioctl c0306201 20000540 returned -22 [ 1141.948880][ T3683] usb 6-1: device descriptor read/8, error -71 [ 1142.023342][T28327] binder: 28324:28327 unknown command 25348 [ 1142.043020][T28327] binder: 28324:28327 ioctl c0306201 200000c0 returned -22 [ 1142.076646][T28327] binder: 28324:28327 unknown command 268435456 [ 1142.093559][T28327] binder: 28324:28327 ioctl c0306201 20000540 returned -22 [ 1142.361982][T28335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1142.438671][ T3683] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1142.539019][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1142.658985][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1142.670460][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1142.681298][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1142.691862][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1142.709627][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1142.719314][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.749196][T28313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1142.756144][T28313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1142.769484][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1142.775502][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1142.989951][T28313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1142.996856][T28313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1143.088599][ T8757] Bluetooth: hci0: command 0x1001 tx timeout [ 1143.094658][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1143.243626][ T3683] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1143.858612][T28313] usb 6-1: reset high-speed USB device number 80 using dummy_hcd [ 1144.098548][T28313] usb 6-1: Using ep0 maxpacket: 8 [ 1144.219169][T28349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1144.226080][T28349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1144.288561][ C0] usblp0: nonzero read bulk status received: -71 [ 1144.498966][ T8757] usb 6-1: USB disconnect, device number 80 [ 1144.513406][ T8757] usblp0: removed [ 1145.168585][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1145.258545][ T3683] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1145.508693][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1145.659071][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1145.670224][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1145.681598][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1145.692606][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1145.706497][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1145.716474][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.749287][T28349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1145.756230][T28349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1145.769457][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1145.782880][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1145.838752][ T3683] usblp: can't set desired altsetting 0 on interface 0 [ 1145.869848][ T3683] usb 6-1: USB disconnect, device number 81 13:19:26 executing program 0 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) 13:19:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x19, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x9, 0x1f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x65, 0x7, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x81, 0x7, 0xff}, 0xc2, &(0x7f00000001c0)={0x5, 0xf, 0xc2, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x80, 0x5d, 0xd3, 0x9}, @ptm_cap={0x3}, @generic={0xa1, 0x10, 0xb, "ed71c986375cd294db185bd98c7b155169c231563303e2bbd304e005a946ffa5e7ca2dc8d2f15310b8ac538b3cca3489a2401b0bcd5cfec9172173e01021e1839b44cf1162dcb75925496ad72cb3162ec27fa37c6550b2bc1fae5dbf10f8c07025288918c3508e5afbef8483e5ad1f15dcd0464fb512191b56a574f3763f020e4b10e7e813fa8bbc409823607695db0b250fb4e1827ed23b811521d91110"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x0, 0x69d}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xd, 0x3}]}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x2, 0x0) read$char_usb(r3, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$addseals(r2, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r2, 0x0) dup3(r5, r0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000300)={0x565, "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"}) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt(r0, 0x3800000, 0x7bc, &(0x7f0000000000)="3fafc096c206c6c0bd8764c77bb6e63af4dcc728b4a0426064c8a4b9fd7cbbcee6f4cf76a40072efff7de40d88072ba8b91b51127b0e1a56a04a96073e7950577ebd4b8f41f1c8344a325d66c0b1166b85c235236cf2e965ed797719fa929d7340018a505963da84a9cae1daed80b197302b7b", 0x73) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0x4, 0x14, {0x14, 0x24, "3e59c15b7072d94a8d6e721e30b3df411342"}}, &(0x7f00000001c0)={0x0, 0x3, 0x82, @string={0x82, 0x3, "e70f05cb8b130cddefb9679a958365b4ba984434fcf9aa8c04a5d06f982c9a1f0f7e0bcecc0d83eb603a760ac5cb77b94e2bd809fb85c7c9b16ca686233400a90c0cda69225c5fb7ae6b67991bb4f80bf0acf8a9a52f46b07edd2f3aa2b0a8d01c7fe03f87b1867e5ff198b9f3773d3292bfcbd76bd239a2df7a3820872d0e10"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x20, 0x14, 0xad, "24d863d6435803fef6f84f493d95ab7670c50c7d35532fb8d7d7fee4f06dde81c77e4026c8feb154384e91ca8d4d78ef71772830ff4cb94f4397914a13efdef92e3d3978398058bfe275ac09f5b7fafb99db0642eae4cb56cb43e042e3a32d9ffc0778c5a5eec7e232edf6917ac47a4640ac8a7e0413c164c05e99952d1f21ee048fdc1e43c7e6010002e563acad0b6ddf92811f9df78fb098ae4ed19c72fc1b459c395a85176449da809b3a8b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0xe0, {0xde, "1bccbed3f02f10ebaac0d4b5cb9da29115ea812f8b50f3c268f840547092e9870277c20d0234959886de02bfe073b6d225fe85735dc7cedf337d95cd18b2148c30e44fb3b9a2fb7b03c02749fddd6785fbaf591db66c7c6756cfd466c1acdedb535857a3a529e84db54978773c9402928f7713a5fd9bcf617ee9107ab216f80bf458e0899c62e58ca5a0e9a21010d046b2a269c64bc4989e52b1228fcdbbfed48240ef4ff8ad7be0e3f99c7e6caaeb13c50dd9e45c8bc918e4ead583dd84044ce304f2dffe40258047cb0be801444b7b6070d712923d1e168dc5cb2cdbf1"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x9}}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1149.593407][T28388] binder: 28385:28388 unknown command 25348 [ 1149.602689][T28388] binder: 28385:28388 ioctl c0306201 200000c0 returned -22 [ 1149.618617][T28388] binder: 28385:28388 unknown command 268435456 [ 1149.626411][T28388] binder: 28385:28388 ioctl c0306201 20000540 returned -22 13:19:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) 13:19:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) prctl$PR_SET_PDEATHSIG(0x1, 0xd) [ 1149.836784][T28402] binder: 28399:28402 ioctl c0306203 20000540 returned -22 [ 1149.858179][T28404] binder: 28401:28404 unknown command 287492 [ 1149.877221][T28404] binder: 28401:28404 ioctl c0306201 200000c0 returned -22 13:19:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1149.898543][ T3683] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1149.917325][T28406] binder: 28401:28406 unknown command 268435456 [ 1149.935754][T28406] binder: 28401:28406 ioctl c0306201 20000540 returned -22 13:19:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1149.980279][T28410] binder: 28409:28410 ioctl c0306205 20000540 returned -22 13:19:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x52) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, @ax25={0x3, @bcast, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x5, 0xeb}) [ 1150.114380][T28415] binder: 28413:28415 unknown command 287492 [ 1150.128322][T28415] binder: 28413:28415 ioctl c0306201 200000c0 returned -22 [ 1150.148692][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1150.172313][T28415] binder: 28413:28415 unknown command 268435456 [ 1150.193085][T28415] binder: 28413:28415 ioctl c0306201 20000540 returned -22 [ 1150.268927][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1150.284224][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1150.297175][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 13:19:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0x10000) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r4, 0x0) dup3(r6, r2, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x1, 0xa, 0xae, 0x6, 0x0, 0x1, 0x200, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5c7, 0x4, @perf_bp={&(0x7f00000001c0), 0xd}, 0x90, 0x1, 0x9, 0x6, 0x5, 0xed3, 0x3a5a}, r1, 0x6, r6, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/208) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) 13:19:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x19, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x9, 0x1f}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x65, 0x7, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x81, 0x7, 0xff}, 0xc2, &(0x7f00000001c0)={0x5, 0xf, 0xc2, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x80, 0x5d, 0xd3, 0x9}, @ptm_cap={0x3}, @generic={0xa1, 0x10, 0xb, "ed71c986375cd294db185bd98c7b155169c231563303e2bbd304e005a946ffa5e7ca2dc8d2f15310b8ac538b3cca3489a2401b0bcd5cfec9172173e01021e1839b44cf1162dcb75925496ad72cb3162ec27fa37c6550b2bc1fae5dbf10f8c07025288918c3508e5afbef8483e5ad1f15dcd0464fb512191b56a574f3763f020e4b10e7e813fa8bbc409823607695db0b250fb4e1827ed23b811521d91110"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x0, 0x69d}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xd, 0x3}]}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x2, 0x0) read$char_usb(r3, &(0x7f0000000f40)=""/4096, 0x1000) fcntl$addseals(r2, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r2, 0x0) dup3(r5, r0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000300)={0x565, "0a28ac100d7a44ff798c4866960e0a0a8eca3282ec336d5da9ea1c13b82bf1ee029255fc2d76b8b7465c2f43bdf0c9ad8bbdb3fc83af883fa80816be17f715bd844c773c6b20af106ad10a0eb86bad91e5d61da85624915d981093497dd466e7b3bb88b6eafd19d3851e1a32fa5126c36d4cc3601a840cf7ddc7e3c10060727301377abc590eab6add7ae54f9bdadf4cfd8ba7a696300a56396770ff9b9cdea8aa18c067792742818cb2b151a1fe0129408f6dd20e6d966d4ea47e7547772370c4b14b9db0890426cfa0362da012b191ef09cfff7ac1715102910dcc30bec18341ac957ad9974d80dd257bdffaf41d49b7952c046adf7625785fa189b6ab82037bfd474791e24467be2323377a5b2f79795a6360348fe23c5fc369f561b9b97a324a418f2273d009450ed5aa86bbe3bb2fab061c609e8d670919e32046952704ad5b3d8753befd4fab3527af76991bc9c09fce5f3016c2b049421a457c6a90e6e5b4513972db4660278290250d039f497cbddae8af8fa23911ec9601e2cefcf74c1a81dafe1adb8a5ecfc0ada79406f5c05e05ccf5480f26ec14885816928e69d9d087c26b1b5c33e27db65c19423785dbb5d220e2240a4a126707c72275f3dc7bb41b041a40068848de58b91262249a2dd785b29c6c40dd9f417a0443521a9510ec500f26ce0a43b0eca4f38955921f0dfce361f86d7aaaf5033a0558d0d12c0fd0a8edd79ee572ba712bf667f74145d3ebecaabf54964e0151f67d386a6bf07e745e7aee5fdcbbfa55c7871173aee25cf0c124e45ff11a5faffe681ec7177042a1c4d066ff86fd3a83d68dae45612bed182e61df3d2fe7cb4fc730fdfed626f26cb0dcd974153b3c91a9b15486741fb117363d6ddf38f04b44954850fff1a1dcd2b9075f6847e995413053f2ab7c88b4ff16058987598492748dd8a4bd528b42379b70eca5597af8f72340c4c3247340f679dde6fc79f44475c63430802aeb41636bbd1dfbf88f692c990119493860283f1536882637e34f2b9f591a85d526d2a894dec148d71d57849116df229f1821b893e63f302444ab20ec409067fd3c38cd645c883bef075da754db045af911bb7da3b75a6e0c341639e7726d8a6805f71e889d34c37b66ef387e9690e9fb5bfa4d73d93b60b0de4c0822f845d3f7ef8ef26a9abc32e0cf40da8ff85d3b11ce066ea52eafdd24ff5cdc0c8c393049dd293560c04424a5ee0aee86418b2c78508055cce56bbbb175fea5870b6a0e01a769f2a758b13de97dff20ef1b0434ba204de2ee1aa6ecd05002786176e919b029e3f28669c387d605bab9240372c087122a1196cb87af55a2bd123d9faa54aa09279130ebb92d5da077d49ad337d0c9a6a81b4c1b4dc034097cff2e7bd01640857baa19135064b095b210d847ee207a9584d7748927d06fc432dfdda7a86d8c78e8a87afe029c6406c1627d0582c7edd8f20aed46809285026e646f7750f73675c6d782bdf761f655126ff3f9d4922595dd7cd1250974a11aa7693cc1e9aa7f0c474b5c9aa745a461cbf1fbab4dd7f304ec7253630837ddd6d27ae0e7c92f67219faf5c7dcc9550df7088d273847a761cc816df1f14da72a73f006cbfacf61df6c4dfcfbb444777abcbc62c997e19f05d972a178cb8a258482dfd890de31ca4fcc211b255192dea0ad4d8060fbc4a459e42125466a7f36fa25481e9210149e6797fdbed70409dea913466c491251e735b215ecf9ecbf11da8e50c1dead22972a5786223ac8494a9c94aac5220274d9ff58491afa39baae8430940e97d0441abbdcd2048612e804a67bb5520a16bcce1cd6f618661fa7b91a87c8897ae85adb22e3c5dc70b427822ee2f076688c089575fb4db0d0ae42e454681b1c90d7ea9b9f73e715b926de192f89f397f1be488c2a0c4da319ccacb894f81b8318b134b142bd251cedb9e"}) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xf, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0xfffffffffffffe13, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) [ 1150.310325][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1150.325313][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1150.336167][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.373777][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.400507][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.429684][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1150.435816][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1150.461970][T28428] binder: 28426:28428 ioctl c030620c 20000540 returned -22 [ 1150.630550][T28390] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.637529][T28390] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1150.923647][ T3683] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1151.528699][T28390] usb 6-1: reset high-speed USB device number 82 using dummy_hcd [ 1151.768671][T28390] usb 6-1: Using ep0 maxpacket: 8 [ 1151.869190][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1151.876335][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1151.928530][ C0] usblp0: nonzero read bulk status received: -71 [ 1152.164114][T21419] usb 6-1: USB disconnect, device number 82 [ 1152.172115][T21419] usblp0: removed [ 1152.898575][T21419] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1153.138550][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 1153.258804][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1153.269998][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1153.281514][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1153.292128][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1153.306627][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1153.316232][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.349330][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1153.356332][T28395] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1153.369170][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 1153.375207][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 1153.448632][T21419] usblp: can't set desired altsetting 0 on interface 0 13:19:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240201010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) 13:19:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306210, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @bpq0='bpq0\x00', 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='attr/prev\x00') accept$alg(r2, 0x0, 0x0) 13:19:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/137, 0x89}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/123, 0x7b}], 0x5) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x40, &(0x7f0000000480)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) prctl$PR_SET_PDEATHSIG(0x1, 0xd) [ 1153.489583][T21419] usb 6-1: USB disconnect, device number 83 13:19:30 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:19:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000001c0)={0xeb, "b9ede2d3b6c8e804b5bd935e2c9b9858f4c24e20118a66ca902992b85ea268de83c8b4894e7bad72c1642d605c6407843ded2f8935b5f327998ad05b285ebea3fcf85bbf2c7d27b5e0673deca0bcb7b6543de19d8872a2fd1a8632bb56fc8776ac9d08ddf1588a4fd19823fc553c7dcf3128e49df9301efa28247a9d273d3eeb1ab9fdf142fd0030976c4bedf1fb82988774b6b2c4276b43ebf71c56a9b9469a62889f511d44aa633b8043a56ab29a573de7f3608f38cbe885caf0130a8167e3562d6f694b945d681fcef95dcd77ec9be68fac5855ed7e167601ccb01afad2feb1617950b3e042b895413813298d7b837b2e28980508c34ed1c5f6770260a1f1328319a3ed06865913c9d184598afaf0bf7dab471257305137e0d0a20dfacf5f8ba7dae0f39d8e4c0c55704a49c34e29996e9d778007d36f1b1ce64a5c71314458672a6f5d33aeb3d369ce8a5e097dcd9127c1fc955e28d610b9d49b7f78ec0d9393e8db4d4a41dcbd44ecb618e59d350f655837185bbfb760c9978ba69ddab6094cedfe659e4b40d41262213c71c9114c5ea2bc20a77df497b53cbf882b3d561ea8c881b2b380937ec2f9085f8eabc4dfc70d75e241f54d8ff82e1aaa1bb77c4025cfaece6c9537623a8b059b617e86a19b73288d9bc2b280edee7f311da4e6f6257ea602dde797c643265293bfcd1c63f42d2de1e0fe2daf822dc2e070acee"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x41, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) [ 1153.602155][T28483] binder: 28479:28483 unknown command 287492 [ 1153.611131][T28482] binder: 28473:28482 ioctl c0306210 20000540 returned -22 [ 1153.626983][T28483] binder: 28479:28483 ioctl c0306201 200000c0 returned -22 13:19:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1153.667710][T28483] binder: 28479:28483 unknown command 268435456 [ 1153.687913][T28483] binder: 28479:28483 ioctl c0306201 20000540 returned -22 13:19:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1153.751624][T28490] FAULT_INJECTION: forcing a failure. [ 1153.751624][T28490] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.787304][T28490] CPU: 1 PID: 28490 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1153.796014][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.806071][T28490] Call Trace: [ 1153.809374][T28490] dump_stack+0x18f/0x20d [ 1153.816602][T28490] should_fail.cold+0x5/0x14 [ 1153.821216][T28490] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1153.826932][T28490] should_failslab+0x5/0xf [ 1153.831357][T28490] __kmalloc+0x27d/0x340 [ 1153.835606][T28490] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1153.841167][T28490] tomoyo_realpath_from_path+0xc3/0x620 [ 1153.846738][T28490] ? tomoyo_profile+0x42/0x50 [ 1153.851508][T28490] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1153.856981][T28490] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1153.862623][T28490] ? tomoyo_execute_permission+0x470/0x470 [ 1153.868477][T28490] ? __lockdep_free_key_range+0x110/0x110 [ 1153.874231][T28490] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1153.879801][T28490] ? lock_is_held_type+0xb0/0xe0 [ 1153.884770][T28490] ? __fget_files+0x294/0x400 [ 1153.889470][T28490] security_file_ioctl+0x50/0xb0 [ 1153.894416][T28490] ksys_ioctl+0x50/0x180 [ 1153.899108][T28490] __x64_sys_ioctl+0x6f/0xb0 [ 1153.903747][T28490] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1153.908862][T28490] do_syscall_64+0x60/0xe0 [ 1153.913285][T28490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1153.919202][T28490] RIP: 0033:0x45cb29 [ 1153.923251][T28490] Code: Bad RIP value. [ 1153.927326][T28490] RSP: 002b:00007f45c9a1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.935767][T28490] RAX: ffffffffffffffda RBX: 00000000004efce0 RCX: 000000000045cb29 [ 1153.943880][T28490] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000003 [ 1153.951884][T28490] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1153.959868][T28490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1153.967861][T28490] R13: 0000000000000599 R14: 00000000004c862b R15: 00007f45c9a206d4 [ 1153.996189][T28490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1154.018126][T28498] binder: 28495:28498 ioctl c0306225 20000540 returned -22 [ 1154.042427][T28501] binder: 28499:28501 unknown command 268435456 13:19:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x25, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1154.069343][T28501] binder: 28499:28501 ioctl c0306201 20000540 returned -22 13:19:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1154.128586][T21419] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1154.206538][T28505] binder: 28504:28505 unknown command 268435456 [ 1154.241217][T28505] binder: 28504:28505 ioctl c0306201 20000540 returned -22 [ 1154.289829][T28508] binder: 28507:28508 unknown command 268435456 [ 1154.296122][T28508] binder: 28507:28508 ioctl c0306201 20000540 returned -22 [ 1154.388644][T21419] usb 6-1: Using ep0 maxpacket: 8 [ 1154.508900][T21419] usb 6-1: config index 0 descriptor too short (expected 548, got 36) [ 1154.517154][T21419] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1154.542154][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1154.562357][T21419] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1154.574311][T21419] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1154.589182][T21419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1154.598399][T21419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.630370][T28485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1154.637605][T28485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1154.649461][T21419] hub 6-1:1.0: bad descriptor, ignoring hub [ 1154.655463][T21419] hub: probe of 6-1:1.0 failed with error -5 [ 1154.890625][T28485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1154.897871][T28485] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1155.144159][T21419] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1155.748632][T28485] usb 6-1: reset high-speed USB device number 84 using dummy_hcd [ 1155.808726][ T8757] Bluetooth: hci0: command 0x1003 tx timeout [ 1155.815435][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1155.998676][T28485] usb 6-1: Using ep0 maxpacket: 8 [ 1156.099037][T28525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1156.106012][T28525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1156.178592][ C1] usblp0: nonzero read bulk status received: -71 [ 1156.369833][ T2707] usb 6-1: USB disconnect, device number 84 [ 1156.378324][ T2707] usblp0: removed [ 1157.148657][ T8757] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1157.398562][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1157.518763][ T8757] usb 6-1: config index 0 descriptor too short (expected 548, got 36) [ 1157.526965][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1157.539964][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1157.550754][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1157.561847][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1157.576588][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1157.586858][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.609351][T28525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1157.616355][T28525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1157.649561][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1157.655855][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1157.708820][ T8757] usblp: can't set desired altsetting 0 on interface 0 13:19:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x38, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, [], 0x3d}, 0x7}}, 0x4, 0x100}, 0x90) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000e6410bcfc6", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa4}]}}]}, 0x3c}}, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0x11, r7, 0x1, 0x1}, 0x14) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) 13:19:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x105000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x7, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1ff, 0x5, 0x8, 0x2}, 0x0, 0xfffffffffffffffe, r0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0x21, &(0x7f0000000e00)={0x0, 0x20000000, 0x0, {[0x1000000000000005]}}, &(0x7f0000000ec0)={&(0x7f0000000080)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac401291602db49980f0fba00008020a79ec40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x10000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, 0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @local, 0x2}]}, &(0x7f0000000100)=0x10) r4 = socket$inet(0x2, 0x1, 0x3ff) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x0, 0x3ad}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r5, 0x3}, 0xc) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r7, 0x80805659, &(0x7f0000000280)={0x0, @motion_det}) [ 1157.749462][ T8757] usb 6-1: USB disconnect, device number 85 [ 1157.817591][T28557] binder: 28551:28557 unknown command 268435456 [ 1157.827408][T28557] binder: 28551:28557 ioctl c0306201 20000540 returned -22 13:19:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1157.867809][T28563] binder: 28554:28563 unknown command 268435456 [ 1157.868725][T28564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1157.883058][T28563] binder: 28554:28563 ioctl c0306201 20000540 returned -22 [ 1157.895029][ T2486] Bluetooth: hci0: command 0x1001 tx timeout [ 1157.904985][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1157.960173][T28571] binder: 28570:28571 unknown command 268435456 [ 1157.966698][T28571] binder: 28570:28571 ioctl c0306201 20000540 returned -22 [ 1157.981548][T28564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.208750][ T8757] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1158.448620][ T8757] usb 6-1: Using ep0 maxpacket: 8 [ 1158.569019][ T8757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1158.580469][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1158.592596][ T8757] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1158.603049][ T8757] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1158.617221][ T8757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1158.626653][ T8757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.649169][T28559] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1158.656167][T28559] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1158.677265][ T8757] hub 6-1:1.0: bad descriptor, ignoring hub [ 1158.684230][ T8757] hub: probe of 6-1:1.0 failed with error -5 [ 1158.885379][T28559] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1158.893148][T28559] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1159.143996][ T8757] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1159.778634][T28559] usb 6-1: reset high-speed USB device number 86 using dummy_hcd [ 1159.968708][ T8757] Bluetooth: hci0: command 0x1009 tx timeout [ 1160.018634][T28559] usb 6-1: Using ep0 maxpacket: 8 [ 1160.129299][T28592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1160.136366][T28592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1160.188541][ C0] usblp0: nonzero read bulk status received: -71 [ 1160.518850][ T2707] usb 6-1: USB disconnect, device number 86 [ 1160.542431][ T2707] usblp0: removed [ 1161.308655][ T3683] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1161.548680][ T3683] usb 6-1: Using ep0 maxpacket: 8 [ 1161.668963][ T3683] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1161.680027][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1161.691660][ T3683] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1161.702776][ T3683] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1161.716063][ T3683] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1161.725372][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.760134][T28592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1161.767234][T28592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1161.799936][ T3683] hub 6-1:1.0: bad descriptor, ignoring hub [ 1161.805983][ T3683] hub: probe of 6-1:1.0 failed with error -5 [ 1161.865525][ T3683] usblp: can't set desired altsetting 0 on interface 0 [ 1161.899606][ T3683] usb 6-1: USB disconnect, device number 87 13:19:40 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:19:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x63, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) 13:19:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0x10000) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) dup3(r4, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f00000001c0)={{0x8, 0x6, 0x5, 0x3ff, '\x00', 0xae000000}, 0x2, 0x20000000, 0x3ff, 0xffffffffffffffff, 0xa, 0x31d9, 'syz0\x00', &(0x7f0000000000)=['&/$@%&%@[&&\\%-$#(,@/-^.}J,\x00', '\x00', '\\^\\\x00', '-^}\x00', ':&[\\\x00', '(-Q$\x00', '+\x00', '\x00', ')-\x00', '\x00'], 0x35, [], [0x101, 0x55, 0x8, 0x1f]}) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:40 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x4184e, 0x800000000, 0x100, 0x0, 0x20000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x2020002004) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0x10000) fsmount(0xffffffffffffffff, 0x0, 0x2) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup3(r4, r3, 0x0) dup3(r5, r1, 0x0) r6 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x208402, 0x2) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f00000001c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES64], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000000)={0x0, @motion_det}) [ 1164.315186][T28635] binder: 28632:28635 unknown command 268435456 [ 1164.322167][T28635] binder: 28632:28635 ioctl c0306201 20000540 returned -22 [ 1164.359891][T28639] binder: 28628:28639 unknown command 268435456 [ 1164.402871][T28639] binder: 28628:28639 ioctl c0306201 20000540 returned -22 [ 1164.431629][T28642] FAULT_INJECTION: forcing a failure. [ 1164.431629][T28642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:19:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x64, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1164.444956][T28642] CPU: 0 PID: 28642 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1164.453840][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.463899][T28642] Call Trace: [ 1164.467211][T28642] dump_stack+0x18f/0x20d [ 1164.471584][T28642] should_fail.cold+0x5/0x14 [ 1164.476191][T28642] __alloc_pages_nodemask+0x1a3/0x930 [ 1164.481570][T28642] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1164.488357][T28642] cache_grow_begin+0x8c/0xb20 [ 1164.493139][T28642] ? mark_lock+0xbc/0x1710 13:19:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x69, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1164.493978][T28649] binder: 28648:28649 unknown command 268435456 [ 1164.497567][T28642] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1164.497591][T28642] cache_alloc_refill+0x27b/0x340 [ 1164.497612][T28642] ? lockdep_hardirqs_off+0x66/0xa0 [ 1164.497645][T28642] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1164.504105][T28649] binder: 28648:28649 ioctl c0306201 20000540 returned -22 [ 1164.509307][T28642] __kmalloc+0x319/0x340 [ 1164.509334][T28642] tomoyo_realpath_from_path+0xc3/0x620 [ 1164.509352][T28642] ? tomoyo_profile+0x42/0x50 [ 1164.509371][T28642] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1164.509384][T28642] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1164.509402][T28642] ? tomoyo_execute_permission+0x470/0x470 [ 1164.509428][T28642] ? __lockdep_free_key_range+0x110/0x110 [ 1164.569802][T28642] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1164.575361][T28642] ? lock_is_held_type+0xb0/0xe0 [ 1164.580338][T28642] ? __fget_files+0x294/0x400 [ 1164.585033][T28642] security_file_ioctl+0x50/0xb0 [ 1164.590071][T28642] ksys_ioctl+0x50/0x180 [ 1164.594320][T28642] __x64_sys_ioctl+0x6f/0xb0 [ 1164.599265][T28642] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1164.604384][T28642] do_syscall_64+0x60/0xe0 [ 1164.608807][T28642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1164.614703][T28642] RIP: 0033:0x45cb29 [ 1164.618597][T28642] Code: Bad RIP value. [ 1164.622668][T28642] RSP: 002b:00007f45c9a1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.631113][T28642] RAX: ffffffffffffffda RBX: 00000000004efce0 RCX: 000000000045cb29 [ 1164.639121][T28642] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000003 [ 1164.647097][T28642] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1164.655071][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.663139][T28642] R13: 0000000000000599 R14: 00000000004c862b R15: 00007f45c9a206d4 13:19:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1164.702796][ T90] Bluetooth: Error in BCSP hdr checksum [ 1164.747367][T28653] binder: 28650:28653 unknown command 268435456 [ 1164.755702][T28653] binder: 28650:28653 ioctl c0306201 20000540 returned -22 13:19:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x6c, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1164.848213][T28655] binder: 28654:28655 unknown command 268435456 [ 1164.854884][ T2707] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1164.882184][T28655] binder: 28654:28655 ioctl c0306201 20000540 returned -22 13:19:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1164.928329][T28658] binder: 28656:28658 unknown command 268435456 [ 1164.940783][T28658] binder: 28656:28658 ioctl c0306201 20000540 returned -22 13:19:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x6f, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1165.040144][T28660] binder: 28659:28660 unknown command 268435456 [ 1165.054727][T28660] binder: 28659:28660 ioctl c0306201 20000540 returned -22 [ 1165.110812][T28663] binder: 28661:28663 unknown command 268435456 [ 1165.138246][T28663] binder: 28661:28663 ioctl c0306201 20000540 returned -22 [ 1165.146879][ T2707] usb 6-1: device descriptor read/64, error 18 [ 1165.538550][ T2707] usb 6-1: device descriptor read/64, error 18 [ 1165.808595][ T2707] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1166.078569][ T2707] usb 6-1: device descriptor read/64, error 18 [ 1166.448692][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 1166.454909][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1166.468659][ T2707] usb 6-1: device descriptor read/64, error 18 [ 1166.598693][ T2707] usb usb6-port1: attempt power cycle [ 1167.318693][ T2707] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1167.809772][ T2707] usb 6-1: device not accepting address 90, error -71 [ 1168.528726][ T3683] Bluetooth: hci0: command 0x1001 tx timeout [ 1168.534840][T10810] Bluetooth: hci0: sending frame failed (-49) [ 1170.608806][ T3683] Bluetooth: hci0: command 0x1009 tx timeout 13:19:51 executing program 3 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180)) 13:19:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0xea, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x0, 0x8000003, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000ec0)={&(0x7f0000000e40)="66410f702c9299f702ffefffff8f4878c16e00d2450f05c4c1556d8537f9793ac4012916028f499802499ec4231169f103c40111fe6000c4c2219bc6", 0x0, 0x0}, 0x8, &(0x7f0000000f00)) read$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 13:19:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x82, &(0x7f0000000200), 0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x3) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a9", 0x1}], 0x1}, 0x40) 13:19:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x70, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfc(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x95a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xff67) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x10000) fcntl$addseals(r0, 0x409, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, r0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0xf8}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1eb063546ccd56fce70cbf65d11bbcdfe2fb44e146fffc7373cfe058b91471b1f91fa3eedadf91434cf20332335cc5ef47a2f11a9ccfb3dfdf7a3bd909ac85b3"}}}, {{@ipv6={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000040)={r7, &(0x7f0000000000)=""/1}) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) [ 1174.601002][T28687] binder: 28679:28687 unknown command 268435456 [ 1174.611517][T28688] binder: 28681:28688 unknown command 268435456 [ 1174.630413][T28687] binder: 28679:28687 ioctl c0306201 20000540 returned -22 [ 1174.641822][T28688] binder: 28681:28688 ioctl c0306201 20000540 returned -22 [ 1174.656340][T28691] FAULT_INJECTION: forcing a failure. [ 1174.656340][T28691] name failslab, interval 1, probability 0, space 0, times 0 13:19:51 executing program 5: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRESHEX, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x4048080}, 0x44045) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) [ 1174.742580][T28691] CPU: 0 PID: 28691 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 1174.751296][T28691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.761790][T28691] Call Trace: [ 1174.765109][T28691] dump_stack+0x18f/0x20d [ 1174.769454][T28691] should_fail.cold+0x5/0x14 [ 1174.774066][T28691] should_failslab+0x5/0xf [ 1174.778505][T28691] kmem_cache_alloc_node+0x53/0x3c0 [ 1174.783738][T28691] __alloc_skb+0x71/0x550 [ 1174.788204][T28691] bcsp_recv+0x457/0x1460 [ 1174.792549][T28691] ? bcsp_dequeue+0x4e0/0x4e0 [ 1174.797248][T28691] ? lock_is_held_type+0xb0/0xe0 [ 1174.802215][T28691] ? lock_is_held_type+0xb0/0xe0 [ 1174.807167][T28691] hci_uart_tty_receive+0x270/0x740 [ 1174.812365][T28691] ? hci_uart_send_frame+0x630/0x630 [ 1174.817938][T28691] tty_ioctl+0xf2e/0x15f0 [ 1174.822279][T28691] ? tty_fasync+0x390/0x390 [ 1174.826794][T28691] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1174.832695][T28691] ? do_vfs_ioctl+0x27d/0x1090 [ 1174.837462][T28691] ? generic_block_fiemap+0x60/0x60 [ 1174.842670][T28691] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1174.848492][T28691] ? __fget_files+0x294/0x400 [ 1174.853221][T28691] ? tty_fasync+0x390/0x390 [ 1174.857860][T28691] ksys_ioctl+0x11a/0x180 [ 1174.862335][T28691] __x64_sys_ioctl+0x6f/0xb0 [ 1174.866959][T28691] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1174.872205][T28691] do_syscall_64+0x60/0xe0 [ 1174.876641][T28691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1174.882560][T28691] RIP: 0033:0x45cb29 [ 1174.886570][T28691] Code: Bad RIP value. [ 1174.890638][T28691] RSP: 002b:00007f45c9a1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.899169][T28691] RAX: ffffffffffffffda RBX: 00000000004efce0 RCX: 000000000045cb29 [ 1174.907158][T28691] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000003 [ 1174.915165][T28691] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.923851][T28691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1174.931825][T28691] R13: 0000000000000599 R14: 00000000004c862b R15: 00007f45c9a206d4 [ 1174.949772][ T202] general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] PREEMPT SMP KASAN [ 1174.961520][ T202] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1174.969926][ T202] CPU: 1 PID: 202 Comm: kworker/u4:4 Not tainted 5.8.0-rc3-syzkaller #0 [ 1174.978246][ T202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.988313][ T202] Workqueue: events_unbound flush_to_ldisc [ 1174.994137][ T202] RIP: 0010:skb_put+0x2b/0x180 [ 1174.998902][ T202] Code: 56 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 0d d8 46 fb 48 8d bd c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 34 01 00 00 48 8d bd b8 00 00 00 4c 8b ad c0 00 [ 1175.019221][ T202] RSP: 0018:ffffc90001817aa8 EFLAGS: 00010206 [ 1175.025291][ T202] RAX: dffffc0000000000 RBX: ffff888095447800 RCX: ffffffff859d2854 [ 1175.033292][ T202] RDX: 0000000000000018 RSI: ffffffff862cdf53 RDI: 00000000000000c0 [ 1175.041277][ T202] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880a265cc1f [ 1175.049267][ T202] R10: 00000000000000db R11: 0000000000000000 R12: 0000000000000001 [ 1175.057240][ T202] R13: ffff8880955a202a R14: ffff888095447910 R15: ffff88809544797c [ 1175.065235][ T202] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1175.074161][ T202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.080743][ T202] CR2: 00007f73f8000000 CR3: 0000000085f38000 CR4: 00000000001406e0 [ 1175.088717][ T202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.097209][ T202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1175.105203][ T202] Call Trace: [ 1175.108497][ T202] bcsp_recv+0xa76/0x1460 [ 1175.112829][ T202] ? bcsp_dequeue+0x4e0/0x4e0 [ 1175.117507][ T202] ? flush_to_ldisc+0x3e/0x380 [ 1175.122305][ T202] ? lock_is_held_type+0xcb/0xe0 [ 1175.127250][ T202] ? lock_is_held_type+0xb0/0xe0 [ 1175.132188][ T202] hci_uart_tty_receive+0x270/0x740 [ 1175.137383][ T202] ? hci_uart_send_frame+0x630/0x630 [ 1175.142690][ T202] tty_ldisc_receive_buf+0x14a/0x190 [ 1175.147998][ T202] tty_port_default_receive_buf+0x6e/0xa0 [ 1175.153741][ T202] flush_to_ldisc+0x20d/0x380 [ 1175.158566][ T202] process_one_work+0x94c/0x1670 [ 1175.163528][ T202] ? lock_release+0x8d0/0x8d0 [ 1175.168197][ T202] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1175.173652][ T202] ? rwlock_bug.part.0+0x90/0x90 [ 1175.178588][ T202] ? lockdep_hardirqs_off+0x66/0xa0 [ 1175.183791][ T202] worker_thread+0x64c/0x1120 [ 1175.190214][ T202] ? process_one_work+0x1670/0x1670 [ 1175.195464][ T202] kthread+0x3b5/0x4a0 13:19:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x73, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) 13:19:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1175.199555][ T202] ? __kthread_bind_mask+0xc0/0xc0 [ 1175.204739][ T202] ? __kthread_bind_mask+0xc0/0xc0 [ 1175.209931][ T202] ret_from_fork+0x1f/0x30 [ 1175.214356][ T202] Modules linked in: 13:19:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) rt_sigaction(0xc, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000f00)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0xfffffffffffffffd) [ 1175.245840][T28691] Bluetooth: Can't allocate mem for new packet [ 1175.251910][T28697] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.302109][T28697] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.332064][T28700] binder: 28698:28700 unknown command 268435456 13:19:52 executing program 5: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRESHEX, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x4048080}, 0x44045) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 13:19:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x75, 0xc, &(0x7f00000003c0)=[@free_buffer={0x40406301}, @reply_sg={0x40046304, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0}}], 0x300, 0x2, 0x0}) [ 1175.361323][T28700] binder: 28698:28700 ioctl c0306201 20000540 returned -22 [ 1175.376945][T28703] binder: 28701:28703 unknown command 268435456 [ 1175.388076][T28703] binder: 28701:28703 ioctl c0306201 20000540 returned -22 [ 1175.455560][ T202] ---[ end trace f66d5ced8e0465a4 ]--- [ 1175.465310][ T202] RIP: 0010:skb_put+0x2b/0x180 [ 1175.477077][T28710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.487638][ T202] Code: 56 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 0d d8 46 fb 48 8d bd c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 34 01 00 00 48 8d bd b8 00 00 00 4c 8b ad c0 00 [ 1175.560206][T28712] binder: 28711:28712 unknown command 268435456 [ 1175.587109][T28712] binder: 28711:28712 ioctl c0306201 20000540 returned -22 [ 1175.606586][ T202] RSP: 0018:ffffc90001817aa8 EFLAGS: 00010206 [ 1175.626226][ T202] RAX: dffffc0000000000 RBX: ffff888095447800 RCX: ffffffff859d2854 [ 1175.639634][ T202] RDX: 0000000000000018 RSI: ffffffff862cdf53 RDI: 00000000000000c0 [ 1175.648143][ T202] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880a265cc1f [ 1175.658034][ T202] R10: 00000000000000db R11: 0000000000000000 R12: 0000000000000001 [ 1175.666914][ T202] R13: ffff8880955a202a R14: ffff888095447910 R15: ffff88809544797c [ 1175.677300][ T202] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1175.687272][ T202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.694603][ T202] CR2: 000000000073d138 CR3: 0000000054c14000 CR4: 00000000001406f0 [ 1175.703300][ T202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.712056][ T202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1175.720736][ T202] Kernel panic - not syncing: Fatal exception [ 1175.728031][ T202] Kernel Offset: disabled [ 1175.732380][ T202] Rebooting in 86400 seconds..