ENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1529.699007][ T9172] usb 5-1: USB disconnect, device number 124 07:55:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1530.018857][ T9172] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1530.060015][T32280] UDC core: couldn't find an available UDC or it's busy: -16 [ 1530.067872][T32280] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1530.075855][ T9426] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1530.088753][ T8243] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1530.258765][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1530.328642][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1530.358734][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1530.378977][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1530.387382][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1530.396597][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1530.405857][ T9172] usb 6-1: config 250 has no interface number 0 [ 1530.412322][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1530.424097][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1530.434714][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1530.445247][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1530.459307][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1530.498799][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1530.507410][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1530.516438][ T8243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1530.518722][ T9426] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1530.525717][ T8243] usb 3-1: config 250 has no interface number 0 [ 1530.534163][ T9426] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1530.540382][ T8243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1530.549212][ T9426] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1530.549235][ T9426] usb 5-1: config 250 has no interface number 0 [ 1530.560780][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1530.569976][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1530.576282][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1530.586782][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1530.586812][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1530.586836][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1530.586866][ T9426] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1530.650981][ T8243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1530.664508][ T8243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1530.698853][ T9426] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1530.708225][ T9426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1530.709003][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1530.716324][ T9426] usb 5-1: SerialNumber: syz [ 1530.725311][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1530.737843][ T9172] usb 6-1: SerialNumber: syz [ 1530.759288][T32268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1530.771345][T32268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1530.779996][T32215] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1530.780230][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1530.793055][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1530.802037][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1530.809912][ T9426] hub 5-1:250.228: bad descriptor, ignoring hub [ 1530.811172][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1530.817316][ T9426] hub: probe of 5-1:250.228 failed with error -5 [ 1530.825388][ T8243] usb 3-1: SerialNumber: syz [ 1530.869036][T32271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1530.876176][T32271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1530.889566][ T8243] hub 3-1:250.228: bad descriptor, ignoring hub [ 1530.895909][ T8243] hub: probe of 3-1:250.228 failed with error -5 [ 1531.060568][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1531.120129][ T9172] usb 6-1: USB disconnect, device number 13 07:55:22 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) [ 1531.228256][T20208] usb 2-1: USB disconnect, device number 38 [ 1531.276221][ T8243] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 58 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1531.289693][ T9172] usblp0: removed [ 1531.351118][ T8243] usb 3-1: USB disconnect, device number 58 [ 1531.378660][ T8243] usblp1: removed [ 1531.648655][ T9172] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1531.738665][ T8243] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1531.749159][T20208] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1531.888787][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1531.978690][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1532.009849][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1532.018197][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1532.018652][T20208] usb 2-1: Using ep0 maxpacket: 8 [ 1532.027229][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1532.041498][ T9172] usb 6-1: config 250 has no interface number 0 [ 1532.047766][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1532.059341][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) [ 1532.069872][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1532.080354][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1532.093873][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1532.160367][ T9426] usb 5-1: USB disconnect, device number 125 [ 1532.169483][T20208] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1532.177941][T20208] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1532.178978][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1532.186942][T20208] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.195149][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1532.205563][T20208] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1532.214399][ T8243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1532.233043][ T8243] usb 3-1: config 250 has no interface number 0 [ 1532.239396][ T8243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1532.251045][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1532.261522][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1532.271999][ T8243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1532.285544][ T8243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1532.292640][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1532.301736][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1532.309784][ T9172] usb 6-1: SerialNumber: syz [ 1532.319456][T20208] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1532.328614][T20208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1532.336610][T20208] usb 2-1: SerialNumber: syz [ 1532.343134][T32268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1532.351169][T32268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1532.369724][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1532.376260][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1532.388341][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1532.397654][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1532.405690][ T8243] usb 3-1: SerialNumber: syz [ 1532.430142][T32271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1532.437131][T32271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1532.449824][ T8243] hub 3-1:250.228: bad descriptor, ignoring hub [ 1532.456129][ T8243] hub: probe of 3-1:250.228 failed with error -5 [ 1532.589725][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1532.629288][ T9172] usb 6-1: USB disconnect, device number 14 [ 1532.636975][ T9172] usblp0: removed [ 1532.680205][ T8243] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1532.719407][ T8243] usb 3-1: USB disconnect, device number 59 [ 1532.727053][ T8243] usblp0: removed 07:55:24 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:55:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:24 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 07:55:24 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1533.171988][T32411] UDC core: couldn't find an available UDC or it's busy: -16 [ 1533.179609][T32411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:55:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1533.518813][ T9172] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1533.526614][ T8243] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1533.568997][ T9426] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1533.758666][ T9172] usb 5-1: Using ep0 maxpacket: 8 [ 1533.768993][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1533.818655][ T9426] usb 3-1: Using ep0 maxpacket: 8 [ 1533.878753][ T9172] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1533.887303][ T9172] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1533.896282][ T9172] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1533.905673][ T9172] usb 5-1: config 250 has no interface number 0 [ 1533.911970][ T9172] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1533.923627][ T9172] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1533.934155][ T9172] usb 5-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1533.945522][ T9172] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1533.949285][ T9426] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1533.959153][ T9172] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1533.959266][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1533.967990][ T9426] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1533.975076][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1533.975105][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1533.975128][ T8243] usb 6-1: config 250 has no interface number 0 [ 1533.975158][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1533.975185][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1533.975213][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1533.975240][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1533.975267][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1533.983690][ T9426] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1534.078833][ T9172] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1534.079447][ T9426] usb 3-1: config 250 has no interface number 0 [ 1534.079483][ T9426] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1534.088526][ T9172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1534.094769][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1534.094799][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1534.094825][ T9426] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1534.106337][ T9172] usb 5-1: SerialNumber: syz [ 1534.114319][ T9426] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1534.161291][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1534.170423][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1534.178474][ T8243] usb 6-1: SerialNumber: syz [ 1534.199112][T32420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1534.199223][T32421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1534.210036][T32420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1534.221285][ T9426] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1534.230405][ T9426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1534.238390][ T9426] usb 3-1: SerialNumber: syz [ 1534.242256][ T9172] hub 5-1:250.228: bad descriptor, ignoring hub [ 1534.249670][ T9172] hub: probe of 5-1:250.228 failed with error -5 [ 1534.260536][T32425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1534.267964][T32425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1534.269327][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1534.281236][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1534.320276][ T9426] hub 3-1:250.228: bad descriptor, ignoring hub [ 1534.326650][ T9426] hub: probe of 3-1:250.228 failed with error -5 07:55:25 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1534.354352][T20208] usb 2-1: USB disconnect, device number 39 07:55:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1534.480202][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1534.519441][ T8243] usb 6-1: USB disconnect, device number 15 [ 1534.571251][ T9426] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1534.571799][ T8243] usblp0: removed [ 1534.609907][ T9426] usb 3-1: USB disconnect, device number 60 [ 1534.631118][ T9426] usblp1: removed [ 1534.868782][T20208] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1535.015585][T32506] UDC core: couldn't find an available UDC or it's busy: -16 [ 1535.023143][T32506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1535.058779][ T8243] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1535.118701][T20208] usb 2-1: Using ep0 maxpacket: 8 [ 1535.148700][ T9426] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1535.239562][T20208] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1535.248228][T20208] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1535.257555][T20208] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.268011][T20208] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1535.318651][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1535.349464][T20208] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1535.358538][T20208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1535.366818][T20208] usb 2-1: SerialNumber: syz [ 1535.398702][ T9426] usb 3-1: Using ep0 maxpacket: 8 [ 1535.458830][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1535.467233][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1535.476198][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1535.485455][ T8243] usb 6-1: config 250 has no interface number 0 [ 1535.491745][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1535.503354][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1535.513900][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1535.524508][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1535.525441][ T9426] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1535.538266][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1535.546859][ T9426] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1535.562955][ T9426] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1535.572363][ T9426] usb 3-1: config 250 has no interface number 0 [ 1535.578658][ T9426] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1535.590169][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1535.601115][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1535.611929][ T9426] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1535.625660][ T9426] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1535.648959][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1535.658296][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1535.666494][ T8243] usb 6-1: SerialNumber: syz [ 1535.689330][T32420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1535.696191][T32420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1535.708802][ T9426] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1535.709583][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1535.718211][ T9426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1535.724435][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1535.739234][ T9426] usb 3-1: SerialNumber: syz [ 1535.768092][T32425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1535.778500][T32425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1535.799641][ T9426] hub 3-1:250.228: bad descriptor, ignoring hub [ 1535.805915][ T9426] hub: probe of 3-1:250.228 failed with error -5 [ 1535.960063][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1535.999635][ T8243] usb 6-1: USB disconnect, device number 16 [ 1536.009133][ T8243] usblp0: removed [ 1536.013872][ T9426] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1536.089316][ T9426] usb 3-1: USB disconnect, device number 61 [ 1536.096755][ T9426] usblp0: removed [ 1536.329019][T20208] usb 5-1: USB disconnect, device number 126 07:55:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:55:28 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:28 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:28 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:55:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:55:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1536.849218][ T8243] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1536.857407][ T9172] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1536.950063][T31752] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1537.128703][ T8243] usb 5-1: Using ep0 maxpacket: 8 [ 1537.133968][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1537.188678][T31752] usb 3-1: Using ep0 maxpacket: 8 [ 1537.279099][ T8243] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1537.287484][ T8243] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1537.296645][ T8243] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1537.305892][ T8243] usb 5-1: config 250 has no interface number 0 [ 1537.312214][ T8243] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1537.323956][ T8243] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1537.334433][ T8243] usb 5-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1537.345445][ T8243] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1537.358997][ T8243] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1537.367025][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1537.375411][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1537.384634][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1537.393908][ T9172] usb 6-1: config 250 has no interface number 0 [ 1537.400355][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1537.409070][T20209] usb 2-1: USB disconnect, device number 40 [ 1537.411861][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 07:55:29 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1537.428169][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1537.438635][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1537.452199][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1537.500683][T31752] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1537.509305][T31752] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1537.518157][T31752] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1537.527519][T31752] usb 3-1: config 250 has no interface number 0 [ 1537.533948][T31752] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1537.545500][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1537.556034][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1537.566640][T31752] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1537.580153][T31752] usb 3-1: config 250 interface 228 has no altsetting 0 07:55:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1537.600597][ T8243] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1537.609773][ T8243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1537.617928][ T8243] usb 5-1: SerialNumber: syz [ 1537.689329][T32565] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1537.689916][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1537.705446][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1537.713660][ T9172] usb 6-1: SerialNumber: syz [ 1537.730201][ T8243] hub 5-1:250.228: bad descriptor, ignoring hub 07:55:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) [ 1537.736550][ T8243] hub: probe of 5-1:250.228 failed with error -5 [ 1537.809073][T32564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1537.817307][T32564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1537.830342][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1537.836603][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1537.847018][T31752] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1537.856108][T31752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1537.864119][T31752] usb 3-1: SerialNumber: syz [ 1537.899247][T32573] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1537.906305][T32573] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1537.908704][T20209] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1537.929948][T31752] hub 3-1:250.228: bad descriptor, ignoring hub [ 1537.936224][T31752] hub: probe of 3-1:250.228 failed with error -5 [ 1538.060191][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1538.140067][ T9172] usb 6-1: USB disconnect, device number 17 [ 1538.153675][ T9172] usblp0: removed [ 1538.168835][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1538.169628][T31752] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1538.229222][T31752] usb 3-1: USB disconnect, device number 62 [ 1538.237063][T31752] usblp0: removed [ 1538.289195][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1538.297858][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1538.306988][T20209] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.317263][T20209] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1538.398981][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1538.408072][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1538.416210][T20209] usb 2-1: SerialNumber: syz [ 1538.478085][T32659] UDC core: couldn't find an available UDC or it's busy: -16 [ 1538.485801][T32659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1538.618688][ T9172] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1538.768733][T31752] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1538.868711][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1538.989086][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1538.997667][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1539.006667][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1539.015982][ T9172] usb 6-1: config 250 has no interface number 0 [ 1539.022398][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1539.033929][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1539.044404][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1539.055085][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1539.068700][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1539.075986][T31752] usb 3-1: Using ep0 maxpacket: 8 [ 1539.169036][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1539.178477][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1539.186800][ T9172] usb 6-1: SerialNumber: syz [ 1539.209063][T31752] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1539.209248][T32564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.217500][T31752] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1539.227120][T32564] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.233365][T31752] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1539.249473][T31752] usb 3-1: config 250 has no interface number 0 [ 1539.255927][T31752] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1539.267423][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1539.278420][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1539.288910][T31752] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1539.302689][T31752] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1539.311434][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1539.317691][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1539.418812][T31752] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1539.428036][T31752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1539.436163][T31752] usb 3-1: SerialNumber: syz [ 1539.475361][T32573] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.485073][T32573] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.499756][T31752] hub 3-1:250.228: bad descriptor, ignoring hub [ 1539.506416][T31752] hub: probe of 3-1:250.228 failed with error -5 [ 1539.529911][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:55:31 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1539.609261][ T9172] usb 6-1: USB disconnect, device number 18 [ 1539.617338][ T9172] usblp0: removed [ 1539.692787][T31752] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 63 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1539.759849][T31752] usb 3-1: USB disconnect, device number 63 [ 1539.785946][T31752] usblp0: removed [ 1539.868959][ T9426] usb 5-1: reset high-speed USB device number 127 using dummy_hcd 07:55:31 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 07:55:31 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:55:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1540.109077][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1540.189120][ T9426] usb 5-1: device firmware changed [ 1540.195379][ T9426] usb 5-1: USB disconnect, device number 127 [ 1540.369234][T20209] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1540.398698][T20208] usb 6-1: new high-speed USB device number 19 using dummy_hcd 07:55:32 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 07:55:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1540.498731][ T9425] usb 2-1: USB disconnect, device number 41 07:55:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1540.558992][ T9426] usb 5-1: new high-speed USB device number 2 using dummy_hcd 07:55:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 1540.609117][T20209] usb 3-1: Using ep0 maxpacket: 8 [ 1540.638783][T20208] usb 6-1: Using ep0 maxpacket: 8 07:55:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 1540.729454][T20209] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1540.738359][T20209] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1540.747377][T20209] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1540.756728][T20209] usb 3-1: config 250 has no interface number 0 [ 1540.763213][T20209] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1540.774744][T20209] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1540.785264][T20209] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1540.796070][T20209] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1540.809734][T20209] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1540.817222][T20208] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1540.825981][T20208] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1540.834905][T20208] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1540.844151][T20208] usb 6-1: config 250 has no interface number 0 [ 1540.850497][T20208] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1540.862036][T20208] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1540.872861][T20208] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1540.883424][T20208] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1540.896954][T20208] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1540.938861][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1541.000017][T20209] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1541.009308][T20209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1541.017292][T20209] usb 3-1: SerialNumber: syz [ 1541.022967][T20208] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1541.032158][T20208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1541.040236][T20208] usb 6-1: SerialNumber: syz [ 1541.069345][T32719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1541.070406][T32714] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1541.076285][T32719] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1541.083726][ T9426] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1541.098146][ T9426] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1541.107212][ T9426] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1541.116536][ T9426] usb 5-1: config 250 has no interface number 0 [ 1541.122889][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1541.123876][T32714] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1541.134437][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1541.152189][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1541.162517][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1541.172843][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1541.186379][ T9426] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1541.193523][ T9425] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1541.202858][T20208] hub 6-1:250.228: bad descriptor, ignoring hub [ 1541.209407][T20208] hub: probe of 6-1:250.228 failed with error -5 [ 1541.240245][T20209] hub 3-1:250.228: bad descriptor, ignoring hub [ 1541.246824][T20209] hub: probe of 3-1:250.228 failed with error -5 [ 1541.268946][ T9426] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1541.278064][ T9426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1541.286173][ T9426] usb 5-1: SerialNumber: syz [ 1541.309835][T32691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1541.329704][ T9426] hub 5-1:250.228: bad descriptor, ignoring hub [ 1541.335962][ T9426] hub: probe of 5-1:250.228 failed with error -5 [ 1541.412225][T20208] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1541.450711][T20209] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1541.474309][ T9425] usb 2-1: Using ep0 maxpacket: 8 [ 1541.559626][ T9426] usblp 5-1:250.228: usblp2: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1541.598902][ T9425] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1541.607610][ T9425] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1541.616749][ T9425] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.627207][ T9425] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1541.709210][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1541.718554][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1541.726639][ T9425] usb 2-1: SerialNumber: syz [ 1541.838907][ T9172] usb 3-1: USB disconnect, device number 64 [ 1541.928989][ T9426] usb 5-1: USB disconnect, device number 2 [ 1542.159358][T32719] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 1542.398680][T32719] usb 6-1: Using ep0 maxpacket: 8 [ 1542.539166][ T324] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1542.546470][ T324] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1542.760841][ T324] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1542.767888][ T324] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1542.799635][ T9172] usblp1: removed [ 1542.803476][ T9426] usblp2: removed [ 1542.818631][ C0] usblp0: nonzero read bulk status received: -71 [ 1543.008929][T30559] usb 6-1: USB disconnect, device number 19 [ 1543.017151][T30559] usblp0: removed 07:55:34 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:35 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:55:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 07:55:35 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1543.458723][ T9426] usb 5-1: new high-speed USB device number 3 using dummy_hcd 07:55:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 1543.553723][ T386] nbd: must specify a size in bytes for the device [ 1543.615997][ T391] nbd: must specify a size in bytes for the device [ 1543.699497][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1543.818974][T30559] usb 2-1: USB disconnect, device number 42 [ 1543.826614][ T9426] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1543.835282][ T9426] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1543.844346][ T9426] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1543.853590][ T9426] usb 5-1: config 250 has no interface number 0 07:55:35 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:55:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 07:55:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}}, 0x0) [ 1543.859908][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1543.871436][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1543.882024][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1543.892426][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1543.902830][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1543.916541][ T9426] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1543.925171][ T9425] usb 6-1: new high-speed USB device number 20 using dummy_hcd 07:55:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1543.968736][ T9172] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1543.971135][ T412] nbd: must specify at least one socket 07:55:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}}, 0x0) 07:55:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 1544.097105][ T419] nbd: must specify at least one socket [ 1544.168739][ T9425] usb 6-1: Using ep0 maxpacket: 8 [ 1544.199019][ T9426] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1544.208195][ T9426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1544.216628][ T9426] usb 5-1: SerialNumber: syz [ 1544.229046][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1544.249128][ T375] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.270626][ T9426] hub 5-1:250.228: bad descriptor, ignoring hub [ 1544.277133][ T9426] hub: probe of 5-1:250.228 failed with error -5 [ 1544.319275][ T9425] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1544.327721][ T9425] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1544.336701][ T9425] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1544.346070][ T9425] usb 6-1: config 250 has no interface number 0 [ 1544.348966][T30559] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1544.352361][ T9425] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1544.369141][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1544.371524][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1544.379835][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1544.379859][ T9172] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1544.390287][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1544.390317][ T9425] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1544.399148][ T9172] usb 3-1: config 250 has no interface number 0 [ 1544.399182][ T9172] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1544.399210][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1544.408373][ T9425] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1544.418902][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1544.418932][ T9172] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1544.418963][ T9172] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1544.503358][ T9426] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1544.549153][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1544.558355][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1544.566390][ T9172] usb 3-1: SerialNumber: syz [ 1544.579445][ T9425] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1544.588908][ T9425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1544.596890][ T9425] usb 6-1: SerialNumber: syz [ 1544.602160][ T384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.615147][ T384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.629155][ T388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.629564][ T9172] hub 3-1:250.228: bad descriptor, ignoring hub [ 1544.636111][ T388] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.642268][ T9172] hub: probe of 3-1:250.228 failed with error -5 [ 1544.669597][ T9425] hub 6-1:250.228: bad descriptor, ignoring hub [ 1544.675951][ T9425] hub: probe of 6-1:250.228 failed with error -5 [ 1544.768841][T30559] usb 2-1: Using ep0 maxpacket: 8 [ 1544.909079][T30559] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1544.917797][T30559] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1544.926760][T30559] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.937369][T30559] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1545.029195][T30559] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1545.039180][T30559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1545.047165][T30559] usb 2-1: SerialNumber: syz [ 1545.139807][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.146340][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.149892][ T375] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 1545.408864][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 1545.549730][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1545.770888][ T443] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1545.809598][ T9172] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 65 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1545.810399][ T9425] usblp 6-1:250.228: usblp2: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1545.915542][ T466] UDC core: couldn't find an available UDC or it's busy: -16 [ 1545.923605][ T466] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1545.999389][ T9426] usb 5-1: USB disconnect, device number 3 [ 1546.007061][ T9426] usblp0: removed [ 1546.069170][ T9425] usb 6-1: reset high-speed USB device number 20 using dummy_hcd [ 1546.086972][ T9172] usb 3-1: reset high-speed USB device number 65 using dummy_hcd [ 1546.308668][ T9425] usb 6-1: Using ep0 maxpacket: 8 [ 1546.358770][ T9172] usb 3-1: Using ep0 maxpacket: 8 07:55:38 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1546.449004][ T455] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1546.456061][ T455] raw-gadget gadget: fail, usb_ep_enable returned -22 07:55:38 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}}, 0x0) 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 07:55:38 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x0, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1546.589775][ T9425] usb 6-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1546.598008][ T9172] usb 3-1: can't restore configuration #250 (error=-71) [ 1546.598566][ T9425] usb 6-1: USB disconnect, device number 20 [ 1546.605476][ T9172] usb 3-1: USB disconnect, device number 65 [ 1546.619401][ T9172] usblp1: removed [ 1546.645976][ T499] nbd: must specify at least one socket [ 1546.679269][ T9425] usblp2: removed 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1546.808805][T30559] usb 5-1: new high-speed USB device number 4 using dummy_hcd 07:55:38 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:55:38 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1546.968858][T31752] usb 2-1: USB disconnect, device number 43 [ 1547.069283][T30559] usb 5-1: Using ep0 maxpacket: 8 [ 1547.088754][ T9425] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1547.108860][ T9172] usb 3-1: new high-speed USB device number 66 using dummy_hcd 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1547.210731][T30559] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1547.219318][T30559] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1547.228173][T30559] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1547.237433][T30559] usb 5-1: config 250 has no interface number 0 [ 1547.243902][T30559] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 07:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1547.255400][T30559] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1547.265903][T30559] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1547.276197][T30559] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1547.286669][T30559] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1547.300190][T30559] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1547.338804][ T9425] usb 6-1: Using ep0 maxpacket: 8 [ 1547.449987][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1547.459072][ T9425] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1547.459907][ T8243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1547.467545][ T9425] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1547.484017][ T9425] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1547.493270][ T9425] usb 6-1: config 250 has no interface number 0 [ 1547.499583][ T9425] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1547.499603][T30559] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1547.511158][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1547.511189][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1547.511214][ T9425] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1547.511245][ T9425] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1547.561944][T30559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1547.570122][T30559] usb 5-1: SerialNumber: syz [ 1547.579967][T31752] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1547.599278][ T490] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1547.609565][ T9425] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1547.618657][ T9425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1547.626810][ T9425] usb 6-1: SerialNumber: syz [ 1547.628966][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1547.639861][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1547.648793][ T9172] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1547.658020][ T9172] usb 3-1: config 250 has no interface number 0 [ 1547.664454][ T9172] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1547.675952][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1547.679099][ T514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1547.686507][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1547.695484][ T514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1547.703736][ T9172] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1547.723944][ T9172] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1547.729530][ T9425] hub 6-1:250.228: bad descriptor, ignoring hub [ 1547.737121][ T9425] hub: probe of 6-1:250.228 failed with error -5 [ 1547.737219][T30559] hub 5-1:250.228: bad descriptor, ignoring hub [ 1547.749798][T30559] hub: probe of 5-1:250.228 failed with error -5 [ 1547.849503][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1547.858754][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1547.866741][ T9172] usb 3-1: SerialNumber: syz [ 1547.872031][ T8243] usb 4-1: Using ep0 maxpacket: 8 [ 1547.878860][T30559] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1547.920689][ T511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1547.928339][ T511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1547.939795][ T9172] hub 3-1:250.228: bad descriptor, ignoring hub [ 1547.946145][ T9172] hub: probe of 3-1:250.228 failed with error -5 [ 1547.955065][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1547.980597][ T9425] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1548.000315][ T8243] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1548.008702][ T8243] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1548.017733][ T8243] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1548.026987][ T8243] usb 4-1: config 250 has no interface number 0 [ 1548.033301][ T8243] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1548.044899][ T8243] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1548.055554][ T8243] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1548.066028][ T8243] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1548.079556][ T8243] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1548.159395][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1548.168035][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1548.177317][T31752] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.187648][T31752] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1548.197597][ T8243] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1548.206888][ T8243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1548.215093][ T8243] usb 4-1: SerialNumber: syz [ 1548.240303][ T536] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1548.248449][ T536] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1548.259635][ T8243] hub 4-1:250.228: bad descriptor, ignoring hub [ 1548.265985][ T8243] hub: probe of 4-1:250.228 failed with error -5 [ 1548.272881][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1548.282010][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1548.290064][T31752] usb 2-1: SerialNumber: syz [ 1548.359052][ T9426] usb 6-1: USB disconnect, device number 21 [ 1548.489123][ T490] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 1548.738816][ T490] usb 5-1: Using ep0 maxpacket: 8 [ 1548.909872][ T576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1549.133350][ T576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1549.145843][ T607] UDC core: couldn't find an available UDC or it's busy: -16 [ 1549.153378][ T607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1549.189627][ T9172] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 66 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1549.389087][T20208] usb 5-1: USB disconnect, device number 4 [ 1549.448955][ T9172] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 1549.690951][ T9172] usb 3-1: Using ep0 maxpacket: 8 07:55:41 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:41 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 1549.999310][ T9426] usblp1: removed [ 1550.005873][ T8243] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1550.047828][T20208] usblp0: removed 07:55:41 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:55:41 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1550.228991][ T9172] usb 3-1: device descriptor read/all, error -71 [ 1550.369611][T20209] usb 2-1: USB disconnect, device number 44 [ 1550.398710][ T9426] usb 6-1: new high-speed USB device number 22 using dummy_hcd 07:55:42 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 1550.429522][T20208] usb 5-1: new high-speed USB device number 5 using dummy_hcd 07:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 1550.549134][ T8243] usb 4-1: reset high-speed USB device number 4 using dummy_hcd 07:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x0) [ 1550.598968][ T9172] usb 3-1: reset high-speed USB device number 66 using dummy_hcd 07:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x0) [ 1550.678680][ T9426] usb 6-1: Using ep0 maxpacket: 8 [ 1550.684293][T20208] usb 5-1: Using ep0 maxpacket: 8 07:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x0) [ 1550.808762][ T8243] usb 4-1: Using ep0 maxpacket: 8 [ 1550.824276][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1550.832841][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1550.838872][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1550.841821][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1550.855995][T20208] usb 5-1: config 250 has no interface number 0 [ 1550.862293][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1550.874141][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1550.884712][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1550.895186][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1550.908699][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1550.915729][ T9426] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1550.924129][ T9426] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1550.933030][ T9426] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1550.942391][ T9426] usb 6-1: config 250 has no interface number 0 [ 1550.948692][ T9426] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1550.951100][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1550.960221][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1550.970559][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1550.977342][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1550.989005][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1550.994464][ T9426] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1551.014685][ T9426] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1551.018084][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.079016][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1551.088291][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1551.096319][T20208] usb 5-1: SerialNumber: syz [ 1551.101452][T20209] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1551.117850][ T9426] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1551.127610][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1551.135638][ T9426] usb 6-1: SerialNumber: syz [ 1551.159062][ T624] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.159440][ T628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.170130][ T624] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.179236][ T628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.189887][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1551.196311][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1551.209384][ T9426] hub 6-1:250.228: bad descriptor, ignoring hub [ 1551.215732][ T9426] hub: probe of 6-1:250.228 failed with error -5 [ 1551.239282][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.247005][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.258693][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.265754][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1551.388786][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1551.409968][T20208] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1551.429550][ T9426] usblp 6-1:250.228: usblp3: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1551.459543][T20208] usb 5-1: USB disconnect, device number 5 [ 1551.466181][T20208] usblp0: removed [ 1551.539142][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1551.548078][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1551.557500][T20209] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.567978][T20209] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1551.608933][ T9172] usb 3-1: USB disconnect, device number 66 [ 1551.621052][ T8243] usb 4-1: USB disconnect, device number 4 [ 1551.629958][ T9172] usblp2: removed [ 1551.639006][ T8243] usblp1: removed [ 1551.650260][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1551.659605][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1551.667694][T20209] usb 2-1: SerialNumber: syz [ 1551.749195][T22861] usb 6-1: USB disconnect, device number 22 [ 1551.757070][T22861] usblp3: removed [ 1551.958660][ T8243] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1551.988677][ T9426] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1552.029286][T20208] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1552.098737][T22861] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1552.198670][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1552.248681][ T9426] usb 4-1: Using ep0 maxpacket: 8 [ 1552.288726][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1552.318809][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1552.327262][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1552.336548][ T8243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1552.345853][ T8243] usb 3-1: config 250 has no interface number 0 [ 1552.352178][ T8243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1552.363783][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1552.368651][T22861] usb 6-1: Using ep0 maxpacket: 8 [ 1552.374234][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1552.374263][ T8243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1552.403423][ T8243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1552.409591][ T9426] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1552.419314][ T9426] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1552.428172][ T9426] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1552.437521][ T9426] usb 4-1: config 250 has no interface number 0 [ 1552.443913][ T9426] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1552.455408][ T9426] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1552.465877][ T9426] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1552.476528][ T9426] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1552.479385][ T751] UDC core: couldn't find an available UDC or it's busy: -16 [ 1552.490295][ T9426] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1552.490563][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1552.497729][ T751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1552.504852][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1552.518932][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1552.521066][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1552.529828][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1552.538928][T20208] usb 5-1: config 250 has no interface number 0 [ 1552.538959][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1552.548124][ T8243] usb 3-1: SerialNumber: syz [ 1552.556096][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1552.589068][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1552.599550][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1552.601227][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.613036][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1552.622121][ T657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.640184][ T8243] hub 3-1:250.228: bad descriptor, ignoring hub [ 1552.646621][ T8243] hub: probe of 3-1:250.228 failed with error -5 [ 1552.681878][ T9426] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1552.691194][ T9426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1552.699421][ T9426] usb 4-1: SerialNumber: syz [ 1552.704800][T22861] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1552.713564][T22861] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1552.722668][T22861] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1552.731914][T22861] usb 6-1: config 250 has no interface number 0 [ 1552.738167][T22861] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1552.749684][T22861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1552.760167][T22861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1552.770646][T22861] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1552.784519][T22861] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1552.791886][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1552.801158][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1552.809195][T20208] usb 5-1: SerialNumber: syz [ 1552.830085][ T628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.837195][ T628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.846578][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.863418][ T654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1552.872769][ T8243] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 67 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1552.919984][ T9426] hub 4-1:250.228: bad descriptor, ignoring hub [ 1552.923773][ T8243] usb 3-1: USB disconnect, device number 67 [ 1552.926450][ T9426] hub: probe of 4-1:250.228 failed with error -5 07:55:44 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) [ 1552.965513][ T8243] usblp0: removed [ 1553.009287][T22861] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1553.018541][T22861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1553.027119][T20208] usb 5-1: can't set config #250, error -71 [ 1553.036156][T20208] usb 5-1: USB disconnect, device number 6 07:55:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) [ 1553.088267][ T789] nbd: must specify a size in bytes for the device [ 1553.109165][T22861] usb 6-1: can't set config #250, error -71 [ 1553.116591][T22861] usb 6-1: USB disconnect, device number 23 [ 1553.163691][ T9426] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1553.189792][ T800] nbd: must specify a size in bytes for the device [ 1553.229367][ T9426] usb 4-1: USB disconnect, device number 5 [ 1553.261618][ T9426] usblp0: removed 07:55:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) [ 1553.446053][ T814] nbd: must specify a size in bytes for the device [ 1553.480807][T20208] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1553.518877][T22861] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1553.589167][ T9426] usb 2-1: USB disconnect, device number 45 07:55:45 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:45 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:55:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x0) 07:55:45 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1553.734005][ T827] nbd: must specify at least one socket [ 1553.740448][T20208] usb 5-1: Using ep0 maxpacket: 8 07:55:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x0) [ 1553.778831][T22861] usb 6-1: Using ep0 maxpacket: 8 07:55:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x0) [ 1553.815169][ T836] nbd: must specify at least one socket [ 1553.879132][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1553.887604][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1553.896750][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1553.906009][T20208] usb 5-1: config 250 has no interface number 0 [ 1553.912320][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1553.924034][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1553.935108][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1553.945622][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1553.959165][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1553.963962][ T845] nbd: must specify at least one socket [ 1553.979379][T22861] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1553.987861][T22861] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1553.996847][T22861] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1554.006266][T22861] usb 6-1: config 250 has no interface number 0 [ 1554.012620][T22861] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 07:55:45 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1554.024407][T22861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.035051][T22861] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1554.045894][T22861] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1554.059624][T22861] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1554.139304][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1554.148532][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1554.156572][T20208] usb 5-1: SerialNumber: syz [ 1554.161738][T22861] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1554.170808][T22861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1554.178844][T22861] usb 6-1: SerialNumber: syz [ 1554.183527][ T9425] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1554.191300][T20209] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1554.219347][ T781] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1554.226259][ T781] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1554.233488][ T785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1554.244004][ T785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1554.269859][T22861] hub 6-1:250.228: bad descriptor, ignoring hub [ 1554.276321][T22861] hub: probe of 6-1:250.228 failed with error -5 [ 1554.284110][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1554.290433][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1554.297422][ T9426] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1554.398699][ T9172] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1554.458687][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1554.463837][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1554.490424][T22861] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1554.504115][T20208] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1554.560716][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1554.567641][T20208] usb 5-1: USB disconnect, device number 7 [ 1554.579203][T20208] usblp1: removed [ 1554.619528][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1554.628054][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1554.636935][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1554.639215][ T9172] usb 1-1: Using ep0 maxpacket: 8 [ 1554.646244][T20209] usb 4-1: config 250 has no interface number 0 [ 1554.657455][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1554.668991][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.679474][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1554.689986][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1554.703531][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1554.710657][ T9425] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1554.719061][ T9425] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1554.727916][ T9425] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1554.737157][ T9425] usb 3-1: config 250 has no interface number 0 [ 1554.743481][ T9425] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1554.754991][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.765458][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1554.770115][ T9172] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1554.776222][ T9425] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1554.784618][ T9172] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1554.798163][ T9425] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1554.814221][ T9172] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1554.823519][ T9172] usb 1-1: config 250 has no interface number 0 [ 1554.829847][ T9172] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1554.841580][ T9172] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.852157][ T9172] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1554.862484][ T9172] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1554.872991][ T9172] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1554.880970][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1554.886613][ T9172] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1554.895983][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1554.910936][T20209] usb 4-1: SerialNumber: syz [ 1554.915944][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1554.924341][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1554.933260][ T9426] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1554.942523][ T9426] usb 2-1: config 250 has no interface number 0 [ 1554.948830][ T9426] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1554.960356][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1554.971000][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1554.979388][ T9172] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1554.981481][ T9426] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1554.990609][ T9172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1555.004278][ T9426] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1555.012312][ T9172] usb 1-1: SerialNumber: syz [ 1555.019323][ T9425] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1555.032920][ T9425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1555.040980][ T9425] usb 3-1: SerialNumber: syz [ 1555.059358][ T849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.070450][ T833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.077825][ T833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.079629][ T9172] hub 1-1:250.228: bad descriptor, ignoring hub [ 1555.086631][ T829] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.090875][ T9172] hub: probe of 1-1:250.228 failed with error -5 [ 1555.120412][ T829] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.139903][ T9425] hub 3-1:250.228: bad descriptor, ignoring hub [ 1555.146216][ T9425] hub: probe of 3-1:250.228 failed with error -5 [ 1555.169818][T20209] hub 4-1:250.228: bad descriptor, ignoring hub [ 1555.176487][T20209] hub: probe of 4-1:250.228 failed with error -5 [ 1555.199437][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1555.208744][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1555.209980][ T781] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 1555.216721][ T9426] usb 2-1: SerialNumber: syz [ 1555.271352][ T828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.280640][ T828] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.289712][ T9426] hub 2-1:250.228: bad descriptor, ignoring hub [ 1555.296138][ T9426] hub: probe of 2-1:250.228 failed with error -5 [ 1555.348719][T20208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1555.458748][ T781] usb 6-1: Using ep0 maxpacket: 8 [ 1555.609548][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1555.629219][ T882] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.636337][ T882] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.738769][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1555.738798][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1555.738817][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1555.765642][T20208] usb 5-1: config 250 has no interface number 0 [ 1555.772009][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1555.783572][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1555.794064][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1555.804568][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1555.818213][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1555.880561][ T882] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.887743][ T882] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.909013][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1555.918419][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1555.926483][T20208] usb 5-1: SerialNumber: syz [ 1555.933424][ T9172] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1555.939324][ T9425] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 68 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1555.956452][ C0] usblp0: nonzero read bulk status received: -71 [ 1555.964215][ T785] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.965528][T20209] usblp 4-1:250.228: usblp3: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1555.986387][ T9426] usblp 2-1:250.228: usblp4: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1555.990203][ T785] raw-gadget gadget: fail, usb_ep_enable returned -22 07:55:47 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1556.099591][T20208] usb 5-1: can't set config #250, error -71 [ 1556.116860][T31752] usb 6-1: USB disconnect, device number 24 [ 1556.122555][T20208] usb 5-1: USB disconnect, device number 8 [ 1556.151211][T31752] usblp0: removed [ 1556.219186][ T9172] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 1556.279179][T20209] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 1556.288340][ T9426] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 1556.309914][ T9425] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 1556.458656][ T9172] usb 1-1: Using ep0 maxpacket: 8 [ 1556.548831][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1556.554532][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1556.559873][T20208] usb 5-1: new high-speed USB device number 9 using dummy_hcd 07:55:48 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1556.599648][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1556.600044][ T904] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.721111][ T907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.721405][ T913] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.728365][ T907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.748016][ T913] raw-gadget gadget: fail, usb_ep_enable returned -22 07:55:48 executing program 1: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1556.770020][ T910] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.777222][ T910] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.799226][ T9426] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1556.828891][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1556.844364][ T9426] usb 2-1: USB disconnect, device number 46 07:55:48 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1556.896760][ T849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1556.925660][T20209] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71) 07:55:48 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1556.944784][ T9426] usblp4: removed [ 1556.949215][ T8243] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1556.959511][T20209] usb 4-1: USB disconnect, device number 6 [ 1556.974003][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1556.982753][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1556.991689][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1557.001029][T20208] usb 5-1: config 250 has no interface number 0 [ 1557.007388][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1557.018905][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1557.029396][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1557.040173][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1557.053679][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1557.060789][ T9425] usb 3-1: can't restore configuration #250 (error=-71) [ 1557.071124][T20209] usblp3: removed [ 1557.075716][ T9425] usb 3-1: USB disconnect, device number 68 [ 1557.086611][ T9425] usblp2: removed [ 1557.159232][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1557.168475][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1557.176714][T20208] usb 5-1: SerialNumber: syz [ 1557.188768][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1557.199952][ T952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1557.206788][ T952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1557.249788][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1557.256162][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1557.259315][T31752] usb 1-1: USB disconnect, device number 10 [ 1557.303991][T31752] usblp1: removed [ 1557.318807][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1557.327557][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1557.336603][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1557.345846][ T8243] usb 6-1: config 250 has no interface number 0 [ 1557.352250][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1557.363751][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1557.374352][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1557.385004][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1557.398507][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1557.438910][ T9426] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1557.447094][T20209] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1557.471114][T20208] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1557.478761][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1557.491781][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1557.499786][ T8243] usb 6-1: SerialNumber: syz [ 1557.508765][ T9425] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1557.518714][T20208] usb 5-1: USB disconnect, device number 9 [ 1557.534155][T20208] usblp0: removed [ 1557.559263][ T976] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1557.566614][ T976] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1557.599639][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1557.606096][ T8243] hub: probe of 6-1:250.228 failed with error -5 07:55:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) 07:55:49 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1557.718719][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1557.723948][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1557.788938][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1557.819801][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1557.862407][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1557.871289][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1557.880379][ T9426] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.890823][ T9426] usb 2-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1557.900248][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1557.908658][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1557.917706][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1557.926933][T20209] usb 4-1: config 250 has no interface number 0 [ 1557.933254][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1557.944856][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1557.955512][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1557.966179][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1557.980074][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1558.038926][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1558.048084][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1558.056145][ T9426] usb 2-1: SerialNumber: syz [ 1558.062333][ T9425] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1558.070835][ T9425] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1558.079985][ T9425] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1558.089412][ T9425] usb 3-1: config 250 has no interface number 0 [ 1558.095695][ T9425] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1558.107294][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1558.117982][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1558.128690][ T9425] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1558.142399][ T9425] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1558.150937][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1558.160157][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1558.168904][T20209] usb 4-1: SerialNumber: syz [ 1558.190962][ T996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.198327][ T996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.229747][T20209] hub 4-1:250.228: bad descriptor, ignoring hub [ 1558.236026][T20209] hub: probe of 4-1:250.228 failed with error -5 [ 1558.243927][ T9425] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1558.253012][ T9425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1558.261057][ T9425] usb 3-1: SerialNumber: syz [ 1558.291400][ T1008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.300420][ T1008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.339653][ T9425] hub 3-1:250.228: bad descriptor, ignoring hub [ 1558.346431][ T9425] hub: probe of 3-1:250.228 failed with error -5 [ 1558.353459][T30977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1558.361317][T20208] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1558.429181][ T976] usb 6-1: reset high-speed USB device number 25 using dummy_hcd [ 1558.618672][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1558.624638][T30977] usb 1-1: Using ep0 maxpacket: 8 [ 1558.678807][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 1558.748804][T30977] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1558.757587][T30977] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1558.766527][T30977] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1558.776080][T30977] usb 1-1: config 250 has no interface number 0 [ 1558.782378][T30977] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1558.794107][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1558.804611][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1558.815492][T30977] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1558.819254][ T1071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.829017][T30977] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1558.837312][ T1071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1558.842774][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1558.857772][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1558.866655][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1558.875921][T20208] usb 5-1: config 250 has no interface number 0 [ 1558.882243][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1558.893764][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1558.904330][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1558.914885][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1558.928749][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1558.990131][T30977] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1558.999812][T30977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1559.007884][T30977] usb 1-1: SerialNumber: syz [ 1559.018924][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1559.027970][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1559.036342][T20208] usb 5-1: SerialNumber: syz [ 1559.060532][ T952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.061354][ T1099] UDC core: couldn't find an available UDC or it's busy: -16 [ 1559.067435][ T952] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.074893][ T1099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1559.083251][ T1064] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.093051][ T1071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.110032][ T1064] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.117216][ T1071] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.129848][T30977] hub 1-1:250.228: bad descriptor, ignoring hub [ 1559.136221][T30977] hub: probe of 1-1:250.228 failed with error -5 07:55:50 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1559.179264][T20208] usb 5-1: can't set config #250, error -71 [ 1559.187251][T20209] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1559.188652][ C1] usblp0: nonzero read bulk status received: -71 [ 1559.205793][ T9425] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 69 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1559.233890][T20208] usb 5-1: USB disconnect, device number 10 [ 1559.352643][ T9172] usb 6-1: USB disconnect, device number 25 [ 1559.368899][ T9172] usblp0: removed [ 1559.375191][T30977] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1559.429926][T30977] usb 1-1: USB disconnect, device number 11 [ 1559.437723][T30977] usblp0: removed [ 1559.469231][T20209] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 1559.477815][ T9425] usb 3-1: reset high-speed USB device number 69 using dummy_hcd [ 1559.648674][T20208] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1559.728739][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1559.728861][ T9425] usb 3-1: Using ep0 maxpacket: 8 07:55:51 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009", 0xe) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:55:51 executing program 3: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1559.900454][ T1100] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.901019][ T1091] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.907378][ T1100] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1559.915227][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1559.968907][T20209] usb 4-1: can't restore configuration #250 (error=-71) [ 1559.987639][T20209] usb 4-1: USB disconnect, device number 7 [ 1559.994126][T30977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1560.036275][T20209] usblp1: removed [ 1560.059293][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1560.067773][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1560.076731][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1560.086023][T20208] usb 5-1: config 250 has no interface number 0 [ 1560.092360][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1560.104002][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1560.114591][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1560.125088][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1560.138643][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 07:55:51 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1560.257351][T22861] usb 2-1: USB disconnect, device number 47 [ 1560.264546][ T9425] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1560.275141][ T9425] usb 3-1: USB disconnect, device number 69 [ 1560.284061][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1560.293507][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1560.301788][T20208] usb 5-1: SerialNumber: syz 07:55:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x86000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x1, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000380), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffff8}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0xd, 0x88a2, 'batadv_slave_1\x00', 'veth0_macvtap\x00', 'vcan0\x00', 'ipvlan0\x00', @remote, [0xff, 0xff, 0x0, 0xcba098d2b40e8137, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1}]}, 0x1c6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r4, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, 0x0, 0x40004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) [ 1560.307685][T30977] usb 1-1: Using ep0 maxpacket: 8 [ 1560.313041][ T9426] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1560.341817][ T9425] usblp2: removed [ 1560.381586][ T1191] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1560.392192][ T1122] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1560.400409][ T1122] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1560.421083][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1560.427380][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1560.438809][T30977] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1560.447223][T30977] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1560.456211][T30977] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1560.465659][T30977] usb 1-1: config 250 has no interface number 0 [ 1560.472101][T30977] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1560.483729][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1560.494332][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1560.505322][T30977] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1560.518955][T30977] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1560.527306][T20209] usb 4-1: new high-speed USB device number 8 using dummy_hcd 07:55:52 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1560.631314][T20208] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1560.661283][ T9426] usb 6-1: Using ep0 maxpacket: 8 [ 1560.709798][T20208] usb 5-1: USB disconnect, device number 11 [ 1560.733814][T20208] usblp0: removed [ 1560.788986][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1560.794574][ T9425] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1560.802360][ T9426] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1560.810785][ T9426] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1560.819726][ T9426] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1560.829008][ T9426] usb 6-1: config 250 has no interface number 0 07:55:52 executing program 0: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1560.835284][ T9426] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1560.846807][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1560.857286][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1560.867775][ T9426] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1560.881568][ T9426] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1560.909018][T30977] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1560.918174][T30977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1560.958742][T31752] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1560.958847][T30977] usb 1-1: can't set config #250, error -71 [ 1560.988882][ T9426] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1560.998022][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1561.006056][ T9426] usb 6-1: SerialNumber: syz [ 1561.012367][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1561.020808][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1561.029693][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1561.038936][T20209] usb 4-1: config 250 has no interface number 0 [ 1561.045187][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1561.056893][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1561.067353][T20209] usb 4-1: config 250 interface 228 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 1561.078675][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1561.092269][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1561.100626][T30977] usb 1-1: USB disconnect, device number 12 [ 1561.129147][ T1157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.136337][ T1157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.150083][ T9426] hub 6-1:250.228: bad descriptor, ignoring hub [ 1561.156520][ T9426] hub: probe of 6-1:250.228 failed with error -5 [ 1561.198744][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1561.198839][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1561.213213][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1561.221470][T20209] usb 4-1: SerialNumber: syz [ 1561.238719][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1561.250320][ T1166] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.269749][T20209] hub 4-1:250.228: bad descriptor, ignoring hub [ 1561.276017][T20209] hub: probe of 4-1:250.228 failed with error -5 [ 1561.323333][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1561.331949][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1561.341008][T31752] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1561.350266][T31752] usb 2-1: config 250 has no interface number 0 [ 1561.356594][T31752] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1561.368264][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1561.378741][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1561.388818][T20208] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1561.389381][T31752] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1561.398256][ T9425] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1561.410480][T31752] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1561.426178][ T9425] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1561.435707][ T9425] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1561.444961][ T9425] usb 3-1: config 250 has no interface number 0 [ 1561.451272][ T9425] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1561.462769][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1561.473229][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1561.483683][ T9425] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1561.490394][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1561.497192][ T9425] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1561.498527][ T9426] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1561.506267][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1561.532880][T31752] usb 2-1: SerialNumber: syz [ 1561.558905][T30977] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1561.589758][ T9425] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1561.593495][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.599081][ T9425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1561.609547][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.613909][ T9425] usb 3-1: SerialNumber: syz [ 1561.630436][T31752] hub 2-1:250.228: bad descriptor, ignoring hub [ 1561.636722][T31752] hub: probe of 2-1:250.228 failed with error -5 [ 1561.650378][ T1180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.657312][ T1180] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1561.702824][ T9425] hub 3-1:250.228: bad descriptor, ignoring hub [ 1561.709438][ T9425] hub: probe of 3-1:250.228 failed with error -5 [ 1561.768830][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1561.848834][T30977] usb 1-1: Using ep0 maxpacket: 8 [ 1561.899093][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1561.907722][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1561.916693][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1561.926498][T20208] usb 5-1: config 250 has no interface number 0 [ 1561.933269][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1561.944924][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1561.955612][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1561.966438][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1561.979986][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1562.049320][ T1157] usb 6-1: reset high-speed USB device number 26 using dummy_hcd [ 1562.068809][T30977] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1562.077313][T30977] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1562.086311][T30977] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1562.095664][T30977] usb 1-1: config 250 has no interface number 0 [ 1562.102014][T30977] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1562.113597][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1562.124084][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1562.134872][T30977] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1562.148618][T30977] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1562.156233][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1562.162010][ T1276] UDC core: couldn't find an available UDC or it's busy: -16 [ 1562.165594][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1562.172954][ T1276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1562.181002][T20208] usb 5-1: SerialNumber: syz 07:55:53 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1562.259736][T20208] usb 5-1: can't set config #250, error -71 [ 1562.274729][T20208] usb 5-1: USB disconnect, device number 12 [ 1562.281551][T30977] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1562.290674][T30977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1562.298722][T30977] usb 1-1: SerialNumber: syz [ 1562.309312][ T1157] usb 6-1: Using ep0 maxpacket: 8 [ 1562.370622][ T1235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.377593][ T1235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.420512][T30977] hub 1-1:250.228: bad descriptor, ignoring hub [ 1562.426969][T30977] hub: probe of 1-1:250.228 failed with error -5 [ 1562.449466][ T1268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.456647][ T1268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.670284][ T1268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.677419][ T1268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1562.688758][T20208] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1562.709622][T31752] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1562.725894][ T9425] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 70 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1562.728699][ C1] usblp0: nonzero read bulk status received: -71 [ 1562.745329][T30977] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1562.929264][T31752] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 1562.937619][ T8243] usb 6-1: USB disconnect, device number 26 [ 1562.949145][ T8243] usblp0: removed [ 1562.968844][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1562.979138][T30559] usb 1-1: USB disconnect, device number 13 [ 1562.989679][T30559] usblp3: removed [ 1562.999450][ T9425] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 1563.099003][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1563.107874][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1563.116852][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1563.126232][T20208] usb 5-1: config 250 has no interface number 0 [ 1563.132661][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1563.144398][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1563.155214][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1563.165998][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1563.168678][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1563.179571][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1563.288961][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1563.298172][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1563.306267][T20208] usb 5-1: SerialNumber: syz [ 1563.320391][ T1279] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.327442][ T1279] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.328670][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1563.338712][T30559] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1563.347127][ T1291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.359417][ T1291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.383290][T20208] hub 5-1:250.228: bad descriptor, ignoring hub 07:55:55 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009", 0xe) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1563.389734][T20208] hub: probe of 5-1:250.228 failed with error -5 07:55:55 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1563.489248][ T9425] usb 3-1: device firmware changed [ 1563.495011][ T9425] usb 3-1: USB disconnect, device number 70 [ 1563.515781][ T9425] usblp2: removed [ 1563.578845][T30559] usb 1-1: Using ep0 maxpacket: 8 [ 1563.599554][T20208] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1563.653146][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.670670][T20208] usb 5-1: USB disconnect, device number 13 [ 1563.688830][T20208] usblp0: removed [ 1563.699197][T30559] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1563.702481][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.707540][T30559] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1563.723374][T30559] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1563.732623][T30559] usb 1-1: config 250 has no interface number 0 [ 1563.739012][T30559] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 07:55:55 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009", 0xe) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1563.750517][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1563.761090][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1563.771580][T30559] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1563.785186][T30559] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1563.794275][ T9172] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1563.879135][T30559] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1563.888293][T30559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1563.896370][T30559] usb 1-1: SerialNumber: syz [ 1563.908966][ T9425] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1563.920055][ T1235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.927219][ T1235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1563.959746][T30559] hub 1-1:250.228: bad descriptor, ignoring hub [ 1563.966537][T30559] hub: probe of 1-1:250.228 failed with error -5 [ 1564.048702][ T9172] usb 6-1: Using ep0 maxpacket: 8 07:55:55 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1564.079339][T20209] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1564.092271][T30559] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1564.118991][T30977] usb 2-1: USB disconnect, device number 48 [ 1564.151091][T30977] usblp1: removed [ 1564.160518][T30559] usb 1-1: USB disconnect, device number 14 [ 1564.169125][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1564.177536][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1564.179119][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1564.186654][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1564.186685][ T9172] usb 6-1: config 250 has no interface number 0 [ 1564.186724][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1564.186755][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1564.229424][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1564.229602][T20208] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1564.239939][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1564.261175][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1564.295994][T30559] usblp0: removed [ 1564.338892][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1564.348269][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1564.356361][ T9172] usb 6-1: SerialNumber: syz [ 1564.369058][ T9425] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1564.377550][ T9425] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1564.387079][ T9425] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1564.396577][ T9425] usb 3-1: config 250 has no interface number 0 [ 1564.399612][ T1346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1564.403006][ T9425] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1564.420140][ T1346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1564.421313][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1564.438474][ T9425] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1564.439525][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1564.448972][ T9425] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1564.455209][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1564.468680][ T9425] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1564.470449][T20209] usb 4-1: Using ep0 maxpacket: 8 07:55:56 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1564.569621][T20209] usb 4-1: device firmware changed [ 1564.576243][ T9425] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1564.585539][ T9425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1564.594376][ T9425] usb 3-1: SerialNumber: syz [ 1564.602985][T20209] usb 4-1: USB disconnect, device number 8 [ 1564.640200][ T1349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1564.650695][ T1349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1564.650884][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1564.658212][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1564.670824][T30559] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1564.689703][ T9425] hub 3-1:250.228: bad descriptor, ignoring hub [ 1564.696339][ T9425] hub: probe of 3-1:250.228 failed with error -5 [ 1564.818869][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1564.827334][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1564.836344][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1564.845721][T20208] usb 5-1: config 250 has no interface number 0 [ 1564.852042][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1564.858661][T31752] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1564.863683][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1564.881846][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1564.892310][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1564.906267][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1564.918683][T30559] usb 1-1: Using ep0 maxpacket: 8 [ 1564.989053][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1564.998344][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1565.006893][T20208] usb 5-1: SerialNumber: syz [ 1565.040310][ T1291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.041618][T30559] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1565.047253][ T1291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.055533][T30559] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1565.071797][T30559] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1565.081111][T30559] usb 1-1: config 250 has no interface number 0 [ 1565.087383][T30559] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1565.099005][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1565.108853][T20209] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1565.109488][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1565.117708][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1565.127525][T30559] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1565.127557][T30559] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1565.133910][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1565.188665][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1565.219811][T30559] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1565.229447][T30559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1565.237442][T30559] usb 1-1: SerialNumber: syz [ 1565.260828][ T1400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.268304][ T1400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.300962][T30559] hub 1-1:250.228: bad descriptor, ignoring hub [ 1565.307319][T30559] hub: probe of 1-1:250.228 failed with error -5 [ 1565.319140][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1565.327590][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1565.336497][T31752] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1565.345839][T31752] usb 2-1: config 250 has no interface number 0 07:55:57 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1565.352156][T31752] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1565.363799][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1565.374291][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1565.378716][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1565.384774][T31752] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1565.403292][T31752] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1565.472770][ T1346] usb 6-1: reset high-speed USB device number 27 using dummy_hcd [ 1565.489107][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1565.498261][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1565.506437][T31752] usb 2-1: SerialNumber: syz [ 1565.539830][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1565.548674][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1565.557567][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1565.566931][T20209] usb 4-1: config 250 has no interface number 0 [ 1565.573246][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1565.584388][ T1415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.584882][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1565.593597][ T1415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.601907][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1565.619607][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1565.633299][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1565.649663][T31752] hub 2-1:250.228: bad descriptor, ignoring hub [ 1565.656052][T31752] hub: probe of 2-1:250.228 failed with error -5 [ 1565.728976][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1565.738081][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1565.738732][ T1346] usb 6-1: Using ep0 maxpacket: 8 [ 1565.746143][T20209] usb 4-1: SerialNumber: syz [ 1565.770246][ T1376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.777517][ T1376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.799592][T20209] hub 4-1:250.228: bad descriptor, ignoring hub [ 1565.805885][T20209] hub: probe of 4-1:250.228 failed with error -5 [ 1565.883281][ T1468] UDC core: couldn't find an available UDC or it's busy: -16 [ 1565.889061][ T1431] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1565.890834][ T1468] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1565.898006][ T1431] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1566.131923][ T1431] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1566.141287][ T1431] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1566.189809][ T9425] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 71 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1566.203791][T20208] usblp 5-1:250.228: usblp2: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1566.208640][ C1] usblp0: nonzero read bulk status received: -71 [ 1566.222657][T30559] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1566.238989][T31752] usblp 2-1:250.228: usblp4: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1566.242086][T20209] usblp 4-1:250.228: usblp5: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1566.279406][T30559] usb 1-1: USB disconnect, device number 15 [ 1566.289338][T31752] usb 2-1: USB disconnect, device number 49 [ 1566.303452][T30559] usblp3: removed [ 1566.329900][T31752] usblp4: removed [ 1566.372946][T20209] usb 4-1: USB disconnect, device number 9 [ 1566.394089][T20209] usblp5: removed [ 1566.400208][ T9426] usb 6-1: USB disconnect, device number 27 [ 1566.410565][ T9426] usblp0: removed [ 1566.449136][ T9425] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1566.457466][T20208] usb 5-1: reset high-speed USB device number 14 using dummy_hcd 07:55:58 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:55:58 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1566.728679][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1566.768702][T31752] usb 2-1: new high-speed USB device number 50 using dummy_hcd 07:55:58 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009", 0xe) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1566.889190][ T1453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1566.896185][ T1453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1566.903856][T20209] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1566.929158][ T9425] usb 3-1: device descriptor read/64, error -71 [ 1567.008795][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1567.098728][ T9172] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1567.128783][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1567.137262][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1567.146608][T31752] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1567.155870][T31752] usb 2-1: config 250 has no interface number 0 [ 1567.162195][T31752] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1567.162712][ T1453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.173708][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1567.180778][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1567.191045][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1567.200545][ T1453] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.206637][T31752] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1567.215027][ T9425] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 1567.226791][T31752] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1567.288679][T30559] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1567.302291][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1567.311547][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1567.319833][T31752] usb 2-1: SerialNumber: syz [ 1567.328783][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1567.337229][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1567.346149][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1567.346396][ T1415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.355593][T20209] usb 4-1: config 250 has no interface number 0 [ 1567.368374][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1567.379917][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1567.390421][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1567.393049][ T1415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.400915][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1567.419489][T31752] hub 2-1:250.228: bad descriptor, ignoring hub [ 1567.421170][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1567.427346][T31752] hub: probe of 2-1:250.228 failed with error -5 [ 1567.447261][ T9172] usb 1-1: Using ep0 maxpacket: 8 07:55:59 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1567.530051][T30559] usb 6-1: Using ep0 maxpacket: 8 [ 1567.549571][ T9425] usb 3-1: Using ep0 maxpacket: 8 [ 1567.569681][ T9172] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1567.578067][ T9172] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1567.579717][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1567.587085][ T9172] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1567.596025][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1567.596944][T20208] usb 5-1: USB disconnect, device number 14 [ 1567.605268][ T9172] usb 1-1: config 250 has no interface number 0 [ 1567.605307][ T9172] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1567.605337][ T9172] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1567.605364][ T9172] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1567.657237][T20208] usblp2: removed [ 1567.658178][ T9172] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 07:55:59 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1567.664887][T20209] usb 4-1: can't set config #250, error -71 [ 1567.675414][ T9172] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1567.720778][T31752] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1567.730653][T20209] usb 4-1: USB disconnect, device number 10 [ 1567.740699][ T1525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.748300][ T1525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1567.758971][T30559] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1567.767399][T30559] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1567.776333][T30559] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1567.785608][T30559] usb 6-1: config 250 has no interface number 0 [ 1567.791935][T30559] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1567.803499][T30559] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1567.813965][T30559] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1567.824451][T30559] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1567.837984][T30559] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1567.970487][T30559] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1567.979628][T30559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1567.987617][T30559] usb 6-1: SerialNumber: syz [ 1567.993527][ T9172] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1568.002905][ T9172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1568.005035][ T1525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.011045][ T9172] usb 1-1: SerialNumber: syz [ 1568.018826][ T1525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.049343][ T1535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.056324][ T1535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.066285][T31752] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 1568.067066][ T1529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.087559][T20208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1568.106513][ T1529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.111252][T30559] hub 6-1:250.228: bad descriptor, ignoring hub [ 1568.119746][T30559] hub: probe of 6-1:250.228 failed with error -5 [ 1568.139800][ T9172] hub 1-1:250.228: bad descriptor, ignoring hub [ 1568.146120][ T9172] hub: probe of 1-1:250.228 failed with error -5 [ 1568.158882][T20209] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1568.328720][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1568.348649][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1568.428780][T20209] usb 4-1: Using ep0 maxpacket: 8 [ 1568.428952][ T8243] usb 3-1: USB disconnect, device number 71 [ 1568.475220][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.486048][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.498850][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1568.507321][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1568.516223][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1568.525481][T20208] usb 5-1: config 250 has no interface number 0 [ 1568.531798][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1568.543311][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1568.553787][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1568.564323][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1568.577918][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1568.618940][T20209] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1568.627325][T20209] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1568.636257][T20209] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1568.645614][T20209] usb 4-1: config 250 has no interface number 0 [ 1568.651953][T20209] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1568.663528][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1568.671447][ T1602] UDC core: couldn't find an available UDC or it's busy: -16 [ 1568.674311][T20209] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1568.681723][ T1602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1568.692413][T20209] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1568.713136][T20209] usb 4-1: config 250 interface 228 has no altsetting 0 07:56:00 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1568.748471][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.792925][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.798860][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1568.809294][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1568.829405][T20209] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1568.838734][T20209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1568.846743][T20209] usb 4-1: SerialNumber: syz [ 1568.852695][T20208] usb 5-1: can't set config #250, error -71 [ 1568.859935][T30559] usblp 6-1:250.228: usblp2: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1568.869657][T20208] usb 5-1: USB disconnect, device number 15 [ 1568.871453][ C1] usblp0: nonzero read bulk status received: -71 [ 1568.884936][ T9172] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1568.898482][ T8243] usblp1: removed [ 1568.920669][ T1552] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.928061][ T1552] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1568.960121][ T9172] usb 1-1: USB disconnect, device number 16 [ 1568.979682][ T9172] usblp3: removed [ 1569.030451][T20209] hub 4-1:250.228: bad descriptor, ignoring hub [ 1569.036923][T20209] hub: probe of 4-1:250.228 failed with error -5 [ 1569.104468][T27219] usb 2-1: USB disconnect, device number 50 [ 1569.129056][T30559] usb 6-1: reset high-speed USB device number 28 using dummy_hcd [ 1569.239574][T20209] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1569.263140][ T8243] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1569.268763][T20208] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1569.368723][T30559] usb 6-1: Using ep0 maxpacket: 8 07:56:01 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1569.509367][ T1599] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.516575][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1569.524224][ T1599] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.528698][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1569.658755][T20208] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1569.667304][T20208] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1569.676316][T20208] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1569.685647][T20208] usb 5-1: config 250 has no interface number 0 [ 1569.691967][T20208] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1569.703526][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1569.714337][T20208] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1569.724912][T20208] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1569.738619][T20208] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1569.745742][T27219] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1569.757131][ T1535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.764218][ T1535] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.818766][T20209] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1569.849647][T20208] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1569.859060][T20208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1569.867136][T20208] usb 5-1: SerialNumber: syz [ 1569.899137][ T1606] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.906755][ T1606] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1569.919955][T20208] hub 5-1:250.228: bad descriptor, ignoring hub [ 1569.926220][T20208] hub: probe of 5-1:250.228 failed with error -5 [ 1569.999595][T27219] usb 2-1: Using ep0 maxpacket: 8 [ 1570.029036][ T1552] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 1570.103625][T20209] usb 1-1: Using ep0 maxpacket: 8 [ 1570.110420][ T9425] usb 6-1: USB disconnect, device number 28 [ 1570.148845][T27219] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1570.157256][T27219] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1570.166269][T27219] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1570.175601][T27219] usb 2-1: config 250 has no interface number 0 [ 1570.181904][T27219] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1570.193431][T27219] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1570.204006][T27219] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1570.214483][T27219] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1570.227993][T27219] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1570.268668][ T1552] usb 4-1: Using ep0 maxpacket: 8 [ 1570.328788][T20209] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1570.337497][T20209] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1570.346483][T20209] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1570.355853][T20209] usb 1-1: config 250 has no interface number 0 [ 1570.362237][T20209] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1570.373778][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1570.384268][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1570.394768][T20209] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1570.408276][T20209] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1570.416609][T27219] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1570.425808][T27219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1570.434142][T27219] usb 2-1: SerialNumber: syz [ 1570.472980][ T1662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.473406][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.481542][ T1662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.489762][ T1576] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.509725][T27219] hub 2-1:250.228: bad descriptor, ignoring hub [ 1570.516190][T27219] hub: probe of 2-1:250.228 failed with error -5 07:56:02 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000", 0x15) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1570.524624][T20209] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1570.534205][T20209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1570.542593][T20209] usb 1-1: SerialNumber: syz [ 1570.611055][ T1657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.618572][ T1657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.670115][T20209] hub 1-1:250.228: bad descriptor, ignoring hub [ 1570.676503][T20209] hub: probe of 1-1:250.228 failed with error -5 [ 1570.717594][ T1662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1570.725538][ T1662] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:02 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1570.768963][ T1590] usblp0: removed [ 1570.773480][ T9425] usblp2: removed [ 1570.779872][T20208] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1570.791342][ C0] usblp0: nonzero read bulk status received: -71 [ 1570.801217][T27219] usblp 2-1:250.228: usblp2: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1570.820306][ T8243] usb 3-1: device descriptor read/all, error -71 [ 1570.870508][T27219] usb 2-1: USB disconnect, device number 51 [ 1570.884018][T27219] usblp2: removed [ 1570.899998][T20209] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1570.974413][T30559] usb 4-1: USB disconnect, device number 11 [ 1570.992290][ T1551] usblp0: removed [ 1571.059187][T20208] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1571.114020][ T1657] UDC core: couldn't find an available UDC or it's busy: -16 [ 1571.121677][ T1657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1571.171341][ T9425] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1571.198690][ T8243] usb 3-1: new high-speed USB device number 73 using dummy_hcd 07:56:02 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1571.249983][ T9172] usb 1-1: USB disconnect, device number 17 [ 1571.257182][ T9172] usblp2: removed [ 1571.329020][T20208] usb 5-1: Using ep0 maxpacket: 8 [ 1571.429565][ T9425] usb 6-1: Using ep0 maxpacket: 8 [ 1571.438688][ T8243] usb 3-1: Using ep0 maxpacket: 8 07:56:03 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1571.499959][ T1680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.506885][ T1680] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.559022][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1571.567530][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1571.576485][ T8243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1571.579405][ T9425] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1571.585863][ T8243] usb 3-1: config 250 has no interface number 0 [ 1571.594148][ T9425] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1571.600619][ T8243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1571.609453][ T9425] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1571.620901][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1571.620929][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1571.620954][ T8243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1571.620984][ T8243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1571.622534][ T9172] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1571.630252][ T9425] usb 6-1: config 250 has no interface number 0 [ 1571.686014][ T9425] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1571.697553][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 07:56:03 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1571.708031][ T9425] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1571.718550][ T9425] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1571.732343][ T9425] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1571.741316][ T1606] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.748314][ T1606] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.839957][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1571.849162][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1571.857348][ T8243] usb 3-1: SerialNumber: syz [ 1571.858977][ T9425] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1571.871613][ T9425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1571.879647][ T9425] usb 6-1: SerialNumber: syz [ 1571.889295][ T1718] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.898322][ T1718] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.909383][ T1691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.916439][ T1691] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1571.918696][ T9172] usb 2-1: Using ep0 maxpacket: 8 [ 1571.949875][ T8243] hub 3-1:250.228: bad descriptor, ignoring hub [ 1571.956296][ T8243] hub: probe of 3-1:250.228 failed with error -5 [ 1571.969889][ T9425] hub 6-1:250.228: bad descriptor, ignoring hub [ 1571.976155][ T9425] hub: probe of 6-1:250.228 failed with error -5 [ 1572.038724][T30559] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1572.049167][ T9172] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1572.057523][ T9172] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1572.066617][ T9172] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1572.075916][ T9172] usb 2-1: config 250 has no interface number 0 [ 1572.082435][ T9172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1572.088698][T27219] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1572.093978][ T9172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1572.112165][ T9172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1572.118866][T20209] usb 5-1: USB disconnect, device number 16 [ 1572.122698][ T9172] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1572.142216][ T9172] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1572.158310][T20209] usblp1: removed [ 1572.159787][ T8243] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1572.200213][ T9425] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1572.252209][ T9172] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1572.261334][ T9172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1572.269386][ T9172] usb 2-1: SerialNumber: syz [ 1572.297865][ T1746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.307424][ T1746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.329671][ T9172] hub 2-1:250.228: bad descriptor, ignoring hub [ 1572.335969][ T9172] hub: probe of 2-1:250.228 failed with error -5 [ 1572.348737][T30559] usb 4-1: Using ep0 maxpacket: 8 [ 1572.428766][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1572.472523][T30559] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1572.481134][T30559] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1572.490203][T30559] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1572.499557][T30559] usb 4-1: config 250 has no interface number 0 [ 1572.505900][T30559] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1572.517504][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1572.527959][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1572.538612][T30559] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1572.552141][T30559] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1572.569060][ T8243] usb 6-1: USB disconnect, device number 29 [ 1572.576753][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1572.585318][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1572.594382][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1572.603647][T27219] usb 1-1: config 250 has no interface number 0 [ 1572.609951][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 07:56:04 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1572.621577][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1572.632070][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1572.640799][T30559] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1572.642541][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1572.651647][T30559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1572.665230][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1572.680280][T30559] usb 4-1: SerialNumber: syz [ 1572.727178][ T1754] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.738481][ T1754] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.749829][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1572.759103][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1572.759771][T30559] hub 4-1:250.228: bad descriptor, ignoring hub [ 1572.767078][T27219] usb 1-1: SerialNumber: syz [ 1572.773435][T30559] hub: probe of 4-1:250.228 failed with error -5 [ 1572.851245][ T1758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.859010][ T1758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1572.869782][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1572.876053][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1572.879507][ T1718] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1572.971628][T31752] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1573.148855][ T1718] usb 3-1: Using ep0 maxpacket: 8 [ 1573.218736][T31752] usb 5-1: Using ep0 maxpacket: 8 [ 1573.310134][ T1796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.317135][ T1796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.338995][T31752] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1573.347609][T31752] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1573.356531][T31752] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1573.365976][T31752] usb 5-1: config 250 has no interface number 0 [ 1573.372502][T31752] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1573.384143][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1573.394622][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1573.405118][T31752] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1573.418643][T31752] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1573.499086][T31752] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1573.508382][T31752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1573.516567][T31752] usb 5-1: SerialNumber: syz [ 1573.549118][ T1806] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.556350][ T1806] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.561272][ T1796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.569408][T31752] hub 5-1:250.228: bad descriptor, ignoring hub [ 1573.573476][ T1796] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1573.576177][T31752] hub: probe of 5-1:250.228 failed with error -5 [ 1573.630524][ T9172] usblp 2-1:250.228: usblp2: USB Bidirectional printer dev 52 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1573.643660][ T8243] usblp1: removed [ 1573.648693][ C1] usblp0: nonzero read bulk status received: -71 [ 1573.662199][T30559] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1573.665331][T27219] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:56:05 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000", 0x15) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1573.802149][T20209] usb 3-1: USB disconnect, device number 73 [ 1573.824304][T31752] usblp 5-1:250.228: usblp4: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1573.824627][T20209] usblp0: removed [ 1573.870068][T31752] usb 5-1: USB disconnect, device number 17 [ 1573.889286][T30559] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 1573.897771][ T9172] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 1573.937841][T31752] usblp4: removed [ 1574.029037][T27219] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 1574.128683][T30559] usb 4-1: Using ep0 maxpacket: 8 [ 1574.134045][ T8243] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1574.141769][ T9172] usb 2-1: Using ep0 maxpacket: 8 07:56:05 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1574.270400][ T1827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.277723][ T1827] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.286460][ T1817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.293539][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1574.299603][ T1817] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.359163][T31752] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1574.378872][ T8243] usb 6-1: Using ep0 maxpacket: 8 07:56:06 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1574.459082][ T9172] usb 2-1: can't restore configuration #250 (error=-71) [ 1574.470150][ T1832] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.477568][ T1832] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.489295][ T9172] usb 2-1: USB disconnect, device number 52 [ 1574.503433][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1574.512523][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1574.521636][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1574.530960][ T8243] usb 6-1: config 250 has no interface number 0 [ 1574.537483][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1574.549069][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1574.556615][ T1754] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.559686][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1574.577371][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1574.591077][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1574.613629][ T1754] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.625929][ T9172] usblp2: removed [ 1574.649160][T31752] usb 5-1: Using ep0 maxpacket: 8 [ 1574.679235][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1574.688464][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1574.697147][ T8243] usb 6-1: SerialNumber: syz [ 1574.729558][ T1863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.743842][ T1863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.762856][ T1758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.771109][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1574.777365][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1574.784363][ T9168] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1574.792379][T31752] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1574.800990][T31752] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1574.810047][T31752] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1574.814897][ T1758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1574.819650][T31752] usb 5-1: config 250 has no interface number 0 [ 1574.832843][T31752] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1574.844527][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1574.855121][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1574.865664][T31752] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1574.879379][T31752] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1574.959218][T31752] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1574.968343][T31752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1574.976442][T31752] usb 5-1: SerialNumber: syz [ 1574.989152][ T9426] usb 4-1: USB disconnect, device number 12 [ 1574.998964][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1574.999266][ T9426] usblp1: removed [ 1575.013074][ T1806] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1575.034081][ T1806] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1575.049866][T31752] hub 5-1:250.228: bad descriptor, ignoring hub [ 1575.056152][T31752] hub: probe of 5-1:250.228 failed with error -5 [ 1575.109401][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1575.148982][ T9172] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1575.170431][ T9426] usb 1-1: USB disconnect, device number 18 [ 1575.177530][ T9426] usblp3: removed [ 1575.228897][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1575.237275][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1575.246216][ T9168] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1575.255482][ T9168] usb 3-1: config 250 has no interface number 0 [ 1575.261965][ T9168] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1575.273496][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1575.284169][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1575.294677][ T9168] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1575.308385][ T9168] usb 3-1: config 250 interface 228 has no altsetting 0 07:56:07 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1575.388940][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1575.398270][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1575.406478][ T9168] usb 3-1: SerialNumber: syz [ 1575.449165][ T9172] usb 2-1: Using ep0 maxpacket: 8 [ 1575.469186][ T1891] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1575.482936][ T1891] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:07 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1575.529802][ T9168] hub 3-1:250.228: bad descriptor, ignoring hub [ 1575.536086][ T9168] hub: probe of 3-1:250.228 failed with error -5 [ 1575.589063][ T9172] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1575.597443][ T9172] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1575.606417][ T9172] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1575.616084][ T9172] usb 2-1: config 250 has no interface number 0 [ 1575.622405][ T9172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1575.633931][ T9172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1575.644413][ T9172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1575.654982][ T9172] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1575.668515][ T9172] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1575.675444][ T1863] usb 6-1: reset high-speed USB device number 30 using dummy_hcd [ 1575.718862][T27219] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1575.758844][ T9172] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1575.768241][ T9172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1575.776326][ T9172] usb 2-1: SerialNumber: syz [ 1575.807591][ T1898] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:07 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1575.819097][ T1898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1575.840065][ T9172] hub 2-1:250.228: bad descriptor, ignoring hub [ 1575.846354][ T9172] hub: probe of 2-1:250.228 failed with error -5 [ 1575.878856][T20209] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1575.918904][ T1863] usb 6-1: Using ep0 maxpacket: 8 [ 1575.978783][T27219] usb 4-1: Using ep0 maxpacket: 8 [ 1576.059094][ T1934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.066321][ T1934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.108869][T27219] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1576.117456][T27219] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1576.126541][T27219] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1576.135810][T27219] usb 4-1: config 250 has no interface number 0 [ 1576.142119][T27219] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1576.153628][T27219] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1576.164085][T27219] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1576.174544][T27219] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1576.188190][T27219] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1576.195266][T20209] usb 1-1: Using ep0 maxpacket: 8 [ 1576.199302][ T1968] UDC core: couldn't find an available UDC or it's busy: -16 [ 1576.207630][ T1968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1576.280453][ T1934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.287409][ T1934] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.296236][T27219] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1576.305711][T27219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1576.313866][T27219] usb 4-1: SerialNumber: syz [ 1576.329705][T31752] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1576.339628][T20209] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1576.343938][ T9168] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 74 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1576.349471][ C1] usblp0: nonzero read bulk status received: -71 [ 1576.349550][T20209] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1576.370141][ T9172] usblp 2-1:250.228: usblp3: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1576.376739][T20209] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1576.394634][ T1940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.397103][T20209] usb 1-1: config 250 has no interface number 0 [ 1576.410211][T20209] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1576.421891][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1576.430656][ T1940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.432333][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1576.449570][T20209] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1576.463083][T20209] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1576.472943][ T9168] usb 3-1: USB disconnect, device number 74 [ 1576.477843][T27219] hub 4-1:250.228: bad descriptor, ignoring hub [ 1576.485213][T27219] hub: probe of 4-1:250.228 failed with error -5 [ 1576.509992][ T9168] usblp2: removed [ 1576.549824][T20209] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1576.559067][T20209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1576.567048][T20209] usb 1-1: SerialNumber: syz [ 1576.574467][ T9425] usb 6-1: USB disconnect, device number 30 [ 1576.611009][ T3218] usb 2-1: USB disconnect, device number 53 [ 1576.625664][ T9425] usblp0: removed [ 1576.632288][ T1953] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.640984][T31752] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 1576.645523][ T1953] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1576.651156][ T3218] usblp3: removed [ 1576.701055][T27219] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1576.749912][T20209] hub 1-1:250.228: bad descriptor, ignoring hub [ 1576.756186][T20209] hub: probe of 1-1:250.228 failed with error -5 07:56:08 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1576.888682][T31752] usb 5-1: Using ep0 maxpacket: 8 07:56:08 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000", 0x15) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1577.008705][ T3218] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1577.039408][ T1962] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.046321][ T1962] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.248729][ T3218] usb 2-1: Using ep0 maxpacket: 8 [ 1577.253845][ T9168] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1577.282249][ T1962] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.290214][ T1962] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.348735][ T8243] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1577.372180][ T3218] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1577.380871][ T3218] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1577.390369][ T3218] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1577.399693][ T3218] usb 2-1: config 250 has no interface number 0 [ 1577.406120][ T3218] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1577.417662][ T3218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1577.428161][ T3218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1577.438661][ T3218] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1577.452413][ T3218] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1577.462446][ T1940] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 1577.539017][ T3218] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1577.548128][ T3218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1577.556219][ T3218] usb 2-1: SerialNumber: syz [ 1577.588895][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1577.591437][ T1898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.608218][ T1898] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.639634][ T3218] hub 2-1:250.228: bad descriptor, ignoring hub [ 1577.645949][ T3218] hub: probe of 2-1:250.228 failed with error -5 [ 1577.678948][T27219] usb 5-1: USB disconnect, device number 18 [ 1577.679165][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1577.709018][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1577.717571][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1577.718924][ T1940] usb 4-1: Using ep0 maxpacket: 8 [ 1577.726513][ T9168] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1577.740828][ T9168] usb 3-1: config 250 has no interface number 0 [ 1577.747112][ T9168] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 07:56:09 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1577.758662][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1577.769270][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1577.779799][ T9168] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1577.793367][ T9168] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1577.879138][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1577.887635][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1577.896817][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1577.906214][ T8243] usb 6-1: config 250 has no interface number 0 [ 1577.912678][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1577.913772][ T2035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.924283][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1577.941646][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1577.952144][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1577.954209][ T2035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1577.965700][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1577.980674][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1577.990233][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1577.998236][ T9168] usb 3-1: SerialNumber: syz [ 1578.050362][ T2030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.057720][ T2030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.068993][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1578.078219][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1578.086389][ T8243] usb 6-1: SerialNumber: syz [ 1578.092807][ T9168] hub 3-1:250.228: bad descriptor, ignoring hub [ 1578.099224][ T9168] hub: probe of 3-1:250.228 failed with error -5 [ 1578.129441][ T2038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.136718][ T2038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.149758][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1578.156062][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1578.215640][ T2035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.223135][ T2035] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.269960][T20209] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1578.283050][T27219] usblp1: removed [ 1578.288652][ C1] usblp0: nonzero read bulk status received: -71 [ 1578.299333][ T3218] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1578.312972][ T9168] usblp 3-1:250.228: usblp3: USB Bidirectional printer dev 75 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1578.383729][ T8243] usblp 6-1:250.228: usblp4: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1578.462146][ T8243] usb 4-1: USB disconnect, device number 13 [ 1578.474667][ T8243] usblp0: removed [ 1578.519154][T20209] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 1578.559089][ T3218] usb 2-1: reset high-speed USB device number 54 using dummy_hcd 07:56:10 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1578.668794][T27219] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1578.699156][ T9168] usb 6-1: USB disconnect, device number 31 [ 1578.709530][ T2030] UDC core: couldn't find an available UDC or it's busy: -16 [ 1578.717252][ T2030] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1578.729534][ T9168] usblp4: removed 07:56:10 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x0, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1578.808700][ T3218] usb 2-1: Using ep0 maxpacket: 8 [ 1578.859695][T20208] usb 3-1: USB disconnect, device number 75 [ 1578.868284][T20208] usblp3: removed 07:56:10 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1578.957017][ T2078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1578.974569][ T2078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.059261][ T9168] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1579.098804][T20209] usb 1-1: Using ep0 maxpacket: 8 [ 1579.129536][T27219] usb 5-1: device not accepting address 19, error -71 07:56:10 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1579.215211][ T2078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.225419][ T2078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.260975][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.268531][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.298865][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1579.338707][T20208] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1579.418872][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1579.427382][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1579.436347][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1579.445651][ T9168] usb 6-1: config 250 has no interface number 0 [ 1579.451992][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1579.463526][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1579.474030][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1579.484571][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1579.498363][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1579.509410][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.516919][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.524587][T27219] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1579.549269][ T9426] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1579.578937][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1579.580134][ T9425] usb 2-1: USB disconnect, device number 54 [ 1579.588274][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1579.595556][ T9425] usblp1: removed [ 1579.602175][ T9168] usb 6-1: SerialNumber: syz [ 1579.617483][T20208] usb 4-1: Using ep0 maxpacket: 8 [ 1579.659360][ T2038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.666489][ T2038] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1579.699736][ T9168] hub 6-1:250.228: bad descriptor, ignoring hub [ 1579.706011][ T9168] hub: probe of 6-1:250.228 failed with error -5 [ 1579.738866][T20208] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1579.747724][T20208] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1579.756858][T20208] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1579.766116][T20208] usb 4-1: config 250 has no interface number 0 [ 1579.772429][T20208] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1579.783960][T20208] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1579.794431][T20208] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1579.804924][T20208] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1579.818826][T20208] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1579.858916][T27219] usb 5-1: Using ep0 maxpacket: 8 [ 1579.878873][ T9426] usb 3-1: Using ep0 maxpacket: 8 [ 1579.900478][T20208] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1579.900873][ T8243] usb 1-1: USB disconnect, device number 19 [ 1579.909721][T20208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1579.924171][T20208] usb 4-1: SerialNumber: syz [ 1579.930444][ T9168] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1579.949364][ T8243] usblp2: removed [ 1579.970406][ T9425] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1579.993582][T27219] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1580.002229][T27219] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1580.011152][T27219] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1580.020391][T27219] usb 5-1: config 250 has no interface number 0 [ 1580.026662][T27219] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1580.038163][T27219] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1580.048708][T27219] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1580.059172][T27219] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1580.072766][T27219] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1580.080412][ T9426] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1580.088916][ T9426] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1580.097770][ T9426] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1580.107142][ T9426] usb 3-1: config 250 has no interface number 0 [ 1580.113587][ T9426] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1580.125265][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1580.135895][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1580.146451][ T9426] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1580.160245][ T9426] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1580.207000][ T2178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.214745][ T9168] usb 6-1: USB disconnect, device number 32 [ 1580.220624][ T2178] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.230617][T20208] hub 4-1:250.228: bad descriptor, ignoring hub [ 1580.236976][T20208] hub: probe of 4-1:250.228 failed with error -5 [ 1580.242941][ T9168] usblp0: removed [ 1580.244082][T27219] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1580.256282][T27219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1580.264637][T27219] usb 5-1: SerialNumber: syz [ 1580.269666][ T9426] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1580.278835][ T9426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1580.278899][ T8243] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1580.287014][ T9426] usb 3-1: SerialNumber: syz [ 1580.349185][ T2182] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.349876][ T2168] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.356412][ T2182] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.373104][ T2168] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1580.384617][ T9426] hub 3-1:250.228: bad descriptor, ignoring hub [ 1580.390984][ T9426] hub: probe of 3-1:250.228 failed with error -5 07:56:12 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000000000", 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1580.409731][T27219] hub 5-1:250.228: bad descriptor, ignoring hub [ 1580.416079][T27219] hub: probe of 5-1:250.228 failed with error -5 [ 1580.459044][ T9425] usb 2-1: Using ep0 maxpacket: 8 [ 1580.520515][T20208] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1580.548998][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1580.621905][ T9425] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1580.630328][ T9425] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1580.639372][ T9425] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1580.648661][ T9425] usb 2-1: config 250 has no interface number 0 [ 1580.654932][ T9425] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1580.666444][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1580.669212][ T8243] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1580.676917][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1580.685212][ T8243] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1580.695609][ T9425] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1580.704472][ T8243] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1580.718088][ T9425] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1580.727296][ T8243] usb 1-1: config 250 has no interface number 0 [ 1580.738857][T27219] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1580.740540][ T8243] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1580.763484][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1580.774115][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1580.784831][ T8243] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1580.798499][ T8243] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1580.806188][ T9426] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 76 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1580.909354][T20209] usb 6-1: new high-speed USB device number 33 using dummy_hcd 07:56:12 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1580.951542][ T8243] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1580.960767][ T8243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1580.968849][ T8243] usb 1-1: SerialNumber: syz [ 1581.000126][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1581.009512][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1581.013149][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.049848][ T9426] usb 5-1: USB disconnect, device number 20 [ 1581.059754][ T2143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.067350][ T9425] usb 2-1: can't set config #250, error -71 [ 1581.086391][ T9425] usb 2-1: USB disconnect, device number 55 [ 1581.089463][ T8243] hub 1-1:250.228: bad descriptor, ignoring hub [ 1581.098801][ T8243] hub: probe of 1-1:250.228 failed with error -5 [ 1581.108389][ T2270] UDC core: couldn't find an available UDC or it's busy: -16 [ 1581.116137][ T2270] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1581.169109][T20209] usb 6-1: Using ep0 maxpacket: 8 [ 1581.251192][ T2178] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 1581.300819][T20209] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1581.309246][T20209] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1581.318118][T20209] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1581.327407][T20209] usb 6-1: config 250 has no interface number 0 [ 1581.333774][T20209] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1581.345304][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1581.355827][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1581.366407][T20209] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1581.380020][T20209] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1581.469314][T20209] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1581.478524][T20209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1581.487065][T20209] usb 6-1: SerialNumber: syz [ 1581.509242][ T2249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.516537][ T2249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.529080][ T2178] usb 4-1: Using ep0 maxpacket: 8 [ 1581.535767][T20209] hub 6-1:250.228: bad descriptor, ignoring hub [ 1581.542092][T20209] hub: probe of 6-1:250.228 failed with error -5 [ 1581.549871][ T9425] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1581.670660][ T2267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.677913][ T2267] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 1581.788782][ T9425] usb 2-1: Using ep0 maxpacket: 8 07:56:13 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1581.905115][ T2267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.913200][ T2267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1581.918794][ T9425] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1581.928378][ T9425] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1581.937435][ T9425] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1581.947115][ T9425] usb 2-1: config 250 has no interface number 0 [ 1581.953473][ T9425] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1581.965028][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1581.975740][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1581.978648][ C1] usblp0: nonzero read bulk status received: -71 [ 1581.986370][ T9425] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1582.006125][ T9425] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1582.013691][ T9426] usblp1: removed [ 1582.015083][ T8243] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1582.020093][T20209] usblp 6-1:250.228: usblp3: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1582.089253][ T9168] usb 3-1: USB disconnect, device number 76 [ 1582.099854][T20209] usb 6-1: USB disconnect, device number 33 [ 1582.118823][T20209] usblp3: removed [ 1582.125192][ T9168] usblp2: removed 07:56:13 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x0, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1582.215946][T27219] usb 4-1: USB disconnect, device number 14 [ 1582.227383][T27219] usblp0: removed [ 1582.273249][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1582.282461][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1582.290530][ T9425] usb 2-1: SerialNumber: syz [ 1582.299222][ T8243] usb 1-1: reset high-speed USB device number 20 using dummy_hcd [ 1582.338500][ T2281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1582.354922][ T2281] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1582.379951][ T9425] hub 2-1:250.228: bad descriptor, ignoring hub [ 1582.386289][ T9425] hub: probe of 2-1:250.228 failed with error -5 07:56:14 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1582.538813][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1582.568761][T20209] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1582.629731][ T9425] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 56 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1582.668789][ T9426] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1582.681251][ T2323] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1582.689584][ T2323] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:14 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1582.768794][ T9168] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1582.834165][T20209] usb 6-1: Using ep0 maxpacket: 8 [ 1582.914887][ T2323] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1582.924322][ T2323] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1582.928760][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1582.988882][T20209] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1582.997580][T20209] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1583.007001][T20209] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1583.008916][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1583.016265][T20209] usb 6-1: config 250 has no interface number 0 [ 1583.027654][T20209] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1583.039537][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1583.050056][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1583.060528][T20209] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1583.068723][ T9172] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1583.074121][T20209] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1583.139411][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1583.148144][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1583.157083][ T9168] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1583.166407][ T9168] usb 3-1: config 250 has no interface number 0 [ 1583.168903][ T9426] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1583.172822][ T9168] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1583.181386][ T9426] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1583.194170][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1583.203017][ T9426] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1583.203042][ T9426] usb 5-1: config 250 has no interface number 0 [ 1583.213643][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1583.213671][ T9168] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1583.222951][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1583.222984][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1583.229345][ T9168] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1583.282687][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1583.293478][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1583.307277][ T9426] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1583.308879][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1583.323407][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1583.326162][T20209] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1583.331499][ T9168] usb 3-1: SerialNumber: syz [ 1583.345607][T20209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1583.349059][ T2381] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.353620][T20209] usb 6-1: SerialNumber: syz [ 1583.360621][ T9172] usb 4-1: Using ep0 maxpacket: 8 [ 1583.396371][ T2381] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.411733][ T2249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.419466][ T8243] usb 1-1: USB disconnect, device number 20 [ 1583.428968][ T9426] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1583.432230][ T2249] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.438266][ T9426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1583.449459][ T9168] hub 3-1:250.228: bad descriptor, ignoring hub [ 1583.452824][ T9426] usb 5-1: SerialNumber: syz [ 1583.459100][ T9168] hub: probe of 3-1:250.228 failed with error -5 [ 1583.465638][ T2281] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 1583.481524][T20209] hub 6-1:250.228: bad descriptor, ignoring hub [ 1583.487777][T20209] hub: probe of 6-1:250.228 failed with error -5 [ 1583.509069][ T9172] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1583.517636][ T9172] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1583.526556][ T9172] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1583.536314][ T9172] usb 4-1: config 250 has no interface number 0 [ 1583.543047][ T9172] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1583.554683][ T9172] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1583.565335][ T9172] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1583.575878][ T9172] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1583.579048][ T2373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.589383][ T9172] usb 4-1: config 250 interface 228 has no altsetting 0 07:56:15 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000000000", 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1583.651101][ T2373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.690173][ T9426] hub 5-1:250.228: bad descriptor, ignoring hub [ 1583.696586][ T9426] hub: probe of 5-1:250.228 failed with error -5 [ 1583.718894][ T2281] usb 2-1: Using ep0 maxpacket: 8 [ 1583.798787][ T9172] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1583.808036][ T9172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1583.816449][ T9172] usb 4-1: SerialNumber: syz [ 1583.855463][ T2391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.880064][ T2391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.900192][ T2396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.907232][ T2396] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1583.915170][ T9172] hub 4-1:250.228: bad descriptor, ignoring hub [ 1583.921462][ T9172] hub: probe of 4-1:250.228 failed with error -5 07:56:18 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200000000000000", 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:20 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1588.999088][ T2281] usb 2-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1589.009138][ T3218] usb 2-1: USB disconnect, device number 56 [ 1589.016463][ T8243] usblp1: removed [ 1589.050854][T20209] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1589.052489][ T9168] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 77 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1589.098977][ T9426] usblp 5-1:250.228: usblp3: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1589.099516][ T9172] usblp 4-1:250.228: usblp4: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1589.123768][ T3218] usblp0: removed 07:56:20 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x0, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1589.230575][ T9426] usb 5-1: USB disconnect, device number 21 [ 1589.254359][ T9426] usblp3: removed 07:56:20 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:56:20 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1589.337148][ T9168] usb 3-1: USB disconnect, device number 77 [ 1589.365240][ T9168] usblp2: removed [ 1589.370293][ T9172] usb 4-1: USB disconnect, device number 15 07:56:20 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1589.399358][T20209] usb 6-1: reset high-speed USB device number 34 using dummy_hcd [ 1589.412080][ T9172] usblp4: removed [ 1589.608893][ T3218] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1589.638705][T20209] usb 6-1: Using ep0 maxpacket: 8 07:56:21 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1589.718873][ T9426] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1589.818919][T20209] usb 6-1: device firmware changed [ 1589.824782][T20209] usb 6-1: USB disconnect, device number 34 [ 1589.859157][ T9168] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1589.859622][T20209] usblp1: removed [ 1589.879062][ T3218] usb 2-1: Using ep0 maxpacket: 8 [ 1589.940075][ T9172] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1589.968740][ T9426] usb 5-1: Using ep0 maxpacket: 8 [ 1589.968835][ T8243] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1589.998826][ T3218] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.007311][ T3218] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.016354][ T3218] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.025975][ T3218] usb 2-1: config 250 has no interface number 0 [ 1590.032295][ T3218] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.043780][ T3218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.054222][ T3218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.064981][ T3218] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.078485][ T3218] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1590.089323][ T9426] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.098056][ T9426] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.107120][ T9426] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.116481][ T9426] usb 5-1: config 250 has no interface number 0 [ 1590.122827][ T9426] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.134544][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.138649][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1590.145007][ T9426] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.145039][ T9426] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.174216][ T9426] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1590.179337][ T3218] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.190310][ T3218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.198371][ T3218] usb 2-1: SerialNumber: syz [ 1590.203994][ T9172] usb 4-1: Using ep0 maxpacket: 8 [ 1590.230410][ T2480] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.237695][ T2480] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.260054][ T3218] hub 2-1:250.228: bad descriptor, ignoring hub [ 1590.261077][ T9426] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.266397][ T3218] hub: probe of 2-1:250.228 failed with error -5 [ 1590.275514][ T9426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.275539][ T9426] usb 5-1: SerialNumber: syz [ 1590.276038][T20209] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1590.309268][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.317735][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.326983][ T9168] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.336437][ T9168] usb 3-1: config 250 has no interface number 0 [ 1590.342793][ T9168] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.354421][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.364913][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.375499][ T9168] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.379055][ T2488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.389028][ T9168] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1590.397978][ T2488] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.403953][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1590.414776][ T9172] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.423487][ T9172] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.429843][ T9426] hub 5-1:250.228: bad descriptor, ignoring hub [ 1590.432397][ T9172] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.438668][ T9426] hub: probe of 5-1:250.228 failed with error -5 [ 1590.447897][ T9172] usb 4-1: config 250 has no interface number 0 [ 1590.460796][ T9172] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.472296][ T9172] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.482769][ T9172] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.493260][ T9172] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.506789][ T9172] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1590.540220][ T3218] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1590.569442][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.578860][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.586850][ T9168] usb 3-1: SerialNumber: syz [ 1590.591819][T20209] usb 6-1: Using ep0 maxpacket: 8 [ 1590.639485][ T2500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.646631][ T2500] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.653614][ T9172] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.654844][ T9426] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1590.662672][ T9172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.662697][ T9172] usb 4-1: SerialNumber: syz [ 1590.663191][ T8243] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.695407][ T8243] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.704380][ T8243] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.708939][T20209] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1590.713690][ T8243] usb 1-1: config 250 has no interface number 0 [ 1590.722049][T20209] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1590.728259][ T8243] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.737216][T20209] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1590.748819][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.748850][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.758036][T20209] usb 6-1: config 250 has no interface number 0 [ 1590.768450][ T8243] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.779452][T20209] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1590.785665][ T8243] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1590.799130][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1590.799160][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1590.838872][T20209] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1590.852414][T20209] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1590.889690][ T9168] hub 3-1:250.228: bad descriptor, ignoring hub [ 1590.896089][ T9168] hub: probe of 3-1:250.228 failed with error -5 [ 1590.910795][ T2512] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.925285][ T2512] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1590.934763][ T8243] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.938899][T20209] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1590.943879][ T8243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.952901][T20209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1590.960916][ T8243] usb 1-1: SerialNumber: syz [ 1590.973552][T20209] usb 6-1: SerialNumber: syz [ 1591.003141][ T9172] hub 4-1:250.228: bad descriptor, ignoring hub [ 1591.009760][ T9172] hub: probe of 4-1:250.228 failed with error -5 [ 1591.019936][ T2510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1591.023765][ T2529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1591.027299][ T2510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1591.035535][ T2529] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1591.060025][T20209] hub 6-1:250.228: bad descriptor, ignoring hub [ 1591.066308][T20209] hub: probe of 6-1:250.228 failed with error -5 [ 1591.100267][ T8243] hub 1-1:250.228: bad descriptor, ignoring hub [ 1591.106713][ T8243] hub: probe of 1-1:250.228 failed with error -5 [ 1591.122131][ T3218] usb 5-1: USB disconnect, device number 22 [ 1591.447531][ T2480] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 1591.688977][ T2480] usb 2-1: Using ep0 maxpacket: 8 [ 1591.830786][ T2562] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1591.838177][ T2562] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1592.056752][ T2562] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1592.064966][ T2562] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1592.101312][ T9168] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 78 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1592.114677][ T3218] usblp1: removed [ 1592.128302][ T9172] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1592.129697][T20209] usblp 6-1:250.228: usblp3: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1592.139976][ C1] usblp0: nonzero read bulk status received: -71 [ 1592.163344][ T8243] usblp 1-1:250.228: usblp4: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1592.179828][ T9168] usb 3-1: USB disconnect, device number 78 [ 1592.200507][ T9168] usblp2: removed 07:56:23 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1592.309026][ T9426] usb 2-1: USB disconnect, device number 57 [ 1592.319646][ T9426] usblp0: removed [ 1592.369244][T20209] usb 6-1: reset high-speed USB device number 35 using dummy_hcd [ 1592.389119][ T9172] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 1592.431530][ T8243] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 1592.608692][T20209] usb 6-1: Using ep0 maxpacket: 8 07:56:24 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:56:24 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1592.668777][ T9172] usb 4-1: Using ep0 maxpacket: 8 [ 1592.708484][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1592.749125][ T9172] usb 4-1: device descriptor read/all, error -71 [ 1592.749755][ T2593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1592.770484][ T2593] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1592.808829][ T3218] usb 5-1: new high-speed USB device number 23 using dummy_hcd 07:56:24 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:56:24 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1592.928887][T20209] usb 6-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1592.947705][T20209] usb 6-1: USB disconnect, device number 35 [ 1592.967821][T20209] usblp3: removed 07:56:24 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1593.019061][ T9168] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1593.040510][ T8243] usb 1-1: device firmware changed [ 1593.046340][ T8243] usb 1-1: USB disconnect, device number 21 [ 1593.069179][ T3218] usb 5-1: Using ep0 maxpacket: 8 [ 1593.079882][ T8243] usblp4: removed [ 1593.139275][ T9172] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 1593.210116][ T3218] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1593.218586][ T3218] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1593.227660][ T3218] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1593.236889][ T3218] usb 5-1: config 250 has no interface number 0 [ 1593.243190][ T3218] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1593.254684][ T3218] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1593.265162][ T3218] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1593.275640][ T3218] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1593.289162][ T3218] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1593.339014][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1593.358890][T31752] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1593.379475][ T3218] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1593.388699][ T3218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1593.388810][T20209] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1593.396678][ T3218] usb 5-1: SerialNumber: syz [ 1593.418749][ T9172] usb 4-1: Using ep0 maxpacket: 8 [ 1593.439015][ T2643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.446068][ T2643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.461336][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1593.469913][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1593.479196][ T9168] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1593.488393][ T9168] usb 3-1: config 250 has no interface number 0 [ 1593.494676][ T9168] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1593.506272][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1593.516730][ T9168] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1593.527194][ T9168] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1593.540712][ T9168] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1593.549022][ T3218] hub 5-1:250.228: bad descriptor, ignoring hub [ 1593.555290][ T3218] hub: probe of 5-1:250.228 failed with error -5 [ 1593.565549][ T8243] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1593.622808][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1593.632457][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1593.640837][ T9168] usb 3-1: SerialNumber: syz [ 1593.649092][T20209] usb 6-1: Using ep0 maxpacket: 8 [ 1593.680281][ T2657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.687567][ T2657] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.693402][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.695111][ T3218] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1593.715014][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1593.728880][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1593.735046][ T9168] hub 3-1:250.228: bad descriptor, ignoring hub [ 1593.741409][ T9168] hub: probe of 3-1:250.228 failed with error -5 [ 1593.789374][T20209] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1593.798077][T20209] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1593.807364][T20209] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1593.816865][T20209] usb 6-1: config 250 has no interface number 0 [ 1593.823404][T20209] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1593.835009][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1593.838674][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1593.845719][T20209] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1593.861286][T20209] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1593.874834][T20209] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1593.878805][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1593.890555][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1593.899521][T31752] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1593.908795][T31752] usb 2-1: config 250 has no interface number 0 [ 1593.915251][T31752] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1593.926954][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1593.937644][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1593.948143][T31752] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1593.959063][T20209] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1593.961683][T31752] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1593.970830][T20209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1593.986006][T20209] usb 6-1: SerialNumber: syz [ 1593.998069][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.011542][ T9168] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 79 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1594.019606][ T2676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.027079][ T2607] usb 5-1: USB disconnect, device number 23 [ 1594.030890][ C0] usblp0: nonzero read bulk status received: -71 [ 1594.049447][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.063533][ T2676] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.079838][ T8243] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1594.088474][ T8243] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1594.097479][ T8243] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1594.106805][ T8243] usb 1-1: config 250 has no interface number 0 [ 1594.109500][T20209] hub 6-1:250.228: bad descriptor, ignoring hub [ 1594.113347][ T8243] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1594.119603][T20209] hub: probe of 6-1:250.228 failed with error -5 [ 1594.131713][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1594.148431][ T8243] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1594.159135][ T8243] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1594.172656][ T8243] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1594.180098][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1594.189598][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1594.197588][T31752] usb 2-1: SerialNumber: syz [ 1594.266440][ T2669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.280805][ T2669] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.309798][T31752] hub 2-1:250.228: bad descriptor, ignoring hub [ 1594.316356][T31752] hub: probe of 2-1:250.228 failed with error -5 [ 1594.323662][ T8243] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1594.332795][ T8243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1594.340838][ T8243] usb 1-1: SerialNumber: syz [ 1594.359403][ T9168] usb 3-1: USB disconnect, device number 79 [ 1594.368466][ T9168] usblp2: removed [ 1594.421321][ T2682] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.429473][ T2682] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1594.445415][T20209] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1594.449522][ T8243] hub 1-1:250.228: bad descriptor, ignoring hub [ 1594.463267][ T8243] hub: probe of 1-1:250.228 failed with error -5 [ 1594.529358][ T9168] usb 4-1: USB disconnect, device number 16 [ 1594.537380][ T9168] usblp1: removed [ 1594.559486][T31752] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 58 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1594.688994][ T2607] usb 5-1: new high-speed USB device number 24 using dummy_hcd 07:56:26 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1594.908840][ T9168] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1594.939036][ T9425] usb 2-1: USB disconnect, device number 58 [ 1594.961964][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1595.050072][ T2676] usb 6-1: reset high-speed USB device number 36 using dummy_hcd [ 1595.128777][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1595.137369][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1595.146347][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1595.156412][ T2607] usb 5-1: config 250 has no interface number 0 [ 1595.162798][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1595.174326][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1595.184808][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1595.195629][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1595.209293][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1595.248846][ T9426] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1595.268770][ T9168] usb 4-1: Using ep0 maxpacket: 8 [ 1595.288817][ T2676] usb 6-1: Using ep0 maxpacket: 8 [ 1595.297326][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1595.306473][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1595.314657][ T2607] usb 5-1: SerialNumber: syz [ 1595.429379][ T2773] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1595.430077][ T9168] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1595.436610][ T2773] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1595.444999][ T9168] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1595.460963][ T9168] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1595.470523][ T9168] usb 4-1: config 250 has no interface number 0 [ 1595.476803][ T9168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1595.488400][ T9168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1595.498958][ T9426] usb 3-1: Using ep0 maxpacket: 8 [ 1595.504016][ T9168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1595.514511][ T9168] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1595.528252][ T9168] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1595.619007][ T9426] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1595.619062][ T9168] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1595.627467][ T9426] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1595.627491][ T9426] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1595.627515][ T9426] usb 3-1: config 250 has no interface number 0 [ 1595.627544][ T9426] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1595.636698][ T9168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1595.636727][ T9168] usb 4-1: SerialNumber: syz [ 1595.685579][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1595.686427][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1595.696158][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1595.706845][ T2660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1595.713348][ T9426] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1595.725580][ T2773] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1595.733961][ T9426] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1595.742488][ T9168] hub 4-1:250.228: bad descriptor, ignoring hub [ 1595.753833][ T9168] hub: probe of 4-1:250.228 failed with error -5 [ 1595.762147][ T2773] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:27 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1595.849098][ T2643] usblp0: removed [ 1595.849928][ T8243] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1595.864569][ T9425] usblp1: removed [ 1595.868667][ C0] usblp0: nonzero read bulk status received: -71 [ 1595.908937][ T2607] usb 5-1: can't set config #250, error -71 [ 1595.917454][ T2607] usb 5-1: USB disconnect, device number 24 07:56:27 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1595.969863][ T9168] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1595.979736][ T9426] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1595.990853][ T9426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1595.998885][ T9426] usb 3-1: SerialNumber: syz [ 1596.011246][ T9168] usb 4-1: USB disconnect, device number 17 [ 1596.031825][T31752] usb 6-1: USB disconnect, device number 36 [ 1596.044370][ T9168] usblp1: removed [ 1596.061331][ T2787] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1596.068848][ T2787] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1596.069624][T31752] usblp0: removed [ 1596.101663][ T9426] hub 3-1:250.228: bad descriptor, ignoring hub [ 1596.107954][ T9426] hub: probe of 3-1:250.228 failed with error -5 [ 1596.169083][ T8243] usb 1-1: reset high-speed USB device number 22 using dummy_hcd 07:56:27 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 07:56:27 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 1596.269267][ T9425] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1596.339846][ T9426] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 80 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1596.448811][ T2607] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1596.528792][ T9168] usb 4-1: new high-speed USB device number 18 using dummy_hcd 07:56:28 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f50700090900020000000000000000", 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1596.628800][ T8243] usb 1-1: device descriptor read/64, error -71 [ 1596.658816][ T9425] usb 2-1: device descriptor read/64, error -71 [ 1596.728807][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1596.798738][ T9168] usb 4-1: Using ep0 maxpacket: 8 [ 1596.858784][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1596.867638][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1596.876663][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1596.885919][ T2607] usb 5-1: config 250 has no interface number 0 [ 1596.892223][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1596.903976][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1596.914435][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1596.918713][ T9426] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1596.924892][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1596.932628][ T9425] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1596.945937][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1596.946429][ T8243] usb 1-1: reset high-speed USB device number 22 using dummy_hcd [ 1597.028763][ T9168] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1597.037494][ T9168] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1597.040531][ T2787] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1597.046646][ T9168] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1597.063930][ T9168] usb 4-1: config 250 has no interface number 0 [ 1597.070333][ T9168] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1597.081890][ T9168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1597.092489][ T9168] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1597.103082][ T9168] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1597.116620][ T9168] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1597.124973][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1597.134152][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1597.142393][ T2607] usb 5-1: SerialNumber: syz [ 1597.159388][ T2819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.166323][ T2819] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.178972][ T9426] usb 6-1: Using ep0 maxpacket: 8 [ 1597.199464][ T9425] usb 2-1: Using ep0 maxpacket: 8 [ 1597.199681][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1597.210774][ T2607] hub: probe of 5-1:250.228 failed with error -5 [ 1597.220639][ T9168] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1597.229889][ T9168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1597.237873][ T9168] usb 4-1: SerialNumber: syz [ 1597.258904][ T8243] usb 1-1: Using ep0 maxpacket: 8 [ 1597.274190][ T2836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.290386][ T2836] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.318991][ T9426] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1597.319785][ T9168] hub 4-1:250.228: bad descriptor, ignoring hub [ 1597.327476][ T9426] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1597.333696][ T9168] hub: probe of 4-1:250.228 failed with error -5 [ 1597.348975][ T9426] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1597.358172][ T9426] usb 6-1: config 250 has no interface number 0 [ 1597.364789][ T9426] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1597.376460][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1597.384565][ T2787] usb 3-1: Using ep0 maxpacket: 8 [ 1597.387111][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1597.402562][ T9426] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1597.416698][ T9426] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1597.423993][ T9425] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1597.432414][ T9425] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1597.441343][ T9425] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1597.450860][ T9425] usb 2-1: config 250 has no interface number 0 [ 1597.457141][ T9425] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1597.460203][ T2849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.468756][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1597.480519][ T2849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.485885][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1597.503042][ T9425] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1597.516737][ T9425] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1597.559944][ T2863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.567032][ T2863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.581385][ T9426] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1597.590883][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1597.599132][ T9426] usb 6-1: SerialNumber: syz [ 1597.604024][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1597.613299][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1597.621415][ T9425] usb 2-1: SerialNumber: syz [ 1597.649247][ T2867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.656323][ T2867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.672892][ T2850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.685165][ T2850] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.709789][ T9425] hub 2-1:250.228: bad descriptor, ignoring hub [ 1597.716184][ T9425] hub: probe of 2-1:250.228 failed with error -5 [ 1597.728106][ T9426] hub 6-1:250.228: bad descriptor, ignoring hub [ 1597.734587][ T9426] hub: probe of 6-1:250.228 failed with error -5 [ 1597.744409][ T2849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1597.759792][ T2849] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1598.149161][T30977] usb 1-1: USB disconnect, device number 22 [ 1602.689020][ T2787] usb 3-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1602.703539][T31752] usb 3-1: USB disconnect, device number 80 [ 1602.711219][ T2607] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1602.724853][ T9168] usblp 4-1:250.228: usblp3: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1602.769411][ T9425] usblp 2-1:250.228: usblp4: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1602.783839][ T9426] usblp 6-1:250.228: usblp5: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1602.795910][T30977] usblp2: removed 07:56:34 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1602.828110][T31752] usblp0: removed 07:56:34 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f50700090900020000000000000000", 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:34 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 07:56:34 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1602.909526][ T9425] usb 2-1: USB disconnect, device number 60 [ 1602.916948][ T9426] usb 6-1: USB disconnect, device number 37 [ 1602.920185][ T2607] usb 5-1: USB disconnect, device number 25 07:56:34 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 07:56:34 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1603.007263][ T9425] usblp4: removed [ 1603.026631][ T9426] usblp5: removed [ 1603.060713][ T2607] usblp1: removed [ 1603.429081][ T9168] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 1603.439222][ T9426] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1603.450519][ T2607] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1603.468869][T31752] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1603.479633][ T9425] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1603.522790][T30977] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1603.678752][ T9426] usb 6-1: Using ep0 maxpacket: 8 [ 1603.699014][ T9168] usb 4-1: Using ep0 maxpacket: 8 [ 1603.719708][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1603.728768][T31752] usb 3-1: Using ep0 maxpacket: 8 [ 1603.729156][ T9425] usb 2-1: Using ep0 maxpacket: 8 [ 1603.768755][T30977] usb 1-1: Using ep0 maxpacket: 8 [ 1603.798980][ T9426] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1603.807550][ T9426] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1603.816802][ T9426] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1603.826237][ T9426] usb 6-1: config 250 has no interface number 0 [ 1603.832547][ T9426] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1603.844057][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1603.854523][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1603.864987][ T9426] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1603.870150][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1603.878499][ T9426] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1603.887033][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1603.900542][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1603.901116][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1603.909419][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1603.925442][ T2607] usb 5-1: config 250 has no interface number 0 [ 1603.928951][ T9425] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1603.931810][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1603.940052][ T9425] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1603.951577][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1603.960452][ T9425] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1603.960475][ T9425] usb 2-1: config 250 has no interface number 0 [ 1603.960512][ T9425] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1603.970927][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1603.980130][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1603.986713][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1603.998257][ T9425] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1604.008709][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1604.017840][T31752] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1604.019547][ T9425] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1604.032881][T31752] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1604.032908][T31752] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1604.032930][T31752] usb 3-1: config 250 has no interface number 0 [ 1604.032967][T31752] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1604.032995][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1604.033021][T31752] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1604.043482][ T9425] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1604.049382][T30977] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1604.050580][T31752] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1604.058955][T30977] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1604.072434][T31752] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1604.081316][T30977] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1604.169181][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1604.174437][T30977] usb 1-1: config 250 has no interface number 0 [ 1604.174488][T30977] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1604.183854][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.192832][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1604.199139][ T2607] usb 5-1: SerialNumber: syz [ 1604.210595][T30977] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1604.219410][T31752] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1604.229038][T30977] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1604.229073][T30977] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1604.240714][ T9426] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1604.244277][T31752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.253374][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.266876][T31752] usb 3-1: SerialNumber: syz [ 1604.273849][ T9426] usb 6-1: SerialNumber: syz [ 1604.340375][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.341372][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1604.347737][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.356500][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.363578][ T2973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.371205][ T9425] usb 2-1: SerialNumber: syz [ 1604.378335][ T2964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.383803][T30977] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1604.398296][T30977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.404790][ T2964] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.406391][T30977] usb 1-1: SerialNumber: syz [ 1604.425467][ T2973] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.448477][ T2994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.456462][ T9426] hub 6-1:250.228: bad descriptor, ignoring hub [ 1604.462862][ T9426] hub: probe of 6-1:250.228 failed with error -5 [ 1604.472045][ T2965] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.479755][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1604.482914][ T2977] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.486043][ T2607] hub: probe of 5-1:250.228 failed with error -5 [ 1604.500795][ T2965] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.514045][ T2994] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.546400][ T2977] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1604.559802][T30977] hub 1-1:250.228: bad descriptor, ignoring hub [ 1604.559864][T31752] hub 3-1:250.228: bad descriptor, ignoring hub [ 1604.566345][T30977] hub: probe of 1-1:250.228 failed with error -5 [ 1604.572838][T31752] hub: probe of 3-1:250.228 failed with error -5 [ 1604.619633][ T9425] hub 2-1:250.228: bad descriptor, ignoring hub [ 1604.626118][ T9425] hub: probe of 2-1:250.228 failed with error -5 [ 1604.689893][ T9426] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1604.708124][ T2607] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1604.770881][T31752] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 81 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1604.784257][T30977] usblp 1-1:250.228: usblp4: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1604.799322][ T9168] usb 4-1: USB disconnect, device number 18 [ 1604.846105][ T9168] usblp3: removed [ 1604.855974][ T9425] usblp 2-1:250.228: usblp3: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1605.060436][ T9425] usb 5-1: USB disconnect, device number 26 [ 1605.138908][ T9426] usb 3-1: USB disconnect, device number 81 [ 1605.168801][T30977] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1605.169131][ T9168] usb 1-1: USB disconnect, device number 23 [ 1605.228909][ T2607] usb 2-1: USB disconnect, device number 61 [ 1605.408745][T30977] usb 4-1: Using ep0 maxpacket: 8 [ 1605.489254][ T2960] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 1605.529817][T30977] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1605.538331][T30977] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1605.547828][T30977] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1605.557432][T30977] usb 4-1: config 250 has no interface number 0 [ 1605.563833][T30977] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1605.575468][T30977] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1605.586364][T30977] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1605.596858][T30977] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1605.610398][T30977] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1605.689370][T30977] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1605.698728][T30977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1605.706810][T30977] usb 4-1: SerialNumber: syz [ 1605.740760][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1605.747998][ T2979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1605.759609][T30977] hub 4-1:250.228: bad descriptor, ignoring hub [ 1605.766076][T30977] hub: probe of 4-1:250.228 failed with error -5 [ 1605.778966][ T2960] usb 6-1: Using ep0 maxpacket: 8 [ 1605.949469][ T3060] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1605.956578][ T3060] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:38 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) [ 1606.579513][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.585819][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:56:41 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) [ 1611.078737][ T2960] usb 6-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1611.098780][T31752] usb 6-1: USB disconnect, device number 38 [ 1611.128350][ T9425] usblp1: removed [ 1611.133278][ T9426] usblp2: removed [ 1611.136963][ T9168] usblp4: removed [ 1611.141911][ T2607] usblp3: removed [ 1611.148146][T30977] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1611.148422][T31752] usblp0: removed 07:56:42 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:42 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f50700090900020000000000000000", 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:42 executing program 2: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:56:42 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 07:56:43 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1611.470590][T30977] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 1611.689051][T31752] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1611.748811][T30977] usb 4-1: Using ep0 maxpacket: 8 [ 1611.754281][ T9425] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1611.809983][ T9426] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1611.838725][ T2607] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1611.849228][ T9168] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1611.928807][T31752] usb 6-1: Using ep0 maxpacket: 8 [ 1611.940688][ T3110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1611.948139][ T3110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.049016][T31752] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1612.049671][ T9425] usb 5-1: Using ep0 maxpacket: 8 [ 1612.057748][T31752] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1612.071748][T31752] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1612.081023][T31752] usb 6-1: config 250 has no interface number 0 [ 1612.087311][T31752] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1612.088931][ T9426] usb 3-1: Using ep0 maxpacket: 8 [ 1612.098854][T31752] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1612.098892][T31752] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1612.098916][T31752] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1612.098944][T31752] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1612.104089][ T2607] usb 2-1: Using ep0 maxpacket: 8 [ 1612.151473][ T9168] usb 1-1: Using ep0 maxpacket: 8 [ 1612.199181][T31752] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1612.199880][ T9425] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1612.208780][T31752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.208811][T31752] usb 6-1: SerialNumber: syz [ 1612.229205][ T3151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.230095][ T9425] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1612.237010][ T3151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.245744][ T9425] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1612.261715][ T9425] usb 5-1: config 250 has no interface number 0 [ 1612.268017][ T9425] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1612.270921][T31752] hub 6-1:250.228: bad descriptor, ignoring hub [ 1612.279585][ T9425] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1612.285826][T31752] hub: probe of 6-1:250.228 failed with error -5 [ 1612.296269][ T9425] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1612.296299][ T9425] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1612.296324][ T9425] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1612.329211][ T3110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.338988][ T9168] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1612.349187][ T9168] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1612.358081][ T9168] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1612.367375][ T9168] usb 1-1: config 250 has no interface number 0 [ 1612.369515][ T9426] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1612.373734][ T9168] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1612.382191][ T9426] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1612.393583][ T9168] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1612.402532][ T9426] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1612.412909][ T9168] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1612.412937][ T9168] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1612.412964][ T9168] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1612.413096][ T2607] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1612.413122][ T2607] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1612.413145][ T2607] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1612.413168][ T2607] usb 2-1: config 250 has no interface number 0 [ 1612.413196][ T2607] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1612.422628][ T9426] usb 3-1: config 250 has no interface number 0 [ 1612.432890][ T2607] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1612.446398][ T9426] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1612.453358][ T2607] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1612.461713][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1612.470592][ T2607] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1612.479821][ T9426] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1612.486080][ T2607] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1612.497569][ T9426] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1612.517871][ T3110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.525845][ T9426] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1612.557656][T31752] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 39 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1612.592158][ T9425] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1612.626188][ T9425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.634263][ T9425] usb 5-1: SerialNumber: syz [ 1612.639891][ T9168] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1612.649230][ T9168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.657242][ T9168] usb 1-1: SerialNumber: syz [ 1612.662725][ T2607] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1612.672033][ T2607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.679422][ T3146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.680345][ T2607] usb 2-1: SerialNumber: syz [ 1612.687224][ T3146] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.719369][ T9426] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1612.729141][ T9426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1612.737150][ T9426] usb 3-1: SerialNumber: syz [ 1612.748939][ T9425] hub 5-1:250.228: bad descriptor, ignoring hub [ 1612.755262][ T9425] hub: probe of 5-1:250.228 failed with error -5 [ 1612.755423][ T3162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.767369][ T3157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.800126][ T3157] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.809822][ T3162] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.819556][T31752] usb 4-1: USB disconnect, device number 19 [ 1612.830410][ T2607] hub 2-1:250.228: bad descriptor, ignoring hub [ 1612.836854][ T2607] hub: probe of 2-1:250.228 failed with error -5 [ 1612.845102][ T9168] hub 1-1:250.228: bad descriptor, ignoring hub [ 1612.851451][ T9168] hub: probe of 1-1:250.228 failed with error -5 [ 1612.861178][ T3152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.869311][ T3152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1612.889140][ T8243] usb 6-1: USB disconnect, device number 39 [ 1612.889991][ T9426] hub 3-1:250.228: bad descriptor, ignoring hub [ 1612.901704][ T9426] hub: probe of 3-1:250.228 failed with error -5 [ 1612.932146][T31752] usblp1: removed [ 1612.938830][ T8243] usblp0: removed [ 1612.980823][ T9425] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1613.040655][ T2607] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1613.070300][ T9168] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1613.140135][ T9426] usblp 3-1:250.228: usblp3: USB Bidirectional printer dev 82 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1613.318671][ C0] usblp0: nonzero read bulk status received: -71 [ 1613.318693][T31752] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1613.334032][ T8243] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1613.419426][ T9168] usb 1-1: USB disconnect, device number 24 [ 1613.419564][ T9426] usb 2-1: USB disconnect, device number 62 [ 1613.432939][ T9168] usblp2: removed [ 1613.439501][ T3146] UDC core: couldn't find an available UDC or it's busy: -16 [ 1613.446983][ T3146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1613.459106][ T2607] usb 3-1: USB disconnect, device number 82 [ 1613.469157][ T2607] usblp3: removed [ 1613.473772][ T9425] usb 5-1: USB disconnect, device number 27 [ 1613.489234][ T9426] usblp1: removed [ 1613.532202][ T9425] usblp0: removed [ 1613.579176][T31752] usb 4-1: Using ep0 maxpacket: 8 [ 1613.585037][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1613.698818][T31752] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1613.707617][T31752] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1613.716657][T31752] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1613.725983][T31752] usb 4-1: config 250 has no interface number 0 [ 1613.732317][T31752] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1613.743940][T31752] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1613.755274][T31752] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1613.765821][T31752] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1613.779561][T31752] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1613.788454][ T9168] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1613.796304][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1613.804731][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1613.813852][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1613.823406][ T8243] usb 6-1: config 250 has no interface number 0 [ 1613.829833][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1613.841468][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1613.851988][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1613.862496][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1613.876035][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 07:56:45 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1613.948835][ T2607] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1613.957509][ T9172] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1613.967081][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1613.976321][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1613.984502][ T8243] usb 6-1: SerialNumber: syz 07:56:45 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1614.002954][T31752] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1614.012278][T31752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1614.049364][T31752] usb 4-1: can't set config #250, error -71 [ 1614.057412][T31752] usb 4-1: USB disconnect, device number 20 [ 1614.069317][ T3151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1614.076301][ T3151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1614.128755][ T9168] usb 2-1: Using ep0 maxpacket: 8 [ 1614.140367][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1614.146630][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1614.229557][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1614.235056][ T2607] usb 1-1: Using ep0 maxpacket: 8 [ 1614.249843][ T9168] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1614.258482][ T9168] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1614.267600][ T9168] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1614.277042][ T9168] usb 2-1: config 250 has no interface number 0 [ 1614.283576][ T9168] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1614.295217][ T9168] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1614.305726][ T9168] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1614.316278][ T9168] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1614.329908][ T9168] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1614.358795][ T9425] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1614.371247][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1614.418855][ T2607] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1614.427369][ T2607] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1614.436717][ T2607] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1614.446009][ T2607] usb 1-1: config 250 has no interface number 0 [ 1614.452352][ T2607] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1614.463909][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1614.474443][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1614.484962][ T2607] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1614.498517][ T2607] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1614.505657][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1614.514125][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1614.523088][ T9172] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1614.532408][ T9172] usb 3-1: config 250 has no interface number 0 [ 1614.538756][ T9172] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1614.550300][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 07:56:46 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:56:46 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1614.560809][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1614.571309][ T9172] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1614.584871][ T9172] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1614.595235][ T8243] usb 6-1: USB disconnect, device number 40 [ 1614.602753][ T9168] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1614.611962][ T9168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1614.618803][ T9425] usb 5-1: Using ep0 maxpacket: 8 [ 1614.619991][ T9168] usb 2-1: SerialNumber: syz [ 1614.621456][ T8243] usblp0: removed [ 1614.648831][ T9168] usb 2-1: can't set config #250, error -71 [ 1614.656449][ T9168] usb 2-1: USB disconnect, device number 63 [ 1614.663881][ T2607] usb 1-1: string descriptor 0 read error: -71 [ 1614.670449][ T2607] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1614.679729][ T2607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1614.688226][T31752] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1614.719165][ T2607] usb 1-1: can't set config #250, error -71 [ 1614.727128][ T2607] usb 1-1: USB disconnect, device number 25 [ 1614.749916][ T9425] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1614.758269][ T9425] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1614.767430][ T9425] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1614.776864][ T9425] usb 5-1: config 250 has no interface number 0 [ 1614.783558][ T9425] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1614.795179][ T9425] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1614.805667][ T9425] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1614.816286][ T9425] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1614.829840][ T9425] usb 5-1: config 250 interface 228 has no altsetting 0 07:56:46 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1614.888870][ T9172] usb 3-1: string descriptor 0 read error: -71 [ 1614.895169][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1614.904429][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1614.919035][ T9425] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1614.928415][ T9425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1614.936613][ T9425] usb 5-1: SerialNumber: syz [ 1614.958883][ T9172] usb 3-1: can't set config #250, error -71 [ 1614.966071][T31752] usb 4-1: Using ep0 maxpacket: 8 [ 1614.985297][ T9172] usb 3-1: USB disconnect, device number 83 07:56:46 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1615.049064][ T3283] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.065525][ T3283] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.089754][ T9425] hub 5-1:250.228: bad descriptor, ignoring hub [ 1615.091299][T31752] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1615.096092][ T9425] hub: probe of 5-1:250.228 failed with error -5 [ 1615.104591][T31752] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1615.119721][T31752] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1615.129030][T31752] usb 4-1: config 250 has no interface number 0 [ 1615.135322][T31752] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1615.146933][T31752] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1615.157475][T31752] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1615.167960][T31752] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1615.181581][T31752] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1615.188829][ T9168] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1615.338871][T31752] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1615.348209][T31752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1615.356293][T31752] usb 4-1: SerialNumber: syz [ 1615.361996][ T9425] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1615.368993][ T2607] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1615.428742][ T9168] usb 2-1: Using ep0 maxpacket: 8 [ 1615.429201][ T3275] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.449874][ T3275] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.479699][T31752] hub 4-1:250.228: bad descriptor, ignoring hub [ 1615.486333][T31752] hub: probe of 4-1:250.228 failed with error -5 [ 1615.519792][ T9426] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1615.528854][ T9172] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1615.548828][ T9168] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1615.557395][ T9168] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1615.567027][ T9168] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1615.576346][ T9168] usb 2-1: config 250 has no interface number 0 [ 1615.582686][ T9168] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1615.594293][ T9168] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1615.604944][ T9168] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1615.615439][ T9168] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1615.629071][ T9168] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1615.678682][ T2607] usb 1-1: Using ep0 maxpacket: 8 [ 1615.709920][T31752] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1615.723760][ T9168] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1615.728656][ C0] usblp0: nonzero read bulk status received: -71 [ 1615.732949][ T9168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1615.747274][ T9168] usb 2-1: SerialNumber: syz [ 1615.777436][ T3313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.789955][ T9426] usb 6-1: Using ep0 maxpacket: 8 [ 1615.795493][ T3313] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1615.803040][ T2607] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1615.811615][ T2607] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1615.820521][ T2607] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1615.829792][ T2607] usb 1-1: config 250 has no interface number 0 [ 1615.836060][ T2607] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1615.847716][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1615.858231][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1615.868856][ T2607] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1615.882414][ T2607] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1615.884009][ T3283] UDC core: couldn't find an available UDC or it's busy: -16 [ 1615.892118][ T9168] hub 2-1:250.228: bad descriptor, ignoring hub [ 1615.897165][ T3283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1615.903358][ T9168] hub: probe of 2-1:250.228 failed with error -5 [ 1615.917826][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1615.927139][T31752] usb 5-1: USB disconnect, device number 28 [ 1615.935401][T31752] usblp0: removed [ 1615.949489][ T9426] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1615.958138][ T9426] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1615.967140][ T9426] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1615.976763][ T9426] usb 6-1: config 250 has no interface number 0 [ 1615.983125][ T9426] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1615.994680][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1616.005357][ T9426] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1616.014997][ T3377] UDC core: couldn't find an available UDC or it's busy: -16 [ 1616.015946][ T9426] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1616.023516][ T3377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1616.036948][ T9426] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1616.049789][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1616.059741][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1616.068600][ T9172] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1616.078090][ T9172] usb 3-1: config 250 has no interface number 0 [ 1616.084525][ T9172] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1616.096313][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1616.106919][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1616.117435][ T9172] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1616.130995][ T9172] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1616.138166][ T2607] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1616.139017][ T9426] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1616.148073][ T2607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1616.157408][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1616.165390][ T2607] usb 1-1: SerialNumber: syz [ 1616.173635][ T9426] usb 6-1: SerialNumber: syz [ 1616.193352][ T9168] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1616.269311][ T3346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.269922][ T3325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.276827][ T3346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.285105][ T3325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.301403][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1616.310709][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1616.319045][ T9172] usb 3-1: SerialNumber: syz [ 1616.327711][ T2607] hub 1-1:250.228: bad descriptor, ignoring hub [ 1616.333654][ T9426] hub 6-1:250.228: bad descriptor, ignoring hub [ 1616.334094][ T2607] hub: probe of 1-1:250.228 failed with error -5 [ 1616.340390][ T9426] hub: probe of 6-1:250.228 failed with error -5 [ 1616.348140][ T8243] usb 4-1: USB disconnect, device number 21 [ 1616.383901][ T8243] usblp1: removed [ 1616.396384][ T3329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.432727][ T3329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1616.470053][ T9172] hub 3-1:250.228: bad descriptor, ignoring hub [ 1616.476416][ T9172] hub: probe of 3-1:250.228 failed with error -5 07:56:48 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:48 executing program 3: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f50700090900020000000000000000", 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1616.836752][ T3325] UDC core: couldn't find an available UDC or it's busy: -16 [ 1616.844704][ T3325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1616.856449][T31752] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1617.032263][ T3346] UDC core: couldn't find an available UDC or it's busy: -16 [ 1617.039944][ T3346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1617.068838][T30559] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1617.098780][T31752] usb 5-1: Using ep0 maxpacket: 8 [ 1617.219284][T31752] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1617.228136][T31752] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1617.237098][T31752] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1617.246515][T31752] usb 5-1: config 250 has no interface number 0 [ 1617.252922][T31752] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1617.264658][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1617.275148][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1617.285658][T31752] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1617.299243][T31752] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1617.358978][T30559] usb 4-1: Using ep0 maxpacket: 8 [ 1617.379976][T31752] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1617.389184][T31752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1617.397178][T31752] usb 5-1: SerialNumber: syz [ 1617.429185][ T3405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1617.437634][ T3405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1617.449784][T31752] hub 5-1:250.228: bad descriptor, ignoring hub [ 1617.456341][T31752] hub: probe of 5-1:250.228 failed with error -5 [ 1617.489656][T30559] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1617.498222][T30559] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1617.507325][T30559] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1617.516785][T30559] usb 4-1: config 250 has no interface number 0 [ 1617.523220][T30559] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1617.534946][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1617.545457][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1617.555949][T30559] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1617.569448][T30559] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1617.649456][T30559] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1617.658916][T30559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1617.667006][T30559] usb 4-1: SerialNumber: syz [ 1617.690423][ T3411] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1617.698541][ T3411] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1617.709665][T30559] hub 4-1:250.228: bad descriptor, ignoring hub [ 1617.716012][T30559] hub: probe of 4-1:250.228 failed with error -5 [ 1618.150201][ T3429] UDC core: couldn't find an available UDC or it's busy: -16 [ 1618.157842][ T3429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:56:52 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1620.733969][ T8243] usb 2-1: USB disconnect, device number 64 [ 1620.741098][ T9426] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 41 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1620.762817][ T2607] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1620.776330][ T8243] usblp0: removed [ 1620.782289][ T9172] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 84 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1620.798797][ C0] usblp0: nonzero read bulk status received: -71 [ 1620.820727][T31752] usblp 5-1:250.228: usblp3: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:56:52 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 07:56:52 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:52 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 1620.882114][T30559] usblp 4-1:250.228: usblp4: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:56:52 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1620.923901][ T9172] usb 3-1: USB disconnect, device number 84 [ 1620.950071][ T2607] usb 1-1: USB disconnect, device number 26 [ 1620.960503][T31752] usb 5-1: USB disconnect, device number 29 07:56:52 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) [ 1620.981249][ T2607] usblp2: removed [ 1620.986668][T31752] usblp3: removed [ 1621.009560][T30559] usb 4-1: USB disconnect, device number 22 [ 1621.036835][ T9172] usblp0: removed [ 1621.049921][ T9168] usb 6-1: USB disconnect, device number 41 [ 1621.059121][T30559] usblp4: removed [ 1621.111812][ T9168] usblp1: removed [ 1621.429041][ T8243] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1621.438914][ T2607] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1621.479012][ T9172] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1621.489086][T31752] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1621.500101][T30559] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1621.508182][ T9168] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1621.668725][ T8243] usb 2-1: Using ep0 maxpacket: 8 [ 1621.689578][ T2607] usb 1-1: Using ep0 maxpacket: 8 [ 1621.718837][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1621.729351][T31752] usb 5-1: Using ep0 maxpacket: 8 [ 1621.739083][T30559] usb 4-1: Using ep0 maxpacket: 8 [ 1621.749195][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1621.790228][ T8243] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1621.799051][ T8243] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1621.807939][ T8243] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1621.817427][ T8243] usb 2-1: config 250 has no interface number 0 [ 1621.823895][ T8243] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1621.835678][ T8243] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1621.846256][ T8243] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1621.857093][ T8243] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1621.870895][ T8243] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1621.878152][ T2607] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1621.886817][ T2607] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1621.895976][ T2607] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1621.905284][ T2607] usb 1-1: config 250 has no interface number 0 [ 1621.912080][ T2607] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1621.923659][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1621.934188][ T2607] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1621.944891][ T2607] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1621.958444][ T2607] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1621.967217][T31752] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1621.975704][T31752] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1621.984793][T31752] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1621.994098][T31752] usb 5-1: config 250 has no interface number 0 [ 1622.000607][T31752] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1622.012187][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1622.022937][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1622.033476][T31752] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1622.047329][T31752] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1622.054673][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1622.063141][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1622.072219][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1622.081534][ T9168] usb 6-1: config 250 has no interface number 0 [ 1622.087815][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1622.099603][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1622.110122][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1622.120646][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1622.134227][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1622.141492][T30559] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1622.150108][T30559] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1622.159122][T30559] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1622.168379][T30559] usb 4-1: config 250 has no interface number 0 [ 1622.174873][T30559] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1622.186642][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1622.197142][T30559] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1622.207621][T30559] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1622.221155][T30559] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1622.228377][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1622.237036][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1622.246059][ T9172] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1622.255356][ T9172] usb 3-1: config 250 has no interface number 0 [ 1622.261965][ T9172] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1622.273752][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1622.284434][ T9172] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1622.295004][ T9172] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1622.308640][ T9172] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1622.348946][T30559] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.358387][T30559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.366449][T30559] usb 4-1: SerialNumber: syz [ 1622.372572][ T8243] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.381701][ T8243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.389765][ T8243] usb 2-1: SerialNumber: syz [ 1622.394780][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.403895][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.411973][ T9168] usb 6-1: SerialNumber: syz [ 1622.417106][T31752] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.426311][T31752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.434384][T31752] usb 5-1: SerialNumber: syz [ 1622.441081][ T2607] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.450252][ T2607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.458403][ T2607] usb 1-1: SerialNumber: syz [ 1622.479429][ T3493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.480615][ T3475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.486379][ T3493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.493587][ T3487] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.520119][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1622.520375][ T3476] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.529345][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1622.538231][ T3487] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.544098][ T9172] usb 3-1: SerialNumber: syz [ 1622.553366][ T3476] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.557261][ T3465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.571345][T31752] hub 5-1:250.228: bad descriptor, ignoring hub [ 1622.577601][T31752] hub: probe of 5-1:250.228 failed with error -5 [ 1622.587559][T30559] hub 4-1:250.228: bad descriptor, ignoring hub [ 1622.593984][T30559] hub: probe of 4-1:250.228 failed with error -5 [ 1622.601231][ T3465] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.611927][ T3475] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.620645][ T9168] hub 6-1:250.228: bad descriptor, ignoring hub [ 1622.626902][ T9168] hub: probe of 6-1:250.228 failed with error -5 [ 1622.669667][ T2607] hub 1-1:250.228: bad descriptor, ignoring hub [ 1622.676021][ T2607] hub: probe of 1-1:250.228 failed with error -5 [ 1622.708867][ T8243] hub 2-1:250.228: bad descriptor, ignoring hub [ 1622.715230][ T8243] hub: probe of 2-1:250.228 failed with error -5 [ 1622.757088][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.780489][T31752] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1622.801774][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1622.819539][ T9168] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 42 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1622.854814][ T9172] hub 3-1:250.228: bad descriptor, ignoring hub [ 1622.861463][ T9172] hub: probe of 3-1:250.228 failed with error -5 [ 1622.873662][T30559] usblp 4-1:250.228: usblp2: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1622.887856][ T8243] usblp 2-1:250.228: usblp3: USB Bidirectional printer dev 65 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1622.920359][ T2607] usblp 1-1:250.228: usblp4: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1623.029876][T31752] usb 5-1: USB disconnect, device number 30 [ 1623.044829][T31752] usblp0: removed [ 1623.079588][ T9172] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 85 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1623.170856][ T3475] UDC core: couldn't find an available UDC or it's busy: -16 [ 1623.178481][ T3475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1623.210220][ T9426] usb 2-1: USB disconnect, device number 65 [ 1623.218168][ T3487] UDC core: couldn't find an available UDC or it's busy: -16 [ 1623.225773][ T3487] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1623.320029][T30977] usb 4-1: USB disconnect, device number 23 [ 1623.359052][T20209] usb 1-1: USB disconnect, device number 27 [ 1623.371134][ T8243] usb 6-1: USB disconnect, device number 42 [ 1623.470737][ T3476] usb 3-1: reset high-speed USB device number 85 using dummy_hcd 07:56:55 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:55 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) [ 1623.728800][ T3476] usb 3-1: Using ep0 maxpacket: 8 07:56:55 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:56:55 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1623.905764][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1623.914636][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1623.999159][T27219] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1624.145545][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1624.154265][ T3494] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1624.189689][ T9426] usblp3: removed [ 1624.197895][T30977] usblp2: removed [ 1624.202985][T20209] usblp4: removed [ 1624.206687][ T8243] usblp1: removed [ 1624.218700][ C0] usblp0: nonzero read bulk status received: -71 [ 1624.269222][T27219] usb 5-1: Using ep0 maxpacket: 8 [ 1624.375294][T20208] usb 3-1: USB disconnect, device number 85 [ 1624.399031][T27219] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1624.407681][T27219] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1624.416674][T27219] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1624.426219][T27219] usb 5-1: config 250 has no interface number 0 [ 1624.432585][T27219] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1624.436114][ T3570] usblp0: removed [ 1624.444420][T27219] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1624.444457][T27219] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 07:56:56 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @loopback, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0f411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4133a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55507a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb0caccdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f00000001c0)="7b18908bcd34b21d88d6cb3738c9a63c2e387d241ff4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe455cfc2643f5aaefb581f93e03739e9c37091ac64fbf2055241eb0dfd6a93487989e745dbca562c20e0399bd3b60fcd524c3ad19d2c2dfd6b431b8e49f7d71cfc5bb447ff69f47417eab1fef46666fdd60c5af", 0x82}, {&(0x7f0000001580)="1c875c21d036a7311fd066aea39c5f4da638cd8cbf4f07d0a09803c607195d9ffeb19b2c62222a399739b0e24ec4b1d99a717bf0aa66c0cc09f34afcaccfce41", 0x40}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 1624.444481][T27219] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1624.444507][T27219] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1624.520014][T27219] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1624.529231][T27219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1624.537232][T27219] usb 5-1: SerialNumber: syz [ 1624.578839][ T8243] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1624.587171][ T3588] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1624.596748][ T3588] raw-gadget gadget: fail, usb_ep_enable returned -22 07:56:56 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="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", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "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"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) [ 1624.630054][T27219] hub 5-1:250.228: bad descriptor, ignoring hub [ 1624.636550][T27219] hub: probe of 5-1:250.228 failed with error -5 [ 1624.689679][T20209] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1624.697696][ T9426] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1624.818827][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1624.850037][T27219] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:56:56 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="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", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "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"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r5, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) [ 1624.939117][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1624.947726][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1624.956657][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1624.965908][ T8243] usb 6-1: config 250 has no interface number 0 [ 1624.968764][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1624.972214][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1624.977430][T20209] usb 1-1: Using ep0 maxpacket: 8 [ 1624.988696][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1624.988733][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1624.988756][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1624.988781][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1625.070058][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1625.079464][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1625.087454][ T8243] usb 6-1: SerialNumber: syz [ 1625.118904][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1625.119158][ T3598] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.127650][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1625.143225][ T9426] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1625.150323][ T3598] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.152524][ T9426] usb 2-1: config 250 has no interface number 0 [ 1625.165481][ T9426] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1625.177102][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1625.179628][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1625.187621][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1625.193858][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1625.204254][ T9426] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1625.224074][ T9426] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1625.232016][T30977] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1625.282761][T20209] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1625.291245][T20209] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1625.300171][T20209] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1625.309448][T20209] usb 1-1: config 250 has no interface number 0 [ 1625.315729][T20209] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1625.327255][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1625.337760][T20209] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1625.348259][T20209] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1625.361991][T20209] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1625.370415][T27219] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1625.410439][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1625.420055][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1625.428148][ T9426] usb 2-1: SerialNumber: syz [ 1625.459734][T20209] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1625.460131][ T3600] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.469046][T20209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1625.478950][ T3600] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.483971][T20209] usb 1-1: SerialNumber: syz [ 1625.500461][ T9426] hub 2-1:250.228: bad descriptor, ignoring hub [ 1625.506896][ T9426] hub: probe of 2-1:250.228 failed with error -5 [ 1625.551522][ T3594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.559169][ T3594] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1625.589817][T20209] hub 1-1:250.228: bad descriptor, ignoring hub [ 1625.596284][T20209] hub: probe of 1-1:250.228 failed with error -5 [ 1625.648730][T27219] usb 3-1: Using ep0 maxpacket: 8 [ 1625.654334][T30977] usb 4-1: Using ep0 maxpacket: 8 [ 1625.799575][T30977] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1625.808115][T30977] usb 4-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1625.817081][T30977] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1625.826635][T30977] usb 4-1: config 250 has no interface number 0 [ 1625.833127][T30977] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1625.844612][T30977] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1625.855066][T30977] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1625.865536][T30977] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1625.879040][T30977] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1625.881753][ T3681] UDC core: couldn't find an available UDC or it's busy: -16 [ 1625.893649][ T3681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1625.894757][T27219] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1625.909632][T27219] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1625.918497][T27219] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1625.927963][T27219] usb 3-1: config 250 has no interface number 0 [ 1625.934489][T27219] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1625.946159][T27219] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1625.956669][T27219] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1625.967177][T27219] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1625.980986][T27219] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1626.022307][T30977] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1626.031947][T30977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1626.040256][T30977] usb 4-1: SerialNumber: syz [ 1626.065987][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1626.073355][T27219] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1626.082617][T27219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1626.090703][T27219] usb 3-1: SerialNumber: syz [ 1626.099307][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1626.129909][T30977] hub 4-1:250.228: bad descriptor, ignoring hub [ 1626.130621][ T3660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1626.136725][T30977] hub: probe of 4-1:250.228 failed with error -5 [ 1626.151905][ T3660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1626.161063][ T3692] UDC core: couldn't find an available UDC or it's busy: -16 [ 1626.168583][ T3692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1626.180043][T27219] hub 3-1:250.228: bad descriptor, ignoring hub [ 1626.186637][T27219] hub: probe of 3-1:250.228 failed with error -5 [ 1626.570910][ T26] audit: type=1800 audit(1636531018.162:354): pid=3649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13951 res=0 errno=0 [ 1626.623288][ T26] audit: type=1800 audit(1636531018.212:355): pid=3660 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13952 res=0 errno=0 [ 1626.749940][ T3660] UDC core: couldn't find an available UDC or it's busy: -16 [ 1626.757510][ T3660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1629.380013][ T2607] usb 5-1: USB disconnect, device number 31 [ 1629.387167][ T8243] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:57:01 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1629.439294][ T8243] usb 6-1: USB disconnect, device number 43 [ 1629.447714][ T9426] usblp 2-1:250.228: usblp2: USB Bidirectional printer dev 66 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1629.466137][T20209] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1629.467200][ T8243] usblp1: removed [ 1629.480170][T30977] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1629.495883][T27219] usblp 3-1:250.228: usblp4: USB Bidirectional printer dev 86 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1629.496038][ T2607] usblp0: removed 07:57:01 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:01 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="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", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "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"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r5, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) [ 1629.649876][T27219] usb 3-1: USB disconnect, device number 86 [ 1629.658269][ T9426] usb 2-1: USB disconnect, device number 66 [ 1629.692699][T27219] usblp4: removed [ 1629.715857][ T9426] usblp2: removed 07:57:01 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="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", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "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"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r5, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:57:01 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:01 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="9a625b40a53afc4b1c3427418845dcc7a21e2ad134c382a764be0f424692c951c4bd602bd7feedd68bf9d3b3dd8c00eea29ddc0ca999a80ea979da1e4bfc53a788f473be3b2fe12c39b6ee56e0dd5e1e70950b8861ba9a7bcf9185f581fa8e3ce9d51eaa5ab53c942e7ac6e70392867155ccf7a634f7b600354a64e5f3cb2a0a57ea9b36a2e66af20f8daf4f36b810ffc7221aa4e20afb896c5f765c4a809f79036a713ccb3f1de2c272a1ab208de55283b7a3986b37357f7bccbfbdfa71489794e0a678c7ec929b1858ae8839773e645a8546bacd4970175be7464bcf42e458734faa1b3941c180bd41940f62d366360ca4efdb02cdf6fdc64de6d05b709a41b236dec68dedc34a0cb97906f0ff94ae5c4065c4cb383400ce97782ec9b960ed1444c06a88c0b712fe712673fabfcae169eb499b86bc2cc03f69d50e71b95241a3388c4c", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "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"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r5, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1630.009116][ T8243] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1630.138901][ T2607] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1630.169288][T30977] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 1630.195911][T20209] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 1630.220169][T27219] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1630.269486][ T8243] usb 6-1: Using ep0 maxpacket: 8 [ 1630.289133][ T9426] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1630.378699][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1630.388766][ T8243] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1630.398103][ T8243] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1630.407105][ T8243] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1630.416536][ T8243] usb 6-1: config 250 has no interface number 0 [ 1630.423132][ T8243] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1630.434767][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1630.445222][ T8243] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1630.448697][T30977] usb 4-1: Using ep0 maxpacket: 8 [ 1630.455673][ T8243] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1630.455708][ T8243] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1630.481690][T20209] usb 1-1: Using ep0 maxpacket: 8 [ 1630.509718][T27219] usb 3-1: Using ep0 maxpacket: 8 [ 1630.528808][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1630.537368][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1630.546654][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1630.548720][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1630.555909][ T2607] usb 5-1: config 250 has no interface number 0 [ 1630.567248][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1630.578756][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1630.589535][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1630.600091][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1630.613738][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1630.629352][ T8243] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1630.638521][ T8243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1630.646719][ T8243] usb 6-1: SerialNumber: syz [ 1630.663521][ T3758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.672682][ T3758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.679160][ T3725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.694749][ T3725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.712114][T27219] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1630.714505][ T3750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.720699][T27219] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1630.736489][T27219] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1630.746049][T27219] usb 3-1: config 250 has no interface number 0 [ 1630.752502][T27219] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1630.759122][ T3750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.764289][T27219] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1630.771993][ T8243] hub 6-1:250.228: bad descriptor, ignoring hub [ 1630.781709][T27219] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1630.781740][T27219] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1630.787961][ T8243] hub: probe of 6-1:250.228 failed with error -5 [ 1630.798470][T27219] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1630.825433][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1630.833922][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1630.842837][ T9426] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1630.852126][ T9426] usb 2-1: config 250 has no interface number 0 [ 1630.858401][ T9426] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1630.869947][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1630.880616][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1630.891291][ T9426] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1630.904912][ T9426] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1630.939045][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1630.948900][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1630.956901][ T2607] usb 5-1: SerialNumber: syz [ 1630.979716][ T3740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.987005][ T3740] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1630.994723][ T8243] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1631.001473][T27219] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1631.015268][T27219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1631.023475][T27219] usb 3-1: SerialNumber: syz [ 1631.029914][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1631.039185][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1631.039496][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1631.047162][ T9426] usb 2-1: SerialNumber: syz [ 1631.058231][ T2607] hub: probe of 5-1:250.228 failed with error -5 [ 1631.072963][ T3741] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.095425][ T3741] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.098449][ T3758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.126700][ T3757] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.140567][ T3750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.145225][ T3757] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.149590][ T3750] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.177646][ T3758] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1631.189837][T27219] hub 3-1:250.228: bad descriptor, ignoring hub [ 1631.196213][T27219] hub: probe of 3-1:250.228 failed with error -5 [ 1631.203815][ T9426] hub 2-1:250.228: bad descriptor, ignoring hub [ 1631.210312][ T9426] hub: probe of 2-1:250.228 failed with error -5 [ 1631.435158][ T26] audit: type=1800 audit(1636531023.022:356): pid=3758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=13935 res=0 errno=0 [ 1631.505258][ T26] audit: type=1800 audit(1636531023.092:357): pid=3750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13960 res=0 errno=0 [ 1631.639488][ T26] audit: type=1800 audit(1636531023.212:358): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13894 res=0 errno=0 [ 1631.688946][ T9168] usb 1-1: USB disconnect, device number 28 [ 1631.719715][ T3815] UDC core: couldn't find an available UDC or it's busy: -16 [ 1631.727399][ T3815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1631.740091][ T3816] UDC core: couldn't find an available UDC or it's busy: -16 [ 1631.747673][ T3816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1631.769086][T31752] usb 4-1: USB disconnect, device number 24 [ 1632.131622][ T8243] usb 6-1: USB disconnect, device number 44 [ 1632.138764][ T2607] usblp 5-1:250.228: usblp2: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1632.139491][T27219] usblp 3-1:250.228: usblp4: USB Bidirectional printer dev 87 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1632.165389][ T9426] usblp 2-1:250.228: usblp5: USB Bidirectional printer dev 67 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1632.182054][ T9168] usblp3: removed [ 1632.186663][T31752] usblp1: removed [ 1632.192442][ T8243] usblp0: removed [ 1632.229881][ T9426] usb 2-1: USB disconnect, device number 67 [ 1632.238268][T27219] usb 3-1: USB disconnect, device number 87 [ 1632.239383][ T2607] usb 5-1: USB disconnect, device number 32 [ 1632.284033][ T9426] usblp5: removed [ 1632.287969][ T2607] usblp2: removed [ 1632.315788][T27219] usblp4: removed 07:57:04 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:04 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:57:04 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:04 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 1) 07:57:04 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) readv(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="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", 0x144, 0x0, &(0x7f0000000440)={0x2, 0x13a, {0x0, 0xc, 0x2e, "12b226782b88c9f078ebae52b9c80117748ddf78d0efcb0d5aea2c8f1930c0384165adcd821812bcd465d6679992", 0xff, "bcfec6d80b2dc2880d4d534dda51730b2067036d1859f110ca338bb0837cac877099f41ffd1ee8bde53b31c5d32a4246377bf104f184e07352ea6d683f4bf960ea8a2e97b4d3345bb5c652d22bd5fcf1790e70b4c8c9f39ab08e89a0e24cc69e5fdbafbb1681fc8033210d996e84ba6fa5da11ae09322fa694c8cfa8639548631cca8dc6acad57ddaedbd1a592d6ea33e2e6766280eb7c06a5751b57b33f0e35372034e98af9b5afcd49cc7599acd3445cb9dcb53a836ef70d566349774777df82c1beb042cadccc54b4861125cac25e36496fd2ae1b51ae3ecf3e69742840ed78f70bf09c32222c4bb991e94e05e4363eb51524559792e9382c1ff011c194"}, 0x47, "84ac3f96d3dccf1dff3dd5556f1d78d26fdb53d9f9cf60641af7ecf6e9fbede63fb2ffc1bfe1e583886fba92b0b56276c77ad27d1c8f7dc96e9ceb604efad3cc2dfdeb932d6db6"}, 0x18d}) r5 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r5, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) [ 1632.817619][ T3878] FAULT_INJECTION: forcing a failure. [ 1632.817619][ T3878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.831097][ T3878] CPU: 1 PID: 3878 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1632.839517][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.849571][ T3878] Call Trace: [ 1632.852846][ T3878] [ 1632.855774][ T3878] dump_stack_lvl+0xcd/0x134 [ 1632.860379][ T3878] should_fail.cold+0x5/0xa [ 1632.864889][ T3878] _copy_from_user+0x2c/0x180 [ 1632.869576][ T3878] __copy_msghdr_from_user+0x91/0x4b0 [ 1632.874958][ T3878] ? __ia32_sys_shutdown+0x70/0x70 [ 1632.880072][ T3878] ? mark_lock+0xef/0x17b0 [ 1632.884493][ T3878] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1632.890574][ T3878] sendmsg_copy_msghdr+0xa1/0x160 [ 1632.895606][ T3878] ? do_recvmmsg+0x6d0/0x6d0 [ 1632.900291][ T3878] ? lock_chain_count+0x20/0x20 [ 1632.905151][ T3878] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1632.911377][ T3878] ___sys_sendmsg+0xc6/0x170 [ 1632.915992][ T3878] ? sendmsg_copy_msghdr+0x160/0x160 [ 1632.921304][ T3878] ? __fget_files+0x21b/0x3e0 [ 1632.926002][ T3878] ? lock_downgrade+0x6e0/0x6e0 [ 1632.930877][ T3878] ? __fget_files+0x23d/0x3e0 [ 1632.935568][ T3878] ? __fget_light+0xea/0x280 [ 1632.940171][ T3878] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1632.946436][ T3878] __sys_sendmsg+0xe5/0x1b0 [ 1632.950961][ T3878] ? __sys_sendmsg_sock+0x30/0x30 [ 1632.956016][ T3878] ? syscall_enter_from_user_mode+0x21/0x70 [ 1632.961936][ T3878] do_syscall_64+0x35/0xb0 [ 1632.966378][ T3878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1632.972776][ T3878] RIP: 0033:0x7f238b7b8ae9 [ 1632.977201][ T3878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.996827][ T3878] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.005260][ T3878] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1633.013254][ T3878] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1633.021242][ T3878] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.029406][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.037389][ T3878] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1633.045388][ T3878] 07:57:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 2) [ 1633.198918][ T2607] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1633.206789][T31752] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1633.219185][T27219] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1633.226954][ T9426] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1633.295462][ T3901] FAULT_INJECTION: forcing a failure. [ 1633.295462][ T3901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.309071][ T3901] CPU: 1 PID: 3901 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1633.317423][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.327493][ T3901] Call Trace: [ 1633.330772][ T3901] [ 1633.333702][ T3901] dump_stack_lvl+0xcd/0x134 [ 1633.338400][ T3901] should_fail.cold+0x5/0xa [ 1633.342931][ T3901] _copy_from_user+0x2c/0x180 [ 1633.347625][ T3901] iovec_from_user+0x246/0x3d0 [ 1633.352404][ T3901] __import_iovec+0x65/0x5c0 [ 1633.357003][ T3901] import_iovec+0x10c/0x150 [ 1633.361586][ T3901] sendmsg_copy_msghdr+0x12d/0x160 [ 1633.366692][ T3901] ? do_recvmmsg+0x6d0/0x6d0 [ 1633.371272][ T3901] ? lock_chain_count+0x20/0x20 [ 1633.376206][ T3901] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1633.382188][ T3901] ___sys_sendmsg+0xc6/0x170 [ 1633.386767][ T3901] ? sendmsg_copy_msghdr+0x160/0x160 [ 1633.392047][ T3901] ? __fget_files+0x21b/0x3e0 [ 1633.396728][ T3901] ? lock_downgrade+0x6e0/0x6e0 [ 1633.401584][ T3901] ? __fget_files+0x23d/0x3e0 [ 1633.406274][ T3901] ? __fget_light+0xea/0x280 [ 1633.410886][ T3901] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1633.417378][ T3901] __sys_sendmsg+0xe5/0x1b0 [ 1633.421896][ T3901] ? __sys_sendmsg_sock+0x30/0x30 [ 1633.426929][ T3901] ? syscall_enter_from_user_mode+0x21/0x70 [ 1633.432820][ T3901] do_syscall_64+0x35/0xb0 [ 1633.437225][ T3901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1633.443114][ T3901] RIP: 0033:0x7f238b7b8ae9 [ 1633.447530][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.467148][ T3901] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.475557][ T3901] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1633.483519][ T3901] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 07:57:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 3) [ 1633.491486][ T3901] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.499455][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.507435][ T3901] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1633.515421][ T3901] [ 1633.578061][ T3905] FAULT_INJECTION: forcing a failure. [ 1633.578061][ T3905] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.589392][ T8243] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1633.591105][ T3905] CPU: 0 PID: 3905 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1633.606699][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.616756][ T3905] Call Trace: [ 1633.620036][ T3905] [ 1633.622965][ T3905] dump_stack_lvl+0xcd/0x134 [ 1633.627571][ T3905] should_fail.cold+0x5/0xa [ 1633.632085][ T3905] should_failslab+0x5/0x10 [ 1633.636593][ T3905] kmem_cache_alloc_node+0x65/0x3f0 [ 1633.638752][ T2607] usb 6-1: Using ep0 maxpacket: 8 [ 1633.641779][ T3905] ? __alloc_skb+0x215/0x340 [ 1633.641816][ T3905] __alloc_skb+0x215/0x340 [ 1633.641841][ T3905] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1633.641876][ T3905] netlink_sendmsg+0x967/0xda0 [ 1633.646988][T31752] usb 5-1: Using ep0 maxpacket: 8 [ 1633.651648][ T3905] ? netlink_unicast+0x7d0/0x7d0 [ 1633.651677][ T3905] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1633.651704][ T3905] ? netlink_unicast+0x7d0/0x7d0 [ 1633.651725][ T3905] sock_sendmsg+0xcf/0x120 [ 1633.692752][ T3905] ____sys_sendmsg+0x6e8/0x810 [ 1633.697523][ T3905] ? kernel_sendmsg+0x50/0x50 [ 1633.702201][ T3905] ? do_recvmmsg+0x6d0/0x6d0 [ 1633.706786][ T3905] ? lock_chain_count+0x20/0x20 [ 1633.711850][ T3905] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1633.717910][ T3905] ___sys_sendmsg+0xf3/0x170 [ 1633.722490][ T3905] ? sendmsg_copy_msghdr+0x160/0x160 [ 1633.727785][ T3905] ? __fget_files+0x21b/0x3e0 [ 1633.732468][ T3905] ? lock_downgrade+0x6e0/0x6e0 [ 1633.737336][ T3905] ? __fget_files+0x23d/0x3e0 [ 1633.742008][ T3905] ? __fget_light+0xea/0x280 [ 1633.746588][ T3905] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1633.752825][ T3905] __sys_sendmsg+0xe5/0x1b0 [ 1633.757345][ T3905] ? __sys_sendmsg_sock+0x30/0x30 [ 1633.758727][ T2607] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1633.762383][ T3905] ? syscall_enter_from_user_mode+0x21/0x70 [ 1633.762422][ T3905] do_syscall_64+0x35/0xb0 [ 1633.762445][ T3905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1633.770856][ T2607] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1633.776621][ T3905] RIP: 0033:0x7f238b7b8ae9 [ 1633.781097][ T2607] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1633.787133][ T3905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.796021][ T2607] usb 6-1: config 250 has no interface number 0 [ 1633.800330][ T3905] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.800354][ T3905] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1633.800369][ T3905] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1633.809751][ T2607] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1633.829279][ T3905] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.829293][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.829306][ T3905] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1633.829332][ T3905] [ 1633.888706][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1633.895858][ T2607] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1633.899062][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1633.903998][ T2607] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1633.904028][ T2607] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1633.944376][ T2607] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1633.958734][T31752] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1633.967213][T31752] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1633.976683][T31752] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1633.985942][T31752] usb 5-1: config 250 has no interface number 0 [ 1633.992243][T31752] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1634.003821][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1634.014285][T31752] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 07:57:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 4) [ 1634.024763][T31752] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1634.038281][T31752] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1634.050877][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1634.059280][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1634.068129][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1634.068691][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1634.077443][T27219] usb 1-1: config 250 has no interface number 0 [ 1634.088669][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1634.092603][ T2607] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1634.100304][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1634.100335][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1634.100369][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1634.100399][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1634.109431][ T2607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.120927][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1634.130327][ T2607] usb 6-1: SerialNumber: syz [ 1634.143753][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1634.143777][ T9426] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1634.175324][ T3909] FAULT_INJECTION: forcing a failure. [ 1634.175324][ T3909] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.180590][ T9426] usb 2-1: config 250 has no interface number 0 [ 1634.180636][ T9426] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1634.180664][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1634.180690][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1634.190221][ T3909] CPU: 1 PID: 3909 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1634.202768][ T9426] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1634.208932][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.208946][ T3909] Call Trace: [ 1634.208954][ T3909] [ 1634.208962][ T3909] dump_stack_lvl+0xcd/0x134 [ 1634.220402][ T9426] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1634.230755][ T3909] should_fail.cold+0x5/0xa [ 1634.230783][ T3909] should_failslab+0x5/0x10 [ 1634.230805][ T3909] __kmalloc_node_track_caller+0x7d/0x360 [ 1634.230827][ T3909] ? netlink_sendmsg+0x967/0xda0 [ 1634.230852][ T3909] __alloc_skb+0xde/0x340 [ 1634.230880][ T3909] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1634.230912][ T3909] netlink_sendmsg+0x967/0xda0 [ 1634.230936][ T3909] ? netlink_unicast+0x7d0/0x7d0 [ 1634.230961][ T3909] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1634.230989][ T3909] ? netlink_unicast+0x7d0/0x7d0 [ 1634.231010][ T3909] sock_sendmsg+0xcf/0x120 [ 1634.231035][ T3909] ____sys_sendmsg+0x6e8/0x810 [ 1634.231059][ T3909] ? kernel_sendmsg+0x50/0x50 [ 1634.355747][ T3909] ? do_recvmmsg+0x6d0/0x6d0 [ 1634.360335][ T3909] ? lock_chain_count+0x20/0x20 [ 1634.365176][ T3909] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1634.371154][ T3909] ___sys_sendmsg+0xf3/0x170 [ 1634.375738][ T3909] ? sendmsg_copy_msghdr+0x160/0x160 [ 1634.381019][ T3909] ? __fget_files+0x21b/0x3e0 [ 1634.385689][ T3909] ? lock_downgrade+0x6e0/0x6e0 [ 1634.390537][ T3909] ? __fget_files+0x23d/0x3e0 [ 1634.395209][ T3909] ? __fget_light+0xea/0x280 [ 1634.399787][ T3909] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1634.406022][ T3909] __sys_sendmsg+0xe5/0x1b0 [ 1634.410515][ T3909] ? __sys_sendmsg_sock+0x30/0x30 [ 1634.415539][ T3909] ? syscall_enter_from_user_mode+0x21/0x70 [ 1634.421431][ T3909] do_syscall_64+0x35/0xb0 [ 1634.425836][ T3909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.431726][ T3909] RIP: 0033:0x7f238b7b8ae9 [ 1634.436126][ T3909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1634.455722][ T3909] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1634.464123][ T3909] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1634.472082][ T3909] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1634.480035][ T3909] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1634.487992][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.496034][ T3909] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1634.504002][ T3909] [ 1634.509041][T31752] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1634.518169][T31752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.526291][T31752] usb 5-1: SerialNumber: syz [ 1634.549044][ T3874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1634.556102][ T3874] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1634.569725][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1634.578108][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1634.587276][ T8243] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1634.596543][ T8243] usb 3-1: config 250 has no interface number 0 [ 1634.602866][ T8243] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1634.614737][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1634.625245][ T8243] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1634.635719][ T8243] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 07:57:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 5) [ 1634.649245][ T8243] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1634.659093][ T3868] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1634.666005][ T3868] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1634.675619][T31752] hub 5-1:250.228: bad descriptor, ignoring hub [ 1634.681955][T31752] hub: probe of 5-1:250.228 failed with error -5 [ 1634.729849][ T2607] hub 6-1:250.228: bad descriptor, ignoring hub [ 1634.736406][ T2607] hub: probe of 6-1:250.228 failed with error -5 [ 1634.761546][ T3921] FAULT_INJECTION: forcing a failure. [ 1634.761546][ T3921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.774699][ T3921] CPU: 1 PID: 3921 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1634.778847][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1634.783023][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.783041][ T3921] Call Trace: [ 1634.783049][ T3921] [ 1634.783058][ T3921] dump_stack_lvl+0xcd/0x134 [ 1634.783091][ T3921] should_fail.cold+0x5/0xa [ 1634.783118][ T3921] _copy_from_iter+0x389/0x1320 [ 1634.792157][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.802165][ T3921] ? hash_and_copy_to_iter+0x200/0x200 [ 1634.802189][ T3921] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1634.802213][ T3921] ? memset+0x20/0x40 [ 1634.805478][T27219] usb 1-1: SerialNumber: syz [ 1634.808386][ T3921] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1634.819113][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1634.822249][ T3921] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1634.822279][ T3921] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1634.822307][ T3921] ? __phys_addr+0xc4/0x140 [ 1634.822332][ T3921] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1634.830312][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1634.835732][ T3921] ? __phys_addr_symbol+0x2c/0x70 [ 1634.841594][ T9426] usb 2-1: SerialNumber: syz [ 1634.845218][ T3921] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1634.911316][ T3921] ? __check_object_size+0x16e/0x3f0 [ 1634.916643][ T3921] netlink_sendmsg+0x7d5/0xda0 [ 1634.921417][ T3921] ? netlink_unicast+0x7d0/0x7d0 [ 1634.926365][ T3921] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1634.932596][ T3921] ? netlink_unicast+0x7d0/0x7d0 [ 1634.937517][ T3921] sock_sendmsg+0xcf/0x120 [ 1634.941922][ T3921] ____sys_sendmsg+0x6e8/0x810 [ 1634.946677][ T3921] ? kernel_sendmsg+0x50/0x50 [ 1634.951356][ T3921] ? do_recvmmsg+0x6d0/0x6d0 [ 1634.955956][ T3921] ? lock_chain_count+0x20/0x20 [ 1634.960800][ T3921] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1634.966787][ T3921] ___sys_sendmsg+0xf3/0x170 [ 1634.971393][ T3921] ? sendmsg_copy_msghdr+0x160/0x160 [ 1634.976689][ T3921] ? __fget_files+0x21b/0x3e0 [ 1634.981369][ T3921] ? lock_downgrade+0x6e0/0x6e0 [ 1634.986215][ T3921] ? __fget_files+0x23d/0x3e0 [ 1634.990885][ T3921] ? __fget_light+0xea/0x280 [ 1634.995461][ T3921] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1635.001699][ T3921] __sys_sendmsg+0xe5/0x1b0 [ 1635.006428][ T3921] ? __sys_sendmsg_sock+0x30/0x30 [ 1635.011809][ T3921] ? syscall_enter_from_user_mode+0x21/0x70 [ 1635.017708][ T3921] do_syscall_64+0x35/0xb0 [ 1635.022113][ T3921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1635.028007][ T3921] RIP: 0033:0x7f238b7b8ae9 [ 1635.032421][ T3921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.052036][ T3921] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.060443][ T3921] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1635.068651][ T3921] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1635.076698][ T3921] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.084656][ T3921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.092627][ T3921] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1635.100705][ T3921] [ 1635.120298][T31752] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1635.136505][ T2607] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1635.149735][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1635.154527][ T3872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1635.158918][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1635.169609][ T3883] raw-gadget gadget: fail, usb_ep_enable returned -22 07:57:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 6) [ 1635.173516][ T8243] usb 3-1: SerialNumber: syz [ 1635.201035][ T3895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1635.209135][ T3895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1635.221628][ T3883] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1635.235639][ T3872] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1635.243916][ T8243] hub 3-1:250.228: bad descriptor, ignoring hub [ 1635.250592][ T8243] hub: probe of 3-1:250.228 failed with error -5 [ 1635.268950][ T3936] FAULT_INJECTION: forcing a failure. [ 1635.268950][ T3936] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.282338][ T3936] CPU: 1 PID: 3936 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1635.289598][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1635.290677][ T3936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.290694][ T3936] Call Trace: [ 1635.290702][ T3936] [ 1635.290710][ T3936] dump_stack_lvl+0xcd/0x134 [ 1635.290743][ T3936] should_fail.cold+0x5/0xa [ 1635.296975][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1635.307186][ T3936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1635.307218][ T3936] should_failslab+0x5/0x10 [ 1635.307240][ T3936] __kmalloc+0x72/0x340 [ 1635.307264][ T3936] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1635.307292][ T3936] genl_family_rcv_msg_doit+0xda/0x320 [ 1635.319375][ T9426] hub 2-1:250.228: bad descriptor, ignoring hub [ 1635.322819][ T3936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1635.322852][ T3936] ? mutex_lock_io_nested+0x1150/0x1150 [ 1635.322877][ T3936] ? __lock_acquire+0x162f/0x54a0 [ 1635.329316][ T9426] hub: probe of 2-1:250.228 failed with error -5 [ 1635.336521][ T3936] ? memset+0x20/0x40 [ 1635.392323][ T3936] ? genl_op_from_small+0x23/0x3c0 [ 1635.397459][ T3936] ? genl_get_cmd+0x3cf/0x480 [ 1635.402153][ T3936] genl_rcv_msg+0x328/0x580 [ 1635.406678][ T3936] ? genl_get_cmd+0x480/0x480 [ 1635.411378][ T3936] ? nbd_start_device+0xd10/0xd10 [ 1635.416440][ T3936] ? lock_release+0x720/0x720 [ 1635.421146][ T3936] netlink_rcv_skb+0x153/0x420 [ 1635.425930][ T3936] ? genl_get_cmd+0x480/0x480 [ 1635.430625][ T3936] ? netlink_ack+0xa60/0xa60 [ 1635.435234][ T3936] ? netlink_deliver_tap+0x1b1/0xc30 [ 1635.440542][ T3936] ? _copy_from_iter+0x12b/0x1320 [ 1635.445587][ T3936] genl_rcv+0x24/0x40 [ 1635.449582][ T3936] netlink_unicast+0x533/0x7d0 [ 1635.454364][ T3936] ? netlink_attachskb+0x880/0x880 [ 1635.459494][ T3936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1635.465847][ T3936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1635.472117][ T3936] ? __phys_addr_symbol+0x2c/0x70 [ 1635.477161][ T3936] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1635.482903][ T3936] ? __check_object_size+0x16e/0x3f0 [ 1635.488212][ T3936] netlink_sendmsg+0x86d/0xda0 [ 1635.493000][ T3936] ? netlink_unicast+0x7d0/0x7d0 [ 1635.497958][ T3936] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1635.504221][ T3936] ? netlink_unicast+0x7d0/0x7d0 [ 1635.509171][ T3936] sock_sendmsg+0xcf/0x120 [ 1635.513667][ T3936] ____sys_sendmsg+0x6e8/0x810 [ 1635.518442][ T3936] ? kernel_sendmsg+0x50/0x50 [ 1635.523130][ T3936] ? do_recvmmsg+0x6d0/0x6d0 [ 1635.527739][ T3936] ? lock_chain_count+0x20/0x20 [ 1635.532615][ T3936] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1635.538625][ T3936] ___sys_sendmsg+0xf3/0x170 [ 1635.543234][ T3936] ? sendmsg_copy_msghdr+0x160/0x160 [ 1635.548539][ T3936] ? __fget_files+0x21b/0x3e0 [ 1635.553229][ T3936] ? lock_downgrade+0x6e0/0x6e0 [ 1635.558105][ T3936] ? __fget_files+0x23d/0x3e0 [ 1635.562806][ T3936] ? __fget_light+0xea/0x280 [ 1635.567582][ T3936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1635.573840][ T3936] __sys_sendmsg+0xe5/0x1b0 [ 1635.578356][ T3936] ? __sys_sendmsg_sock+0x30/0x30 [ 1635.583403][ T3936] ? syscall_enter_from_user_mode+0x21/0x70 [ 1635.589321][ T3936] do_syscall_64+0x35/0xb0 [ 1635.593746][ T3936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1635.600428][ T3936] RIP: 0033:0x7f238b7b8ae9 [ 1635.604849][ T3936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.624554][ T3936] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.632975][ T3936] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1635.640958][ T3936] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1635.648941][ T3936] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.657012][ T3936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.664998][ T3936] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1635.672993][ T3936] 07:57:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 7) [ 1635.808358][ T3950] FAULT_INJECTION: forcing a failure. [ 1635.808358][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.821161][ T3950] CPU: 1 PID: 3950 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1635.829680][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.839739][ T3950] Call Trace: [ 1635.843102][ T3950] [ 1635.846017][ T3950] dump_stack_lvl+0xcd/0x134 [ 1635.850609][ T3950] should_fail.cold+0x5/0xa [ 1635.855106][ T3950] ? nbd_dev_add+0x4d/0xcd0 [ 1635.859604][ T3950] should_failslab+0x5/0x10 [ 1635.864102][ T3950] kmem_cache_alloc_trace+0x55/0x2c0 [ 1635.869383][ T3950] ? idr_get_next+0xe9/0x150 [ 1635.873969][ T3950] nbd_dev_add+0x4d/0xcd0 [ 1635.878294][ T3950] nbd_genl_connect+0x11f3/0x1930 [ 1635.883316][ T3950] ? nbd_start_device+0xd10/0xd10 [ 1635.888333][ T3950] ? __nla_parse+0x3d/0x50 [ 1635.892741][ T3950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1635.898983][ T3950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1635.906351][ T3950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1635.913647][ T3950] genl_family_rcv_msg_doit+0x228/0x320 [ 1635.919196][ T3950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1635.926561][ T3950] ? mutex_lock_io_nested+0x1150/0x1150 [ 1635.932116][ T3950] ? genl_op_from_small+0x23/0x3c0 [ 1635.937224][ T3950] ? genl_get_cmd+0x3cf/0x480 [ 1635.941899][ T3950] genl_rcv_msg+0x328/0x580 [ 1635.946398][ T3950] ? genl_get_cmd+0x480/0x480 [ 1635.951065][ T3950] ? nbd_start_device+0xd10/0xd10 [ 1635.956087][ T3950] ? lock_release+0x720/0x720 [ 1635.960846][ T3950] netlink_rcv_skb+0x153/0x420 [ 1635.965604][ T3950] ? genl_get_cmd+0x480/0x480 [ 1635.970361][ T3950] ? netlink_ack+0xa60/0xa60 [ 1635.974950][ T3950] ? netlink_deliver_tap+0x1b1/0xc30 [ 1635.980240][ T3950] ? _copy_from_iter+0x12b/0x1320 [ 1635.985359][ T3950] genl_rcv+0x24/0x40 [ 1635.989352][ T3950] netlink_unicast+0x533/0x7d0 [ 1635.994117][ T3950] ? netlink_attachskb+0x880/0x880 [ 1635.999216][ T3950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1636.005451][ T3950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1636.011681][ T3950] ? __phys_addr_symbol+0x2c/0x70 [ 1636.016694][ T3950] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1636.022405][ T3950] ? __check_object_size+0x16e/0x3f0 [ 1636.027684][ T3950] netlink_sendmsg+0x86d/0xda0 [ 1636.032438][ T3950] ? netlink_unicast+0x7d0/0x7d0 [ 1636.037366][ T3950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1636.043600][ T3950] ? netlink_unicast+0x7d0/0x7d0 [ 1636.048526][ T3950] sock_sendmsg+0xcf/0x120 [ 1636.052932][ T3950] ____sys_sendmsg+0x6e8/0x810 [ 1636.057686][ T3950] ? kernel_sendmsg+0x50/0x50 [ 1636.062435][ T3950] ? do_recvmmsg+0x6d0/0x6d0 [ 1636.067022][ T3950] ? lock_chain_count+0x20/0x20 [ 1636.072036][ T3950] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1636.078014][ T3950] ___sys_sendmsg+0xf3/0x170 [ 1636.082598][ T3950] ? sendmsg_copy_msghdr+0x160/0x160 [ 1636.087875][ T3950] ? __fget_files+0x21b/0x3e0 [ 1636.092543][ T3950] ? lock_downgrade+0x6e0/0x6e0 [ 1636.097393][ T3950] ? __fget_files+0x23d/0x3e0 [ 1636.102065][ T3950] ? __fget_light+0xea/0x280 [ 1636.106818][ T3950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1636.113053][ T3950] __sys_sendmsg+0xe5/0x1b0 [ 1636.117551][ T3950] ? __sys_sendmsg_sock+0x30/0x30 [ 1636.122579][ T3950] ? syscall_enter_from_user_mode+0x21/0x70 [ 1636.128645][ T3950] do_syscall_64+0x35/0xb0 [ 1636.133049][ T3950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1636.138934][ T3950] RIP: 0033:0x7f238b7b8ae9 [ 1636.143334][ T3950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.162927][ T3950] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.171329][ T3950] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1636.179684][ T3950] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1636.187656][ T3950] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.195615][ T3950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.203659][ T3950] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1636.211635][ T3950] [ 1636.215224][ T3950] nbd: failed to add new device [ 1636.226943][T30977] usb 6-1: USB disconnect, device number 45 [ 1636.260022][ T26] audit: type=1800 audit(1636531027.842:359): pid=3895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13900 res=0 errno=0 [ 1636.442143][ T3895] UDC core: couldn't find an available UDC or it's busy: -16 [ 1636.451124][ T3895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1636.609145][ T3874] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 1636.848792][ T3874] usb 5-1: Using ep0 maxpacket: 8 [ 1641.868758][ T3874] usb 5-1: device descriptor read/all, error -110 [ 1642.048734][ T3874] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 1642.228694][ T3874] usb 5-1: device descriptor read/64, error -32 [ 1642.498839][ T3874] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 1642.618714][ T3874] usb 5-1: device descriptor read/8, error -32 [ 1642.889107][ T3874] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 1642.998797][ T3874] usb 5-1: device descriptor read/8, error -32 [ 1643.129745][ T2607] usb 5-1: USB disconnect, device number 33 [ 1643.137253][ T8243] usblp 3-1:250.228: usblp2: USB Bidirectional printer dev 88 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1643.158840][T30977] usblp1: removed [ 1643.162622][ T2607] usblp0: removed [ 1643.168263][T27219] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:57:14 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:14 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:14 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 8) 07:57:14 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:14 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1643.181394][ T9426] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 68 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1643.221379][ T8243] usb 3-1: USB disconnect, device number 88 [ 1643.258769][ T9426] usb 2-1: USB disconnect, device number 68 [ 1643.279161][ T8243] usblp2: removed [ 1643.299893][ T9426] usblp1: removed [ 1643.365560][ T3997] FAULT_INJECTION: forcing a failure. [ 1643.365560][ T3997] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.378609][ T3997] CPU: 0 PID: 3997 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1643.386942][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.396995][ T3997] Call Trace: [ 1643.400287][ T3997] [ 1643.403238][ T3997] dump_stack_lvl+0xcd/0x134 [ 1643.407861][ T3997] should_fail.cold+0x5/0xa [ 1643.412383][ T3997] ? blk_mq_realloc_tag_set_tags.part.0+0x81/0x190 [ 1643.418893][ T3997] should_failslab+0x5/0x10 [ 1643.423403][ T3997] __kmalloc_node+0x75/0x390 [ 1643.428004][ T3997] blk_mq_realloc_tag_set_tags.part.0+0x81/0x190 [ 1643.434341][ T3997] blk_mq_alloc_tag_set+0x63b/0x12b0 [ 1643.439637][ T3997] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1643.445106][ T3997] nbd_dev_add+0x2b1/0xcd0 [ 1643.449533][ T3997] nbd_genl_connect+0x11f3/0x1930 [ 1643.454577][ T3997] ? nbd_start_device+0xd10/0xd10 [ 1643.459611][ T3997] ? __nla_parse+0x3d/0x50 [ 1643.464035][ T3997] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1643.470284][ T3997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1643.477663][ T3997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1643.484958][ T3997] genl_family_rcv_msg_doit+0x228/0x320 [ 1643.490513][ T3997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1643.497892][ T3997] ? mutex_lock_io_nested+0x1150/0x1150 [ 1643.503454][ T3997] ? genl_op_from_small+0x23/0x3c0 [ 1643.508571][ T3997] ? genl_get_cmd+0x3cf/0x480 [ 1643.513256][ T3997] genl_rcv_msg+0x328/0x580 [ 1643.517763][ T3997] ? genl_get_cmd+0x480/0x480 [ 1643.522448][ T3997] ? nbd_start_device+0xd10/0xd10 [ 1643.527492][ T3997] ? lock_release+0x720/0x720 [ 1643.532184][ T3997] netlink_rcv_skb+0x153/0x420 [ 1643.536952][ T3997] ? genl_get_cmd+0x480/0x480 [ 1643.541634][ T3997] ? netlink_ack+0xa60/0xa60 [ 1643.546237][ T3997] ? netlink_deliver_tap+0x1b1/0xc30 [ 1643.551542][ T3997] ? _copy_from_iter+0x12b/0x1320 [ 1643.556595][ T3997] genl_rcv+0x24/0x40 [ 1643.560588][ T3997] netlink_unicast+0x533/0x7d0 [ 1643.565359][ T3997] ? netlink_attachskb+0x880/0x880 [ 1643.570472][ T3997] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1643.576723][ T3997] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1643.582977][ T3997] ? __phys_addr_symbol+0x2c/0x70 [ 1643.588006][ T3997] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1643.593733][ T3997] ? __check_object_size+0x16e/0x3f0 [ 1643.599309][ T3997] netlink_sendmsg+0x86d/0xda0 [ 1643.604092][ T3997] ? netlink_unicast+0x7d0/0x7d0 [ 1643.609027][ T3997] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1643.615292][ T3997] ? netlink_unicast+0x7d0/0x7d0 [ 1643.620226][ T3997] sock_sendmsg+0xcf/0x120 [ 1643.624651][ T3997] ____sys_sendmsg+0x6e8/0x810 [ 1643.629410][ T3997] ? kernel_sendmsg+0x50/0x50 [ 1643.634071][ T3997] ? do_recvmmsg+0x6d0/0x6d0 [ 1643.638651][ T3997] ? lock_chain_count+0x20/0x20 [ 1643.643493][ T3997] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1643.649480][ T3997] ___sys_sendmsg+0xf3/0x170 [ 1643.654056][ T3997] ? sendmsg_copy_msghdr+0x160/0x160 [ 1643.659334][ T3997] ? __fget_files+0x21b/0x3e0 [ 1643.664241][ T3997] ? lock_downgrade+0x6e0/0x6e0 [ 1643.669313][ T3997] ? __fget_files+0x23d/0x3e0 [ 1643.673990][ T3997] ? __fget_light+0xea/0x280 [ 1643.678582][ T3997] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1643.685059][ T3997] __sys_sendmsg+0xe5/0x1b0 [ 1643.689570][ T3997] ? __sys_sendmsg_sock+0x30/0x30 [ 1643.694591][ T3997] ? syscall_enter_from_user_mode+0x21/0x70 [ 1643.700502][ T3997] do_syscall_64+0x35/0xb0 [ 1643.705298][ T3997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1643.711388][ T3997] RIP: 0033:0x7f238b7b8ae9 [ 1643.716051][ T3997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.735644][ T3997] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.744255][ T3997] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1643.752216][ T3997] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 07:57:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 9) [ 1643.760405][ T3997] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.768387][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.776358][ T3997] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1643.784532][ T3997] [ 1643.787627][ T3997] nbd: failed to add new device [ 1643.863868][ T4022] FAULT_INJECTION: forcing a failure. [ 1643.863868][ T4022] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.868934][ T2607] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1643.876850][ T4022] CPU: 0 PID: 4022 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1643.892435][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.902497][ T4022] Call Trace: [ 1643.905779][ T4022] [ 1643.908717][ T4022] dump_stack_lvl+0xcd/0x134 [ 1643.913321][ T4022] should_fail.cold+0x5/0xa [ 1643.917836][ T4022] ? blk_mq_alloc_tag_set+0x419/0x12b0 [ 1643.923302][ T4022] should_failslab+0x5/0x10 [ 1643.927798][ T4022] __kmalloc_node+0x75/0x390 [ 1643.932390][ T4022] blk_mq_alloc_tag_set+0x419/0x12b0 [ 1643.937689][ T4022] nbd_dev_add+0x2b1/0xcd0 [ 1643.942185][ T4022] nbd_genl_connect+0x11f3/0x1930 [ 1643.947287][ T4022] ? nbd_start_device+0xd10/0xd10 [ 1643.952375][ T4022] ? __nla_parse+0x3d/0x50 [ 1643.956779][ T4022] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1643.963027][ T4022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1643.970423][ T4022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1643.977705][ T4022] genl_family_rcv_msg_doit+0x228/0x320 [ 1643.983250][ T4022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1643.990638][ T4022] ? mutex_lock_io_nested+0x1150/0x1150 [ 1643.996178][ T4022] ? genl_op_from_small+0x23/0x3c0 [ 1644.001276][ T4022] ? genl_get_cmd+0x3cf/0x480 [ 1644.005947][ T4022] genl_rcv_msg+0x328/0x580 [ 1644.010436][ T4022] ? genl_get_cmd+0x480/0x480 [ 1644.015099][ T4022] ? nbd_start_device+0xd10/0xd10 [ 1644.020121][ T4022] ? lock_release+0x720/0x720 [ 1644.024788][ T4022] netlink_rcv_skb+0x153/0x420 [ 1644.029536][ T4022] ? genl_get_cmd+0x480/0x480 [ 1644.034197][ T4022] ? netlink_ack+0xa60/0xa60 [ 1644.039038][ T4022] ? netlink_deliver_tap+0x1b1/0xc30 [ 1644.044313][ T4022] ? _copy_from_iter+0x12b/0x1320 [ 1644.049326][ T4022] genl_rcv+0x24/0x40 [ 1644.053305][ T4022] netlink_unicast+0x533/0x7d0 [ 1644.058088][ T4022] ? netlink_attachskb+0x880/0x880 [ 1644.063202][ T4022] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.069447][ T4022] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.075681][ T4022] ? __phys_addr_symbol+0x2c/0x70 [ 1644.080706][ T4022] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1644.086411][ T4022] ? __check_object_size+0x16e/0x3f0 [ 1644.091691][ T4022] netlink_sendmsg+0x86d/0xda0 [ 1644.096447][ T4022] ? netlink_unicast+0x7d0/0x7d0 [ 1644.101385][ T4022] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1644.107619][ T4022] ? netlink_unicast+0x7d0/0x7d0 [ 1644.112556][ T4022] sock_sendmsg+0xcf/0x120 [ 1644.117240][ T4022] ____sys_sendmsg+0x6e8/0x810 [ 1644.122004][ T4022] ? kernel_sendmsg+0x50/0x50 [ 1644.126666][ T4022] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.131266][ T4022] ? lock_chain_count+0x20/0x20 [ 1644.136121][ T4022] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1644.142091][ T4022] ___sys_sendmsg+0xf3/0x170 [ 1644.146675][ T4022] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.151965][ T4022] ? __fget_files+0x21b/0x3e0 [ 1644.156629][ T4022] ? lock_downgrade+0x6e0/0x6e0 [ 1644.161481][ T4022] ? __fget_files+0x23d/0x3e0 [ 1644.166167][ T4022] ? __fget_light+0xea/0x280 [ 1644.170743][ T4022] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.177368][ T4022] __sys_sendmsg+0xe5/0x1b0 [ 1644.181859][ T4022] ? __sys_sendmsg_sock+0x30/0x30 [ 1644.187367][ T4022] ? syscall_enter_from_user_mode+0x21/0x70 [ 1644.193253][ T4022] do_syscall_64+0x35/0xb0 [ 1644.197895][ T4022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1644.203781][ T4022] RIP: 0033:0x7f238b7b8ae9 [ 1644.208199][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.227809][ T4022] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.236208][ T4022] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1644.244172][ T4022] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1644.252126][ T4022] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 07:57:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 10) [ 1644.260082][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.268038][ T4022] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1644.275999][ T4022] [ 1644.279094][ T4022] nbd: failed to add new device [ 1644.290911][ T9168] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1644.355670][ T4026] FAULT_INJECTION: forcing a failure. [ 1644.355670][ T4026] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.368926][ T4026] CPU: 0 PID: 4026 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1644.377261][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.387317][ T4026] Call Trace: [ 1644.390589][ T4026] [ 1644.393522][ T4026] dump_stack_lvl+0xcd/0x134 [ 1644.398123][ T4026] should_fail.cold+0x5/0xa [ 1644.402616][ T4026] ? blk_mq_init_tags+0x6a/0x170 [ 1644.407543][ T4026] should_failslab+0x5/0x10 [ 1644.412032][ T4026] kmem_cache_alloc_node_trace+0x59/0x310 [ 1644.417749][ T4026] blk_mq_init_tags+0x6a/0x170 [ 1644.422523][ T4026] blk_mq_alloc_rq_map+0x81/0x200 [ 1644.427535][ T4026] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1644.432817][ T4026] nbd_dev_add+0x2b1/0xcd0 [ 1644.437223][ T4026] nbd_genl_connect+0x11f3/0x1930 [ 1644.442245][ T4026] ? nbd_start_device+0xd10/0xd10 [ 1644.447274][ T4026] ? __nla_parse+0x3d/0x50 [ 1644.451881][ T4026] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1644.458110][ T4026] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1644.465466][ T4026] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1644.472741][ T4026] genl_family_rcv_msg_doit+0x228/0x320 [ 1644.478277][ T4026] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1644.485637][ T4026] ? mutex_lock_io_nested+0x1150/0x1150 [ 1644.491195][ T4026] ? genl_op_from_small+0x23/0x3c0 [ 1644.496305][ T4026] ? genl_get_cmd+0x3cf/0x480 [ 1644.500969][ T4026] genl_rcv_msg+0x328/0x580 [ 1644.505460][ T4026] ? genl_get_cmd+0x480/0x480 [ 1644.510123][ T4026] ? nbd_start_device+0xd10/0xd10 [ 1644.515160][ T4026] ? lock_release+0x720/0x720 [ 1644.519848][ T4026] netlink_rcv_skb+0x153/0x420 [ 1644.524601][ T4026] ? genl_get_cmd+0x480/0x480 [ 1644.529294][ T4026] ? netlink_ack+0xa60/0xa60 [ 1644.533869][ T4026] ? netlink_deliver_tap+0x1b1/0xc30 [ 1644.539144][ T4026] ? _copy_from_iter+0x12b/0x1320 [ 1644.544158][ T4026] genl_rcv+0x24/0x40 [ 1644.548125][ T4026] netlink_unicast+0x533/0x7d0 [ 1644.552875][ T4026] ? netlink_attachskb+0x880/0x880 [ 1644.557970][ T4026] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.564210][ T4026] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.570450][ T4026] ? __phys_addr_symbol+0x2c/0x70 [ 1644.575462][ T4026] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1644.581190][ T4026] ? __check_object_size+0x16e/0x3f0 [ 1644.586472][ T4026] netlink_sendmsg+0x86d/0xda0 [ 1644.591243][ T4026] ? netlink_unicast+0x7d0/0x7d0 [ 1644.596180][ T4026] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1644.602412][ T4026] ? netlink_unicast+0x7d0/0x7d0 [ 1644.607346][ T4026] sock_sendmsg+0xcf/0x120 [ 1644.611749][ T4026] ____sys_sendmsg+0x6e8/0x810 [ 1644.616501][ T4026] ? kernel_sendmsg+0x50/0x50 [ 1644.621177][ T4026] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.625762][ T4026] ? lock_chain_count+0x20/0x20 [ 1644.630691][ T4026] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1644.636660][ T4026] ___sys_sendmsg+0xf3/0x170 [ 1644.641241][ T4026] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.646704][ T4026] ? __fget_files+0x21b/0x3e0 [ 1644.651370][ T4026] ? lock_downgrade+0x6e0/0x6e0 [ 1644.656217][ T4026] ? __fget_files+0x23d/0x3e0 [ 1644.661237][ T4026] ? __fget_light+0xea/0x280 [ 1644.665830][ T4026] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1644.672082][ T4026] __sys_sendmsg+0xe5/0x1b0 [ 1644.676593][ T4026] ? __sys_sendmsg_sock+0x30/0x30 [ 1644.681626][ T4026] ? syscall_enter_from_user_mode+0x21/0x70 [ 1644.687512][ T4026] do_syscall_64+0x35/0xb0 [ 1644.691914][ T4026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1644.697799][ T4026] RIP: 0033:0x7f238b7b8ae9 [ 1644.702200][ T4026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.721790][ T4026] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.730191][ T4026] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1644.738148][ T4026] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1644.746189][ T4026] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.754145][ T4026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1644.762103][ T4026] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1644.770336][ T4026] [ 1644.775501][T27219] usb 1-1: reset high-speed USB device number 29 using dummy_hcd 07:57:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 11) [ 1644.813178][ T4026] blk-mq: reduced tag depth (128 -> 64) [ 1644.858929][ T8243] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1644.888500][ T4040] FAULT_INJECTION: forcing a failure. [ 1644.888500][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.901774][ T4040] CPU: 1 PID: 4040 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1644.910100][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.920143][ T4040] Call Trace: [ 1644.923406][ T4040] [ 1644.926322][ T4040] dump_stack_lvl+0xcd/0x134 [ 1644.930911][ T4040] should_fail.cold+0x5/0xa [ 1644.935410][ T4040] ? sbitmap_init_node+0x1c3/0x6f0 [ 1644.940743][ T4040] should_failslab+0x5/0x10 [ 1644.945485][ T4040] __kmalloc_node+0x75/0x390 [ 1644.950081][ T4040] sbitmap_init_node+0x1c3/0x6f0 [ 1644.955026][ T4040] sbitmap_queue_init_node+0x3e/0x460 [ 1644.960392][ T4040] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1644.965849][ T4040] blk_mq_init_bitmaps+0x57/0x180 [ 1644.970869][ T4040] blk_mq_init_tags+0x10b/0x170 [ 1644.975716][ T4040] blk_mq_alloc_rq_map+0x81/0x200 [ 1644.980739][ T4040] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1644.986026][ T4040] nbd_dev_add+0x2b1/0xcd0 [ 1644.990437][ T4040] nbd_genl_connect+0x11f3/0x1930 [ 1644.995460][ T4040] ? nbd_start_device+0xd10/0xd10 [ 1645.000477][ T4040] ? __nla_parse+0x3d/0x50 [ 1645.004883][ T4040] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1645.011118][ T4040] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1645.018479][ T4040] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1645.025760][ T4040] genl_family_rcv_msg_doit+0x228/0x320 [ 1645.031300][ T4040] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1645.038834][ T4040] ? mutex_lock_io_nested+0x1150/0x1150 [ 1645.044383][ T4040] ? genl_op_from_small+0x23/0x3c0 [ 1645.049486][ T4040] ? genl_get_cmd+0x3cf/0x480 [ 1645.054155][ T4040] genl_rcv_msg+0x328/0x580 [ 1645.058649][ T4040] ? genl_get_cmd+0x480/0x480 [ 1645.063313][ T4040] ? nbd_start_device+0xd10/0xd10 [ 1645.068332][ T4040] ? lock_release+0x720/0x720 [ 1645.073005][ T4040] netlink_rcv_skb+0x153/0x420 [ 1645.077758][ T4040] ? genl_get_cmd+0x480/0x480 [ 1645.082429][ T4040] ? netlink_ack+0xa60/0xa60 [ 1645.087100][ T4040] ? netlink_deliver_tap+0x1b1/0xc30 [ 1645.092377][ T4040] ? _copy_from_iter+0x12b/0x1320 [ 1645.097397][ T4040] genl_rcv+0x24/0x40 [ 1645.101368][ T4040] netlink_unicast+0x533/0x7d0 [ 1645.106303][ T4040] ? netlink_attachskb+0x880/0x880 [ 1645.111400][ T4040] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1645.117634][ T4040] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1645.123866][ T4040] ? __phys_addr_symbol+0x2c/0x70 [ 1645.128881][ T4040] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1645.134592][ T4040] ? __check_object_size+0x16e/0x3f0 [ 1645.139871][ T4040] netlink_sendmsg+0x86d/0xda0 [ 1645.144626][ T4040] ? netlink_unicast+0x7d0/0x7d0 [ 1645.149554][ T4040] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1645.155788][ T4040] ? netlink_unicast+0x7d0/0x7d0 [ 1645.160716][ T4040] sock_sendmsg+0xcf/0x120 [ 1645.165126][ T4040] ____sys_sendmsg+0x6e8/0x810 [ 1645.169882][ T4040] ? kernel_sendmsg+0x50/0x50 [ 1645.174551][ T4040] ? do_recvmmsg+0x6d0/0x6d0 [ 1645.179132][ T4040] ? lock_chain_count+0x20/0x20 [ 1645.183972][ T4040] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1645.189946][ T4040] ___sys_sendmsg+0xf3/0x170 [ 1645.194529][ T4040] ? sendmsg_copy_msghdr+0x160/0x160 [ 1645.199809][ T4040] ? __fget_files+0x21b/0x3e0 [ 1645.204479][ T4040] ? lock_downgrade+0x6e0/0x6e0 [ 1645.209328][ T4040] ? __fget_files+0x23d/0x3e0 [ 1645.213999][ T4040] ? __fget_light+0xea/0x280 [ 1645.218579][ T4040] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1645.224814][ T4040] __sys_sendmsg+0xe5/0x1b0 [ 1645.229309][ T4040] ? __sys_sendmsg_sock+0x30/0x30 [ 1645.234332][ T4040] ? syscall_enter_from_user_mode+0x21/0x70 [ 1645.240222][ T4040] do_syscall_64+0x35/0xb0 [ 1645.244713][ T4040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1645.250601][ T4040] RIP: 0033:0x7f238b7b8ae9 [ 1645.255004][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.274598][ T4040] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.283001][ T4040] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1645.291048][ T4040] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1645.299092][ T4040] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.307049][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1645.315002][ T4040] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1645.322972][ T4040] [ 1645.326390][ T9426] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1645.327540][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1645.339074][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1645.378886][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1645.384743][ T4040] blk-mq: reduced tag depth (128 -> 64) 07:57:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 12) [ 1645.489147][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1645.497726][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1645.503814][ T4052] FAULT_INJECTION: forcing a failure. [ 1645.503814][ T4052] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.506637][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1645.519339][ T4052] CPU: 0 PID: 4052 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1645.528406][ T9168] usb 6-1: config 250 has no interface number 0 [ 1645.536699][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.536713][ T4052] Call Trace: [ 1645.536720][ T4052] [ 1645.536728][ T4052] dump_stack_lvl+0xcd/0x134 [ 1645.542995][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1645.552978][ T4052] should_fail.cold+0x5/0xa [ 1645.553006][ T4052] ? sbitmap_queue_init_node+0x1d8/0x460 [ 1645.556264][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1645.559171][ T4052] should_failslab+0x5/0x10 [ 1645.559197][ T4052] kmem_cache_alloc_node_trace+0x59/0x310 [ 1645.563763][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1645.575178][ T4052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1645.575212][ T4052] sbitmap_queue_init_node+0x1d8/0x460 [ 1645.579703][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1645.585736][ T4052] blk_mq_init_bitmaps+0x57/0x180 [ 1645.596327][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1645.600774][ T4052] blk_mq_init_tags+0x10b/0x170 [ 1645.600807][ T4052] blk_mq_alloc_rq_map+0x81/0x200 [ 1645.606776][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1645.616868][ T4052] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1645.616906][ T4052] nbd_dev_add+0x2b1/0xcd0 [ 1645.623132][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1645.628628][ T4052] nbd_genl_connect+0x11f3/0x1930 [ 1645.628662][ T4052] ? nbd_start_device+0xd10/0xd10 [ 1645.642097][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1645.647070][ T4052] ? __nla_parse+0x3d/0x50 [ 1645.653998][ T2607] usb 5-1: config 250 has no interface number 0 [ 1645.658974][ T4052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1645.664011][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1645.672284][ T4052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1645.672312][ T4052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1645.677569][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1645.681961][ T4052] genl_family_rcv_msg_doit+0x228/0x320 [ 1645.681990][ T4052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1645.690822][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1645.695793][ T4052] ? mutex_lock_io_nested+0x1150/0x1150 [ 1645.700813][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1645.709957][ T4052] ? genl_op_from_small+0x23/0x3c0 [ 1645.709981][ T4052] ? genl_get_cmd+0x3cf/0x480 [ 1645.714365][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1645.720574][ T4052] genl_rcv_msg+0x328/0x580 [ 1645.720600][ T4052] ? genl_get_cmd+0x480/0x480 [ 1645.739104][ T4000] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1645.745663][ T4052] ? nbd_start_device+0xd10/0xd10 [ 1645.769686][ T4000] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1645.776172][ T4052] ? lock_release+0x720/0x720 [ 1645.854607][ T4052] netlink_rcv_skb+0x153/0x420 [ 1645.859361][ T4052] ? genl_get_cmd+0x480/0x480 [ 1645.864027][ T4052] ? netlink_ack+0xa60/0xa60 [ 1645.868610][ T4052] ? netlink_deliver_tap+0x1b1/0xc30 [ 1645.873893][ T4052] ? _copy_from_iter+0x12b/0x1320 [ 1645.878903][ T4052] genl_rcv+0x24/0x40 [ 1645.882867][ T4052] netlink_unicast+0x533/0x7d0 [ 1645.887843][ T4052] ? netlink_attachskb+0x880/0x880 [ 1645.892936][ T4052] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1645.899173][ T4052] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1645.905492][ T4052] ? __phys_addr_symbol+0x2c/0x70 [ 1645.910761][ T4052] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1645.916468][ T4052] ? __check_object_size+0x16e/0x3f0 [ 1645.921758][ T4052] netlink_sendmsg+0x86d/0xda0 [ 1645.926518][ T4052] ? netlink_unicast+0x7d0/0x7d0 [ 1645.931679][ T4052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1645.938119][ T4052] ? netlink_unicast+0x7d0/0x7d0 [ 1645.943040][ T4052] sock_sendmsg+0xcf/0x120 [ 1645.947444][ T4052] ____sys_sendmsg+0x6e8/0x810 [ 1645.952198][ T4052] ? kernel_sendmsg+0x50/0x50 [ 1645.957267][ T4052] ? do_recvmmsg+0x6d0/0x6d0 [ 1645.961851][ T4052] ? lock_chain_count+0x20/0x20 [ 1645.966704][ T4052] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1645.972699][ T4052] ___sys_sendmsg+0xf3/0x170 [ 1645.977280][ T4052] ? sendmsg_copy_msghdr+0x160/0x160 [ 1645.982557][ T4052] ? __fget_files+0x21b/0x3e0 [ 1645.987223][ T4052] ? lock_downgrade+0x6e0/0x6e0 [ 1645.992068][ T4052] ? __fget_files+0x23d/0x3e0 [ 1645.996736][ T4052] ? __fget_light+0xea/0x280 [ 1646.001628][ T4052] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1646.007859][ T4052] __sys_sendmsg+0xe5/0x1b0 [ 1646.012347][ T4052] ? __sys_sendmsg_sock+0x30/0x30 [ 1646.017703][ T4052] ? syscall_enter_from_user_mode+0x21/0x70 [ 1646.023921][ T4052] do_syscall_64+0x35/0xb0 [ 1646.028350][ T4052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1646.034252][ T4052] RIP: 0033:0x7f238b7b8ae9 [ 1646.038655][ T4052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.058253][ T4052] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.066649][ T4052] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1646.074604][ T4052] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1646.082562][ T4052] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.090692][ T4052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.098649][ T4052] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1646.106625][ T4052] [ 1646.113308][ T4052] blk-mq: reduced tag depth (128 -> 64) 07:57:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 13) [ 1646.158842][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1646.158859][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1646.227806][ T4065] FAULT_INJECTION: forcing a failure. [ 1646.227806][ T4065] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.241131][ T4065] CPU: 1 PID: 4065 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1646.249461][ T4065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.259510][ T4065] Call Trace: [ 1646.262776][ T4065] [ 1646.265700][ T4065] dump_stack_lvl+0xcd/0x134 [ 1646.270292][ T4065] should_fail.cold+0x5/0xa [ 1646.274787][ T4065] ? sbitmap_queue_init_node+0x1d8/0x460 [ 1646.280411][ T4065] should_failslab+0x5/0x10 [ 1646.284905][ T4065] kmem_cache_alloc_node_trace+0x59/0x310 [ 1646.290616][ T4065] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1646.296855][ T4065] sbitmap_queue_init_node+0x1d8/0x460 [ 1646.302310][ T4065] blk_mq_init_bitmaps+0x87/0x180 [ 1646.307332][ T4065] blk_mq_init_tags+0x10b/0x170 [ 1646.312181][ T4065] blk_mq_alloc_rq_map+0x81/0x200 [ 1646.317200][ T4065] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1646.322484][ T4065] nbd_dev_add+0x2b1/0xcd0 [ 1646.326898][ T4065] nbd_genl_connect+0x11f3/0x1930 [ 1646.331920][ T4065] ? nbd_start_device+0xd10/0xd10 [ 1646.336938][ T4065] ? __nla_parse+0x3d/0x50 [ 1646.341348][ T4065] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1646.347582][ T4065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1646.354959][ T4065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1646.362254][ T4065] genl_family_rcv_msg_doit+0x228/0x320 [ 1646.367799][ T4065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1646.375158][ T4065] ? mutex_lock_io_nested+0x1150/0x1150 [ 1646.380703][ T4065] ? genl_op_from_small+0x23/0x3c0 [ 1646.385804][ T4065] ? genl_get_cmd+0x3cf/0x480 [ 1646.390471][ T4065] genl_rcv_msg+0x328/0x580 [ 1646.394966][ T4065] ? genl_get_cmd+0x480/0x480 [ 1646.399631][ T4065] ? nbd_start_device+0xd10/0xd10 [ 1646.404650][ T4065] ? lock_release+0x720/0x720 [ 1646.409410][ T4065] netlink_rcv_skb+0x153/0x420 [ 1646.414161][ T4065] ? genl_get_cmd+0x480/0x480 [ 1646.418825][ T4065] ? netlink_ack+0xa60/0xa60 [ 1646.423409][ T4065] ? netlink_deliver_tap+0x1b1/0xc30 [ 1646.428684][ T4065] ? _copy_from_iter+0x12b/0x1320 [ 1646.433702][ T4065] genl_rcv+0x24/0x40 [ 1646.437668][ T4065] netlink_unicast+0x533/0x7d0 [ 1646.442422][ T4065] ? netlink_attachskb+0x880/0x880 [ 1646.447519][ T4065] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1646.453753][ T4065] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1646.459990][ T4065] ? __phys_addr_symbol+0x2c/0x70 [ 1646.465004][ T4065] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1646.470712][ T4065] ? __check_object_size+0x16e/0x3f0 [ 1646.475989][ T4065] netlink_sendmsg+0x86d/0xda0 [ 1646.480744][ T4065] ? netlink_unicast+0x7d0/0x7d0 [ 1646.485672][ T4065] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1646.491907][ T4065] ? netlink_unicast+0x7d0/0x7d0 [ 1646.496918][ T4065] sock_sendmsg+0xcf/0x120 [ 1646.501326][ T4065] ____sys_sendmsg+0x6e8/0x810 [ 1646.506082][ T4065] ? kernel_sendmsg+0x50/0x50 [ 1646.510919][ T4065] ? do_recvmmsg+0x6d0/0x6d0 [ 1646.515500][ T4065] ? lock_chain_count+0x20/0x20 [ 1646.520342][ T4065] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1646.526318][ T4065] ___sys_sendmsg+0xf3/0x170 [ 1646.530898][ T4065] ? sendmsg_copy_msghdr+0x160/0x160 [ 1646.536178][ T4065] ? __fget_files+0x21b/0x3e0 [ 1646.540846][ T4065] ? lock_downgrade+0x6e0/0x6e0 [ 1646.545699][ T4065] ? __fget_files+0x23d/0x3e0 [ 1646.550370][ T4065] ? __fget_light+0xea/0x280 [ 1646.554952][ T4065] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1646.561188][ T4065] __sys_sendmsg+0xe5/0x1b0 [ 1646.565682][ T4065] ? __sys_sendmsg_sock+0x30/0x30 [ 1646.570707][ T4065] ? syscall_enter_from_user_mode+0x21/0x70 [ 1646.576602][ T4065] do_syscall_64+0x35/0xb0 [ 1646.581008][ T4065] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1646.586893][ T4065] RIP: 0033:0x7f238b7b8ae9 [ 1646.591299][ T4065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.610895][ T4065] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.619304][ T4065] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1646.627263][ T4065] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1646.635223][ T4065] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.643180][ T4065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.651138][ T4065] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1646.659107][ T4065] [ 1646.663843][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 07:57:18 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1646.672912][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1646.680932][ T9168] usb 6-1: SerialNumber: syz [ 1646.686117][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1646.695360][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1646.703462][ T2607] usb 5-1: SerialNumber: syz [ 1646.758852][ T8243] usb 3-1: unable to read config index 0 descriptor/all [ 1646.765958][ T8243] usb 3-1: can't read configurations, error -71 07:57:18 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1646.809180][ T2607] usb 5-1: can't set config #250, error -71 [ 1646.821968][ T2607] usb 5-1: USB disconnect, device number 34 [ 1646.829241][ T9168] usb 6-1: can't set config #250, error -71 [ 1646.849151][ T9168] usb 6-1: USB disconnect, device number 46 [ 1646.878864][ T9426] usb 2-1: unable to read config index 0 descriptor/all [ 1646.886111][ T9426] usb 2-1: can't read configurations, error -71 07:57:18 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090000082f5492d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:18 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:57:18 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1646.970108][T27219] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1646.985436][T27219] usb 1-1: USB disconnect, device number 29 [ 1647.005993][ T4065] blk-mq: reduced tag depth (128 -> 64) [ 1647.012998][T27219] usblp0: removed 07:57:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 14) [ 1647.103512][ T4114] FAULT_INJECTION: forcing a failure. [ 1647.103512][ T4114] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.116809][ T4114] CPU: 0 PID: 4114 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1647.125147][ T4114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.135213][ T4114] Call Trace: [ 1647.138494][ T4114] [ 1647.141425][ T4114] dump_stack_lvl+0xcd/0x134 [ 1647.146033][ T4114] should_fail.cold+0x5/0xa [ 1647.150548][ T4114] ? blk_mq_alloc_rq_map+0xc3/0x200 [ 1647.155752][ T4114] should_failslab+0x5/0x10 [ 1647.160269][ T4114] __kmalloc_node+0x75/0x390 [ 1647.164867][ T4114] blk_mq_alloc_rq_map+0xc3/0x200 [ 1647.169899][ T4114] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1647.175204][ T4114] nbd_dev_add+0x2b1/0xcd0 [ 1647.179631][ T4114] nbd_genl_connect+0x11f3/0x1930 [ 1647.185021][ T4114] ? nbd_start_device+0xd10/0xd10 [ 1647.190141][ T4114] ? __nla_parse+0x3d/0x50 [ 1647.194565][ T4114] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1647.200988][ T4114] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1647.208376][ T4114] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1647.215687][ T4114] genl_family_rcv_msg_doit+0x228/0x320 [ 1647.221254][ T4114] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1647.228643][ T4114] ? mutex_lock_io_nested+0x1150/0x1150 [ 1647.234215][ T4114] ? genl_op_from_small+0x23/0x3c0 [ 1647.239331][ T4114] ? genl_get_cmd+0x3cf/0x480 [ 1647.244015][ T4114] genl_rcv_msg+0x328/0x580 [ 1647.248528][ T4114] ? genl_get_cmd+0x480/0x480 [ 1647.253207][ T4114] ? nbd_start_device+0xd10/0xd10 [ 1647.258244][ T4114] ? lock_release+0x720/0x720 [ 1647.262932][ T4114] netlink_rcv_skb+0x153/0x420 [ 1647.267703][ T4114] ? genl_get_cmd+0x480/0x480 [ 1647.272386][ T4114] ? netlink_ack+0xa60/0xa60 [ 1647.276989][ T4114] ? netlink_deliver_tap+0x1b1/0xc30 [ 1647.282288][ T4114] ? _copy_from_iter+0x12b/0x1320 [ 1647.287321][ T4114] genl_rcv+0x24/0x40 [ 1647.291304][ T4114] netlink_unicast+0x533/0x7d0 [ 1647.296082][ T4114] ? netlink_attachskb+0x880/0x880 [ 1647.301195][ T4114] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.307445][ T4114] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.313690][ T4114] ? __phys_addr_symbol+0x2c/0x70 [ 1647.318719][ T4114] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1647.324448][ T4114] ? __check_object_size+0x16e/0x3f0 [ 1647.329742][ T4114] netlink_sendmsg+0x86d/0xda0 [ 1647.334520][ T4114] ? netlink_unicast+0x7d0/0x7d0 [ 1647.339466][ T4114] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1647.345719][ T4114] ? netlink_unicast+0x7d0/0x7d0 [ 1647.350674][ T4114] sock_sendmsg+0xcf/0x120 [ 1647.355123][ T4114] ____sys_sendmsg+0x6e8/0x810 [ 1647.359918][ T4114] ? kernel_sendmsg+0x50/0x50 [ 1647.364707][ T4114] ? do_recvmmsg+0x6d0/0x6d0 [ 1647.369315][ T4114] ? lock_chain_count+0x20/0x20 [ 1647.374262][ T4114] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1647.380258][ T4114] ___sys_sendmsg+0xf3/0x170 [ 1647.384859][ T4114] ? sendmsg_copy_msghdr+0x160/0x160 [ 1647.390153][ T4114] ? __fget_files+0x21b/0x3e0 [ 1647.394837][ T4114] ? lock_downgrade+0x6e0/0x6e0 [ 1647.399707][ T4114] ? __fget_files+0x23d/0x3e0 [ 1647.404395][ T4114] ? __fget_light+0xea/0x280 [ 1647.408998][ T4114] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.415255][ T4114] __sys_sendmsg+0xe5/0x1b0 [ 1647.419768][ T4114] ? __sys_sendmsg_sock+0x30/0x30 [ 1647.424827][ T4114] ? syscall_enter_from_user_mode+0x21/0x70 [ 1647.430733][ T4114] do_syscall_64+0x35/0xb0 [ 1647.435153][ T4114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1647.441057][ T4114] RIP: 0033:0x7f238b7b8ae9 [ 1647.445562][ T4114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.465432][ T4114] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1647.473844][ T4114] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1647.481816][ T4114] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1647.489874][ T4114] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.497846][ T4114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.505817][ T4114] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1647.513810][ T4114] 07:57:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 15) [ 1647.553388][ T4114] blk-mq: reduced tag depth (128 -> 64) [ 1647.588761][ T9426] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1647.614715][ T8243] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1647.622496][ T4137] FAULT_INJECTION: forcing a failure. [ 1647.622496][ T4137] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.635613][ T4137] CPU: 0 PID: 4137 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1647.643962][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.654034][ T4137] Call Trace: [ 1647.657321][ T4137] [ 1647.660254][ T4137] dump_stack_lvl+0xcd/0x134 [ 1647.664860][ T4137] should_fail.cold+0x5/0xa [ 1647.669377][ T4137] ? blk_mq_alloc_rq_map+0x104/0x200 [ 1647.674671][ T4137] should_failslab+0x5/0x10 [ 1647.679272][ T4137] __kmalloc_node+0x75/0x390 [ 1647.683876][ T4137] blk_mq_alloc_rq_map+0x104/0x200 [ 1647.689000][ T4137] blk_mq_alloc_tag_set+0x8cc/0x12b0 [ 1647.694307][ T4137] nbd_dev_add+0x2b1/0xcd0 [ 1647.698740][ T4137] nbd_genl_connect+0x11f3/0x1930 [ 1647.703878][ T4137] ? nbd_start_device+0xd10/0xd10 [ 1647.708929][ T4137] ? __nla_parse+0x3d/0x50 [ 1647.713357][ T4137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1647.721644][ T4137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1647.729875][ T4137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1647.737584][ T4137] genl_family_rcv_msg_doit+0x228/0x320 [ 1647.743435][ T4137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1647.751168][ T4137] ? mutex_lock_io_nested+0x1150/0x1150 [ 1647.757340][ T4137] ? genl_op_from_small+0x23/0x3c0 [ 1647.762725][ T4137] ? genl_get_cmd+0x3cf/0x480 [ 1647.767567][ T4137] genl_rcv_msg+0x328/0x580 [ 1647.772284][ T4137] ? genl_get_cmd+0x480/0x480 [ 1647.777300][ T4137] ? nbd_start_device+0xd10/0xd10 [ 1647.782441][ T4137] ? lock_release+0x720/0x720 [ 1647.787136][ T4137] netlink_rcv_skb+0x153/0x420 [ 1647.791917][ T4137] ? genl_get_cmd+0x480/0x480 [ 1647.796695][ T4137] ? netlink_ack+0xa60/0xa60 [ 1647.801272][ T4137] ? netlink_deliver_tap+0x1b1/0xc30 [ 1647.806577][ T4137] ? _copy_from_iter+0x12b/0x1320 [ 1647.811590][ T4137] genl_rcv+0x24/0x40 [ 1647.815645][ T4137] netlink_unicast+0x533/0x7d0 [ 1647.820412][ T4137] ? netlink_attachskb+0x880/0x880 [ 1647.825509][ T4137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.831744][ T4137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.837979][ T4137] ? __phys_addr_symbol+0x2c/0x70 [ 1647.843092][ T4137] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1647.848803][ T4137] ? __check_object_size+0x16e/0x3f0 [ 1647.854091][ T4137] netlink_sendmsg+0x86d/0xda0 [ 1647.858847][ T4137] ? netlink_unicast+0x7d0/0x7d0 [ 1647.863776][ T4137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1647.870011][ T4137] ? netlink_unicast+0x7d0/0x7d0 [ 1647.874935][ T4137] sock_sendmsg+0xcf/0x120 [ 1647.879339][ T4137] ____sys_sendmsg+0x6e8/0x810 [ 1647.884092][ T4137] ? kernel_sendmsg+0x50/0x50 [ 1647.888756][ T4137] ? do_recvmmsg+0x6d0/0x6d0 [ 1647.893521][ T4137] ? lock_chain_count+0x20/0x20 [ 1647.898360][ T4137] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1647.904332][ T4137] ___sys_sendmsg+0xf3/0x170 [ 1647.909146][ T4137] ? sendmsg_copy_msghdr+0x160/0x160 [ 1647.914442][ T4137] ? __fget_files+0x21b/0x3e0 [ 1647.919129][ T4137] ? lock_downgrade+0x6e0/0x6e0 [ 1647.923981][ T4137] ? __fget_files+0x23d/0x3e0 [ 1647.928675][ T4137] ? __fget_light+0xea/0x280 [ 1647.933268][ T4137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1647.939499][ T4137] __sys_sendmsg+0xe5/0x1b0 [ 1647.943990][ T4137] ? __sys_sendmsg_sock+0x30/0x30 [ 1647.949024][ T4137] ? syscall_enter_from_user_mode+0x21/0x70 [ 1647.954927][ T4137] do_syscall_64+0x35/0xb0 [ 1647.959336][ T4137] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1647.965219][ T4137] RIP: 0033:0x7f238b7b8ae9 [ 1647.969619][ T4137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.989210][ T4137] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1647.997610][ T4137] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1648.005601][ T4137] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1648.013557][ T4137] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.021511][ T4137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1648.029468][ T4137] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1648.037433][ T4137] 07:57:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 16) [ 1648.058816][ T4137] blk-mq: reduced tag depth (128 -> 64) [ 1648.118852][ T9168] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1648.141657][ T4149] FAULT_INJECTION: forcing a failure. [ 1648.141657][ T4149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.155576][ T4149] CPU: 1 PID: 4149 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1648.163905][ T4149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.174556][ T4149] Call Trace: [ 1648.177819][ T4149] [ 1648.180734][ T4149] dump_stack_lvl+0xcd/0x134 [ 1648.185325][ T4149] should_fail.cold+0x5/0xa [ 1648.189820][ T4149] prepare_alloc_pages+0x17b/0x570 [ 1648.194926][ T4149] ? __sys_sendmsg+0xe5/0x1b0 [ 1648.199591][ T4149] ? do_syscall_64+0x35/0xb0 [ 1648.204260][ T4149] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1648.210334][ T4149] __alloc_pages+0x12f/0x500 [ 1648.214910][ T4149] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1648.221668][ T4149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1648.228078][ T4149] ? __cpu_to_node+0x82/0xb0 [ 1648.232657][ T4149] ? blk_mq_hw_queue_to_node+0xe8/0x140 [ 1648.238227][ T4149] blk_mq_alloc_rqs+0x258/0x7a0 [ 1648.243074][ T4149] ? blk_mq_alloc_rq_map+0x8e/0x200 [ 1648.248265][ T4149] blk_mq_alloc_tag_set+0x8ea/0x12b0 [ 1648.253556][ T4149] nbd_dev_add+0x2b1/0xcd0 [ 1648.257974][ T4149] nbd_genl_connect+0x11f3/0x1930 [ 1648.263171][ T4149] ? nbd_start_device+0xd10/0xd10 [ 1648.268286][ T4149] ? __nla_parse+0x3d/0x50 [ 1648.272698][ T4149] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1648.278930][ T4149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1648.286294][ T4149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1648.293573][ T4149] genl_family_rcv_msg_doit+0x228/0x320 [ 1648.299112][ T4149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1648.306591][ T4149] ? mutex_lock_io_nested+0x1150/0x1150 [ 1648.312133][ T4149] ? genl_op_from_small+0x23/0x3c0 [ 1648.317232][ T4149] ? genl_get_cmd+0x3cf/0x480 [ 1648.321901][ T4149] genl_rcv_msg+0x328/0x580 [ 1648.326431][ T4149] ? genl_get_cmd+0x480/0x480 [ 1648.331093][ T4149] ? nbd_start_device+0xd10/0xd10 [ 1648.336112][ T4149] ? lock_release+0x720/0x720 [ 1648.340783][ T4149] netlink_rcv_skb+0x153/0x420 [ 1648.345534][ T4149] ? genl_get_cmd+0x480/0x480 [ 1648.350200][ T4149] ? netlink_ack+0xa60/0xa60 [ 1648.354785][ T4149] ? netlink_deliver_tap+0x1b1/0xc30 [ 1648.360082][ T4149] ? _copy_from_iter+0x12b/0x1320 [ 1648.365187][ T4149] genl_rcv+0x24/0x40 [ 1648.369153][ T4149] netlink_unicast+0x533/0x7d0 [ 1648.373909][ T4149] ? netlink_attachskb+0x880/0x880 [ 1648.379005][ T4149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1648.385240][ T4149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1648.391475][ T4149] ? __phys_addr_symbol+0x2c/0x70 [ 1648.396489][ T4149] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1648.402201][ T4149] ? __check_object_size+0x16e/0x3f0 [ 1648.407478][ T4149] netlink_sendmsg+0x86d/0xda0 [ 1648.412480][ T4149] ? netlink_unicast+0x7d0/0x7d0 [ 1648.417672][ T4149] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1648.423905][ T4149] ? netlink_unicast+0x7d0/0x7d0 [ 1648.428834][ T4149] sock_sendmsg+0xcf/0x120 [ 1648.433242][ T4149] ____sys_sendmsg+0x6e8/0x810 [ 1648.437999][ T4149] ? kernel_sendmsg+0x50/0x50 [ 1648.442664][ T4149] ? do_recvmmsg+0x6d0/0x6d0 [ 1648.447269][ T4149] ? lock_chain_count+0x20/0x20 [ 1648.452114][ T4149] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1648.458095][ T4149] ___sys_sendmsg+0xf3/0x170 [ 1648.462713][ T4149] ? sendmsg_copy_msghdr+0x160/0x160 [ 1648.467993][ T4149] ? __fget_files+0x21b/0x3e0 [ 1648.472661][ T4149] ? lock_downgrade+0x6e0/0x6e0 [ 1648.477513][ T4149] ? __fget_files+0x23d/0x3e0 [ 1648.482188][ T4149] ? __fget_light+0xea/0x280 [ 1648.486857][ T4149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1648.493096][ T4149] __sys_sendmsg+0xe5/0x1b0 [ 1648.497677][ T4149] ? __sys_sendmsg_sock+0x30/0x30 [ 1648.502704][ T4149] ? syscall_enter_from_user_mode+0x21/0x70 [ 1648.508594][ T4149] do_syscall_64+0x35/0xb0 [ 1648.513022][ T4149] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1648.518997][ T4149] RIP: 0033:0x7f238b7b8ae9 [ 1648.523402][ T4149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1648.542998][ T4149] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.551402][ T4149] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1648.559363][ T4149] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1648.567319][ T4149] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.575302][ T4149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1648.583258][ T4149] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1648.591320][ T4149] [ 1648.595581][T27219] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1648.600319][ T2607] usb 5-1: new high-speed USB device number 35 using dummy_hcd 07:57:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 17) [ 1648.639159][ T9426] usb 2-1: Using ep0 maxpacket: 8 [ 1648.703870][ T4161] FAULT_INJECTION: forcing a failure. [ 1648.703870][ T4161] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.717426][ T4161] CPU: 1 PID: 4161 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1648.725763][ T4161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.735820][ T4161] Call Trace: [ 1648.739096][ T4161] [ 1648.742024][ T4161] dump_stack_lvl+0xcd/0x134 [ 1648.746626][ T4161] should_fail.cold+0x5/0xa [ 1648.751135][ T4161] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1648.757559][ T4161] should_failslab+0x5/0x10 [ 1648.760353][ T9426] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1648.762065][ T4161] kmem_cache_alloc+0x5e/0x3a0 [ 1648.770697][ T9426] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1648.775125][ T4161] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1648.784277][ T9426] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1648.790359][ T4161] idr_get_free+0x554/0xa60 [ 1648.790399][ T4161] idr_alloc_u32+0x16c/0x2c0 [ 1648.790423][ T4161] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 1648.799808][ T9426] usb 2-1: config 250 has no interface number 0 [ 1648.804210][ T4161] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1648.808821][ T9426] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1648.814287][ T4161] ? mutex_lock_io_nested+0x1150/0x1150 [ 1648.820525][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1648.825928][ T4161] idr_alloc+0xc2/0x130 [ 1648.837547][ T9426] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1648.843037][ T4161] ? idr_alloc_u32+0x2c0/0x2c0 [ 1648.843070][ T4161] nbd_dev_add+0x98c/0xcd0 [ 1648.853469][ T9426] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1648.857574][ T4161] nbd_genl_connect+0x11f3/0x1930 [ 1648.867974][ T9426] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1648.872771][ T4161] ? nbd_start_device+0xd10/0xd10 [ 1648.872799][ T4161] ? __nla_parse+0x3d/0x50 [ 1648.912148][ T4161] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1648.918391][ T4161] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1648.925751][ T4161] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1648.933029][ T4161] genl_family_rcv_msg_doit+0x228/0x320 [ 1648.938566][ T4161] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1648.945923][ T4161] ? mutex_lock_io_nested+0x1150/0x1150 [ 1648.951465][ T4161] ? genl_op_from_small+0x23/0x3c0 [ 1648.956565][ T4161] ? genl_get_cmd+0x3cf/0x480 [ 1648.961231][ T4161] genl_rcv_msg+0x328/0x580 [ 1648.965725][ T4161] ? genl_get_cmd+0x480/0x480 [ 1648.970387][ T4161] ? nbd_start_device+0xd10/0xd10 [ 1648.975409][ T4161] ? lock_release+0x720/0x720 [ 1648.980083][ T4161] netlink_rcv_skb+0x153/0x420 [ 1648.984840][ T4161] ? genl_get_cmd+0x480/0x480 [ 1648.989506][ T4161] ? netlink_ack+0xa60/0xa60 [ 1648.994090][ T4161] ? netlink_deliver_tap+0x1b1/0xc30 [ 1648.999366][ T4161] ? _copy_from_iter+0x12b/0x1320 [ 1649.004380][ T4161] genl_rcv+0x24/0x40 [ 1649.008347][ T4161] netlink_unicast+0x533/0x7d0 [ 1649.013104][ T4161] ? netlink_attachskb+0x880/0x880 [ 1649.018203][ T4161] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.024437][ T4161] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.030669][ T4161] ? __phys_addr_symbol+0x2c/0x70 [ 1649.035686][ T4161] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1649.041483][ T4161] ? __check_object_size+0x16e/0x3f0 [ 1649.046763][ T4161] netlink_sendmsg+0x86d/0xda0 [ 1649.051521][ T4161] ? netlink_unicast+0x7d0/0x7d0 [ 1649.056452][ T4161] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.062690][ T4161] ? netlink_unicast+0x7d0/0x7d0 [ 1649.067614][ T4161] sock_sendmsg+0xcf/0x120 [ 1649.072030][ T4161] ____sys_sendmsg+0x6e8/0x810 [ 1649.076784][ T4161] ? kernel_sendmsg+0x50/0x50 [ 1649.081447][ T4161] ? do_recvmmsg+0x6d0/0x6d0 [ 1649.086028][ T4161] ? lock_chain_count+0x20/0x20 [ 1649.090867][ T4161] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.096841][ T4161] ___sys_sendmsg+0xf3/0x170 [ 1649.101990][ T4161] ? sendmsg_copy_msghdr+0x160/0x160 [ 1649.107548][ T4161] ? __fget_files+0x21b/0x3e0 [ 1649.112220][ T4161] ? lock_downgrade+0x6e0/0x6e0 [ 1649.117076][ T4161] ? __fget_files+0x23d/0x3e0 [ 1649.121836][ T4161] ? __fget_light+0xea/0x280 [ 1649.126418][ T4161] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.132741][ T4161] __sys_sendmsg+0xe5/0x1b0 [ 1649.137235][ T4161] ? __sys_sendmsg_sock+0x30/0x30 [ 1649.142260][ T4161] ? syscall_enter_from_user_mode+0x21/0x70 [ 1649.148243][ T4161] do_syscall_64+0x35/0xb0 [ 1649.152649][ T4161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.158626][ T4161] RIP: 0033:0x7f238b7b8ae9 [ 1649.163031][ T4161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.182974][ T4161] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.191378][ T4161] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1649.199429][ T4161] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1649.207571][ T4161] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.215542][ T4161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1649.223591][ T4161] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1649.231587][ T4161] [ 1649.235556][ T4161] nbd: failed to add new device 07:57:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 18) [ 1649.259383][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1649.278711][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1649.303585][ T9426] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1649.312862][ T9426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1649.321116][ T9426] usb 2-1: SerialNumber: syz [ 1649.344058][ T4165] FAULT_INJECTION: forcing a failure. [ 1649.344058][ T4165] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.356970][ T4165] CPU: 0 PID: 4165 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1649.365311][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.375375][ T4165] Call Trace: [ 1649.378652][ T4165] [ 1649.379957][ T4095] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1649.381575][ T4165] dump_stack_lvl+0xcd/0x134 [ 1649.388774][ T4095] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1649.392975][ T4165] should_fail.cold+0x5/0xa [ 1649.404282][ T4165] should_failslab+0x5/0x10 [ 1649.408797][ T4165] kmem_cache_alloc_node+0x65/0x3f0 [ 1649.414101][ T4165] ? blk_alloc_queue+0x28/0x620 [ 1649.418968][ T4165] blk_alloc_queue+0x28/0x620 [ 1649.423658][ T4165] __blk_mq_alloc_disk+0x4c/0x160 [ 1649.428786][ T4165] nbd_dev_add+0x3b2/0xcd0 [ 1649.433231][ T4165] nbd_genl_connect+0x11f3/0x1930 [ 1649.438595][ T4165] ? nbd_start_device+0xd10/0xd10 [ 1649.443622][ T4165] ? __nla_parse+0x3d/0x50 [ 1649.448050][ T4165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.454282][ T4165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1649.461871][ T4165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1649.469241][ T4165] genl_family_rcv_msg_doit+0x228/0x320 [ 1649.474781][ T4165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1649.482142][ T4165] ? mutex_lock_io_nested+0x1150/0x1150 [ 1649.487678][ T4165] ? genl_op_from_small+0x23/0x3c0 [ 1649.492863][ T4165] ? genl_get_cmd+0x3cf/0x480 [ 1649.497544][ T4165] genl_rcv_msg+0x328/0x580 [ 1649.502035][ T4165] ? genl_get_cmd+0x480/0x480 [ 1649.506697][ T4165] ? nbd_start_device+0xd10/0xd10 [ 1649.511809][ T4165] ? lock_release+0x720/0x720 [ 1649.516481][ T4165] netlink_rcv_skb+0x153/0x420 [ 1649.521227][ T4165] ? genl_get_cmd+0x480/0x480 [ 1649.525887][ T4165] ? netlink_ack+0xa60/0xa60 [ 1649.530463][ T4165] ? netlink_deliver_tap+0x1b1/0xc30 [ 1649.536062][ T4165] ? _copy_from_iter+0x12b/0x1320 [ 1649.541176][ T4165] genl_rcv+0x24/0x40 [ 1649.545401][ T4165] netlink_unicast+0x533/0x7d0 [ 1649.550407][ T4165] ? netlink_attachskb+0x880/0x880 [ 1649.555816][ T4165] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.562049][ T4165] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.568281][ T4165] ? __phys_addr_symbol+0x2c/0x70 [ 1649.573311][ T4165] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1649.579014][ T4165] ? __check_object_size+0x16e/0x3f0 [ 1649.584327][ T4165] netlink_sendmsg+0x86d/0xda0 [ 1649.589080][ T4165] ? netlink_unicast+0x7d0/0x7d0 [ 1649.594004][ T4165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.600332][ T4165] ? netlink_unicast+0x7d0/0x7d0 [ 1649.605271][ T4165] sock_sendmsg+0xcf/0x120 [ 1649.609691][ T4165] ____sys_sendmsg+0x6e8/0x810 [ 1649.614457][ T4165] ? kernel_sendmsg+0x50/0x50 [ 1649.619248][ T4165] ? do_recvmmsg+0x6d0/0x6d0 [ 1649.623833][ T4165] ? lock_chain_count+0x20/0x20 [ 1649.628757][ T4165] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.634734][ T4165] ___sys_sendmsg+0xf3/0x170 [ 1649.639318][ T4165] ? sendmsg_copy_msghdr+0x160/0x160 [ 1649.644602][ T4165] ? __fget_files+0x21b/0x3e0 [ 1649.649351][ T4165] ? lock_downgrade+0x6e0/0x6e0 [ 1649.654202][ T4165] ? __fget_files+0x23d/0x3e0 [ 1649.658880][ T4165] ? __fget_light+0xea/0x280 [ 1649.663456][ T4165] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.669693][ T4165] __sys_sendmsg+0xe5/0x1b0 [ 1649.674203][ T4165] ? __sys_sendmsg_sock+0x30/0x30 [ 1649.679307][ T4165] ? syscall_enter_from_user_mode+0x21/0x70 [ 1649.685191][ T4165] do_syscall_64+0x35/0xb0 [ 1649.689607][ T4165] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.695489][ T4165] RIP: 0033:0x7f238b7b8ae9 [ 1649.699890][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.719484][ T4165] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1649.727972][ T4165] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1649.736015][ T4165] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1649.743993][ T4165] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.751948][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1649.759994][ T4165] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1649.767966][ T4165] [ 1649.771299][ T4165] nbd: failed to add new device [ 1649.779317][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1649.780321][ T9426] hub 2-1:250.228: bad descriptor, ignoring hub [ 1649.784416][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1649.790921][ T9426] hub: probe of 2-1:250.228 failed with error -5 [ 1649.802844][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1649.811408][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1649.820316][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1649.829568][T27219] usb 1-1: config 250 has no interface number 0 [ 1649.835826][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1649.839183][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1649.847435][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1649.855803][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1649.866115][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1649.874990][ T8243] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config 07:57:21 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x20, 0xc0, 0x5c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Xg'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x44521815, 0x24b2, 0x2, 0x6f}, {0x6, 0x24, 0x1a, 0x1, 0x14}, [@acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xfc}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x1, 0xf1, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6c, 0x5, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x25, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb8, 0x4, 0x81}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0x9, 0x7, 0x20, 0xff}, 0x112, &(0x7f00000002c0)={0x5, 0xf, 0x112, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xbd, 0x6, 0x1, 0x0, 0x200, [0xc0, 0xf, 0x3f30, 0xc000, 0xffc00f, 0xff3f30]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x1f, 0x6, 0x1, 0x5}, @generic={0x30, 0x10, 0x3, "ec2c271f0442c7636bc135e644927c9fc9abc4c373e5d0bdb390b0f6c9dcd72b1a4789e9769005aafd5411a9b7"}, @generic={0x9a, 0x10, 0xb, "06df067a95e25431621687e60f77b1a0cec0e6b99153e0740641583eb94cd39da5a64d408392bd40145045939fbe98ea1d6b60598ed976b66675817b2965a11ad39367144c2c14329d9cf7b9fe263dab0c5693c3994383e48985c8a7dfa6d533cd14d2f37dc618e0ae42cf1ea29eea1f592bc79f337bd37de9171da5c8f4b0033b6854fa498776430a5e601cb67f8cbb05aeba2da51586"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0e5fe9701d04ce717dd7cba396b15b7c"}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4ff}}, {0xd1, &(0x7f0000000400)=@string={0xd1, 0x3, "b0455fc4a2d82c74478f615875f0e4c4736cce7dac1ed8bfa9bd4d49b1dce3bcb1f7242cd978d5eaf5823a0c6800c133f2d1ce54d3b8ec759c20807d7e57e234574606bee3dd0fecb5829ea00c490c972d397802e279745fd4ffd88e2bdb06cb678e3437b845893f51c30a91a88ebfc8523fcefc5beb8687e1e69f2fc62dc524a73c27d5a6892a233fe01989d0889850aafebd2cca0a29d3b2d69556fe9b939aaed61fae7ae5865114c73e2dc500f2e9a55d04790ca5bbbf6be25d764f2e55eba5ba9fd517cdb2f8e134045ebf8fab"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x401}}, {0xbb, &(0x7f0000000500)=@string={0xbb, 0x3, "fe5ba59ed8fc385f8ebeb551ddb4d143d40b0fe5d597eddb56dfd4549249100ce5295853abe51675895e486ead678054b2f17b34da4e5a05f54c7de46ca9e575b3d0e0d2f4054a0e0cee2942ba2f51fb8586d6374eb4afeb4b7e4e5d7a2dba35f19091c58d977c1cc324c7c973559b670a77f17c003e44c481fa2bfe78785ebabe98fdb9a792b5a22a0c331804971927f2134858e8f2f88fae38797fa9f50087aa4e23242d8973160342e12ba93a1791dd680c9e59df6c3126"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x20, 0x7, 0x3d, {0x3d, 0x5, "68942bc7b914237aa92687bf7c3bcb40e368a7b333075930a2f231a21fb3f2fb43fd9f9e8aa073e88a635289f3832d0b86bbaabbc5341126d73732"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x14, 0xdc, "cb0ce5a04d14c7b89494ae7d7694b18aade92686c6d725c5d89a23c988b55fa8b773354c9bfb2730db92517f164eb5f888e53967f26cecf7db3f3210bcca9ac7f4d7fde7d56681e8d73352ce4ce87d59de37cd973289a66f685d692449d7986b6edaa01669d9b2521b82b7b184a38824d25872c008bf133488e27d1afe8420d72a0cd7ae546771a4ef2b1599ea1cbb87b04e6a9f783b94124fe5571f5a426bd7fbcda1455b980f5bc0eed2b12672ef0a7a7597eaaa15f1971a927a18edf3da4700a80ae5a4412256a2bfe08b08de5d4005067a1d04edf94f41f3cfab"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x7145, 0x4, 0x6, 0x1, 0x9, 0x100, 0x2, 0x7, 0x1, 0x0, 0xffff, 0x3}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:57:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 19) [ 1649.885449][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1649.895770][ T8243] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1649.909123][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 07:57:21 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1649.978900][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1649.987724][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1649.996744][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1650.002871][ T9426] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 70 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1650.006158][ T2607] usb 5-1: config 250 has no interface number 0 [ 1650.023626][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1650.035362][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1650.045862][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1650.056352][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1650.069991][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1650.088850][ T9168] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1650.096610][ T9168] usb 6-1: can't read configurations, error -71 [ 1650.142475][ T4188] FAULT_INJECTION: forcing a failure. [ 1650.142475][ T4188] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.155947][ T4188] CPU: 1 PID: 4188 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1650.164290][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.174344][ T4188] Call Trace: [ 1650.177621][ T4188] [ 1650.180551][ T4188] dump_stack_lvl+0xcd/0x134 [ 1650.185151][ T4188] should_fail.cold+0x5/0xa [ 1650.189915][ T4188] ? mempool_init_node+0x135/0x590 [ 1650.195304][ T4188] should_failslab+0x5/0x10 [ 1650.199818][ T4188] __kmalloc_node+0x75/0x390 [ 1650.204504][ T4188] ? mempool_free_pages+0x20/0x20 [ 1650.209536][ T4188] mempool_init_node+0x135/0x590 [ 1650.214481][ T4188] ? debug_object_destroy+0x210/0x210 [ 1650.219862][ T4188] ? mempool_free_pages+0x20/0x20 [ 1650.224967][ T4188] ? mempool_free+0x3b0/0x3b0 [ 1650.229635][ T4188] mempool_init+0x38/0x50 [ 1650.233959][ T4188] bioset_init+0x336/0x800 [ 1650.238458][ T4188] blk_alloc_queue+0xd9/0x620 [ 1650.243126][ T4188] __blk_mq_alloc_disk+0x4c/0x160 [ 1650.248144][ T4188] nbd_dev_add+0x3b2/0xcd0 [ 1650.252556][ T4188] nbd_genl_connect+0x11f3/0x1930 [ 1650.257751][ T4188] ? nbd_start_device+0xd10/0xd10 [ 1650.262858][ T4188] ? __nla_parse+0x3d/0x50 [ 1650.267267][ T4188] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1650.273593][ T4188] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1650.281049][ T4188] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1650.288333][ T4188] genl_family_rcv_msg_doit+0x228/0x320 [ 1650.294044][ T4188] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1650.301497][ T4188] ? mutex_lock_io_nested+0x1150/0x1150 [ 1650.307043][ T4188] ? genl_op_from_small+0x23/0x3c0 [ 1650.312406][ T4188] ? genl_get_cmd+0x3cf/0x480 [ 1650.317074][ T4188] genl_rcv_msg+0x328/0x580 [ 1650.321741][ T4188] ? genl_get_cmd+0x480/0x480 [ 1650.326407][ T4188] ? nbd_start_device+0xd10/0xd10 [ 1650.331601][ T4188] ? lock_release+0x720/0x720 [ 1650.336273][ T4188] netlink_rcv_skb+0x153/0x420 [ 1650.341023][ T4188] ? genl_get_cmd+0x480/0x480 [ 1650.345778][ T4188] ? netlink_ack+0xa60/0xa60 [ 1650.350364][ T4188] ? netlink_deliver_tap+0x1b1/0xc30 [ 1650.355727][ T4188] ? _copy_from_iter+0x12b/0x1320 [ 1650.360830][ T4188] genl_rcv+0x24/0x40 [ 1650.364799][ T4188] netlink_unicast+0x533/0x7d0 [ 1650.369561][ T4188] ? netlink_attachskb+0x880/0x880 [ 1650.374745][ T4188] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1650.380980][ T4188] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1650.387211][ T4188] ? __phys_addr_symbol+0x2c/0x70 [ 1650.392226][ T4188] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1650.398111][ T4188] ? __check_object_size+0x16e/0x3f0 [ 1650.403392][ T4188] netlink_sendmsg+0x86d/0xda0 [ 1650.408149][ T4188] ? netlink_unicast+0x7d0/0x7d0 [ 1650.413079][ T4188] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1650.419314][ T4188] ? netlink_unicast+0x7d0/0x7d0 [ 1650.424239][ T4188] sock_sendmsg+0xcf/0x120 [ 1650.428736][ T4188] ____sys_sendmsg+0x6e8/0x810 [ 1650.433489][ T4188] ? kernel_sendmsg+0x50/0x50 [ 1650.438241][ T4188] ? do_recvmmsg+0x6d0/0x6d0 [ 1650.442829][ T4188] ? lock_chain_count+0x20/0x20 [ 1650.447848][ T4188] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1650.453830][ T4188] ___sys_sendmsg+0xf3/0x170 [ 1650.458411][ T4188] ? sendmsg_copy_msghdr+0x160/0x160 [ 1650.463686][ T4188] ? __fget_files+0x21b/0x3e0 [ 1650.468354][ T4188] ? lock_downgrade+0x6e0/0x6e0 [ 1650.473203][ T4188] ? __fget_files+0x23d/0x3e0 [ 1650.477874][ T4188] ? __fget_light+0xea/0x280 [ 1650.482453][ T4188] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1650.488778][ T4188] __sys_sendmsg+0xe5/0x1b0 [ 1650.493362][ T4188] ? __sys_sendmsg_sock+0x30/0x30 [ 1650.498385][ T4188] ? syscall_enter_from_user_mode+0x21/0x70 [ 1650.504448][ T4188] do_syscall_64+0x35/0xb0 [ 1650.509028][ T4188] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1650.514914][ T4188] RIP: 0033:0x7f238b7b8ae9 [ 1650.519319][ T4188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.539013][ T4188] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1650.547508][ T4188] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1650.555468][ T4188] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1650.563426][ T4188] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.571385][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.579342][ T4188] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1650.587314][ T4188] 07:57:22 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10}}, 0x20}}, 0x10000004) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="9971f797e7d16888ee9560592709c00e090d1621cce5680d56014226bda56523c1943725476eb13ca48c496833f26459b73112128b3eee4f32955a18ba0f3d29c2c84ea61e1a2372d51b74095248a362fa5169892b3f4f1b4ca2c936cc7ebc79de076611743442f30d02307e231cd0275685c92ea00e49eb3908a07e4c073e4a35d245dde4d7126d675b1411bcf8010a5befa27d63bd31be48ca17ee446321569601f4bb14b303f4794f6c52dc6a39a59630c0daf58ba2811003384693858e8e2a0e984b38316fa8f49bb410784b430bea9a9bac095eec944df319de41c226caf3c16c15", 0xe4}], 0x2, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x39f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9d, [@dev={0xac, 0x14, 0x14, 0x16}, @remote, @loopback, @local, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x108}}, {{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001500)="a3e60796d04f33a979430e79f776c239386579b83a65a24bf26cca23a66797a12c5d78f0ae0f88a3dd65cc283347a0ee1ac55f8421082b1216ecf3ddf3d6d700aa34b7ff0c703948222c19fc8f918ecfcb9122f501e47a7cbd5f60bb30d3c5eeb9414279c9925d29702b46745c96247518206d59eda9d085bffba465fc20631f2fa55d87f60d10301d0a5332956aac365bd122f93b7ace424351a6d27ef9f85436b552fedee4df604442fc66c249cb3c799b79f94119396424ea048e89615d8cc6a97adb8b39aec2e76ae1960fb5c0fb699f12791f38", 0xd6}, {&(0x7f0000001600)="b235a7292ea76602b7975a9401ed9b6db84347510764587f3ddf87d69f0e10efcbb4a57de3dd2a8cd90575b4dc84e035ffb455e924ae730dc82d76470cf3c0f2e27601dd502df44b4bf0b7a68a9838a50a27da60cf2a5ff0d37b921321e4a418e6b814cb9641f258a4f19fd33d55cedc4db972996cb4de67bca8ec42007e3c78a14f36ccb6e71499f931303fec1e821d3bac68f97a09973496251a8b36f9b83d81e73e7566f1131796842a8bacf19b9cae40088653b66414ebba118bea86609d70e6be6b3a00", 0xc6}, {&(0x7f0000000200)="c7ae9cbd8ad27b89e52c610c2306ed81ee846d87d87b1454ba48aacd3465d826a4d7e5d5662d7d032cc7b554551ef8dcd7ed00acc5f5", 0x36}], 0x3, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x38}}, {{&(0x7f0000001780)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000017c0)="a7e55ad73069be4c13d7f1ae4df3f8b0c983247667daa41371a87d0f8d6617afa0884dde2c858fdba32fec8eb0525c53a32b35e0e34aa44757d057a64192b28eb05630b3a48de8e80df92ae7f0c1cdb1312dc68cd0ba5f784258c56f52783b76a9f87f861a47ac8ff0207912b26c96e13710efe85e52d0911c36f4ac87d42914dad71e0aa91b8616550cd9761aa633b7bf0888908b34df5e536198cbebc682c532a88cb76c764ffa0acc6e192cc893173a4831db4516ff26fbdd472ffab716cbb049a65ac817dece434c8545809281b65b2529226828e7187485c35663cefb11dce2004c7543", 0xe6}], 0x1, &(0x7f0000001900)}}, {{&(0x7f0000001940)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001980)="ae7db1765525", 0x6}, {&(0x7f00000019c0)="0601a80715a4a207c3f81e6780f7ebe24bcbd05e66bacb1cd9da806c8ad92da773b1ed060d768f650edb478f88ad9eefd0663b828655b43641a6e684e945534aef10e47927355209a0d60d372e1831c09e9f22e5582171c51299d22f5da59d5292672d7ae2badf0dec5021f2e59a852f369cdaf588f897d9833b6b69ca58f72e1adc1a17c2be22faf00c09703f9bf50eb8f2bed71e75b2c808adb0cb16ede389869c55410325a0933dbb1e41b72dc70001aa4adced382d360ea3c5a0496bb5b1995784dd443e9008be30736d4a86ed1084eeca8e983e7dd0e25ae20a700b3e7252f7d4692bef7b9e7d88717e67efb8", 0xef}, {&(0x7f0000001ac0)="52e70ae17e85538ef9995a38f491a88bedf8b61bf029b56a3264d992871b6b1a55634fc072d66c9b1fc33e66cd510fc9cefc251b0e213ad1b6585a8a86f29c6cf49b21d7d7f764977d431b8f7abfb0b44da18f3c7e2ff844cd07e2f9ea10b0f9bfc6d264bcd18c8e5dc309d7ffd8a6f877524e176e849c044820", 0x7a}, {&(0x7f0000001b40)="67d5b6dd945586cd51b6695fae58fd4a25b8837b077b17d33b086fc91cbb27ac9a594fbdfe61670679ca48b34b02f229a665e9a56264075dbfc13395a08ce49f15b64c2826fc629ee3ec022a71baf3a470f8803164", 0x55}, {&(0x7f0000001bc0)="1d5787b6770ddf4dedc28940e23014cfad3fb2ddfb42739ac7e8a3f974aa1f55d3dcbcd1fdb0a4c3fe7bda885f9e0a4dcf0016545c44e9b4ea2afd31be5d59db8951c2a72662ed4f2fd9da67320eb641ec06fd9a2c1cef5e376411751e7a2e8fb523f2e19f55c01d287739ec37250d3382a6fe281a26559b63d49db86adfa64d6fba3643197a22668a23c33e078595ebfbe06f99f20625e9f0125901d56b756b7fcaabf5debbf5b94aa47657dd0c1a33475e1d70d2fa51fcc918c3bdeb0be4ebdb2dfdf9e75cf7", 0xc7}, {&(0x7f0000001cc0)="f306015c2f4e15e2eef4b3610f719bab3dc9e534b470a650d880e26434b2c74687cefe84d5cc70599363f2452a36317ce4c70be0db708a340df50f0c3f22da0cd376b95cbb734b59c2f180d0040d67cadca002a1520fc0ba48231d96388253b9a67a17e95ce75e808c88e7eb942d499ad01b8b853e9e8a8b1f570b8a0beab59574d91ef68b90e92d1762f0", 0x8b}, {&(0x7f0000001d80)="e9865eb8ab719fbfff1c7a6be4b20a00e3262fa00e5df8fe711005fd52ab93336f204ba31726a1acb10b177c8f09ded60cdd2784c24b5e2ca1fdb4cf9d526fb30f1510bcf52276bfa16612d472858d41540b68bc5096dd4bd71be96e34458846c81472727cf81b3b6e191576ca5d804399350d5fdec2e3dc5072aa401577d6b69ecfd895963ddb5f4659aff5d6ac4c2021956a049c49f085fd35ad9b8ab963", 0x9f}], 0x7, &(0x7f0000001ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}], 0x18}}, {{&(0x7f0000001f00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000002140)=[{&(0x7f0000001f40)="5e87daf1d130f77bbb23deada77c9f67b787db026aa8ccda096e94260fbfdee73c5f08de1e471ca891162d14cb8aaae495c3f718ee23228a8db59011fe2e7ce236c6d9fcb8bea8e771e38f6fd0de046173c641e9c0414cfeb2fa75ad584dd1e8861fa34b2db2cbdb2ee203adf66e92ae4aa8ab41227471acc75f74c179bec9010a0ee5e21c26e77d63a5da318ba19e8de97c42caab6363c59e003ff062e3c5a5668086377f25936ecafc88c3f463b0bd0200a9978a2c9ee26c412f9c1ff9e31837ed773f8410529786b6c4bb37dd60d9620de01a2c29d73fb5f3", 0xda}, {&(0x7f0000002040)="963c327b96406f11b4704fa82a8c567f72aeb1cf179ae738493ab987e574aed74464aacfa54584017c895a24ed7b1845fa71f0cd658837211f46d96aafd63fbc18184aa5806c0fb6db4f1cb38950f85ac287246f0b5d8cb4ebb7753bf408733f02bb26c95cced7f35eae569782c59c51210988b5ac8035b82b0a02aa63646074de45cf3e13c9e23bd0010647d6170ce5daa08b8e00378da814104c68b6c9ee4224b72c7f66343080c1fffccb1f6bffcd63745e76e32ddc6dad101495c5966c492b8b25eba227b3696a637f4009e4f2fa62c6ecd5078ee42f7e97a374c74e345727d2d008a518d03936dea9fae8d1397bf606c13fbbb0c39db0b1504b", 0xfc}], 0x2, &(0x7f0000002180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@generic={0x89, 0x8, "fd31afc09c66"}, @timestamp_addr={0x44, 0x14, 0x4c, 0x1, 0x6, [{@broadcast, 0x6}, {@empty, 0x8}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x32, [@empty, @local, @multicast2, @empty, @multicast1]}, @rr={0x7, 0x13, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x9b, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x70}]}]}}}], 0xf8}}], 0x5, 0x8080) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) [ 1650.590601][ T4188] nbd: failed to add new device [ 1650.598551][ T4183] UDC core: couldn't find an available UDC or it's busy: -16 [ 1650.606230][ T4183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:57:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 20) [ 1650.679006][T27219] usb 1-1: New USB device found, idVendor=542f, idProduct=d292, bcdDevice= 0.07 [ 1650.688235][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1650.718786][ T8243] usb 3-1: string descriptor 0 read error: -71 [ 1650.725177][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1650.733315][ T4202] FAULT_INJECTION: forcing a failure. [ 1650.733315][ T4202] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.734326][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1650.747007][ T4202] CPU: 0 PID: 4202 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1650.763221][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.773452][ T4202] Call Trace: [ 1650.776729][ T4202] [ 1650.779663][ T4202] dump_stack_lvl+0xcd/0x134 [ 1650.784361][ T4202] should_fail.cold+0x5/0xa [ 1650.789055][ T4202] ? mempool_init_node+0x2e6/0x590 [ 1650.794180][ T4202] should_failslab+0x5/0x10 [ 1650.798782][ T4202] kmem_cache_alloc+0x5e/0x3a0 [ 1650.803555][ T4202] ? mempool_free_pages+0x20/0x20 [ 1650.808589][ T4202] ? mempool_free_pages+0x20/0x20 [ 1650.813622][ T4202] mempool_init_node+0x2e6/0x590 [ 1650.818579][ T4202] ? mempool_free_pages+0x20/0x20 [ 1650.823628][ T4202] ? mempool_free+0x3b0/0x3b0 [ 1650.828332][ T4202] mempool_init+0x38/0x50 [ 1650.832681][ T4202] bioset_init+0x336/0x800 [ 1650.837112][ T4202] blk_alloc_queue+0xd9/0x620 [ 1650.841799][ T4202] __blk_mq_alloc_disk+0x4c/0x160 [ 1650.846831][ T4202] nbd_dev_add+0x3b2/0xcd0 [ 1650.851353][ T4202] nbd_genl_connect+0x11f3/0x1930 [ 1650.856479][ T4202] ? nbd_start_device+0xd10/0xd10 [ 1650.861516][ T4202] ? __nla_parse+0x3d/0x50 [ 1650.865938][ T4202] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1650.872187][ T4202] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1650.879566][ T4202] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1650.886861][ T4202] genl_family_rcv_msg_doit+0x228/0x320 [ 1650.892589][ T4202] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1650.899966][ T4202] ? mutex_lock_io_nested+0x1150/0x1150 [ 1650.905615][ T4202] ? genl_op_from_small+0x23/0x3c0 [ 1650.910728][ T4202] ? genl_get_cmd+0x3cf/0x480 [ 1650.915410][ T4202] genl_rcv_msg+0x328/0x580 [ 1650.919920][ T4202] ? genl_get_cmd+0x480/0x480 [ 1650.924599][ T4202] ? nbd_start_device+0xd10/0xd10 [ 1650.929638][ T4202] ? lock_release+0x720/0x720 [ 1650.934333][ T4202] netlink_rcv_skb+0x153/0x420 [ 1650.939101][ T4202] ? genl_get_cmd+0x480/0x480 [ 1650.943783][ T4202] ? netlink_ack+0xa60/0xa60 [ 1650.948383][ T4202] ? netlink_deliver_tap+0x1b1/0xc30 [ 1650.953851][ T4202] ? _copy_from_iter+0x12b/0x1320 [ 1650.959110][ T4202] genl_rcv+0x24/0x40 [ 1650.963105][ T4202] netlink_unicast+0x533/0x7d0 [ 1650.967884][ T4202] ? netlink_attachskb+0x880/0x880 [ 1650.973253][ T4202] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1650.979507][ T4202] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1650.985872][ T4202] ? __phys_addr_symbol+0x2c/0x70 [ 1650.990901][ T4202] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1650.996628][ T4202] ? __check_object_size+0x16e/0x3f0 [ 1651.001936][ T4202] netlink_sendmsg+0x86d/0xda0 [ 1651.006730][ T4202] ? netlink_unicast+0x7d0/0x7d0 [ 1651.011865][ T4202] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1651.018207][ T4202] ? netlink_unicast+0x7d0/0x7d0 [ 1651.023237][ T4202] sock_sendmsg+0xcf/0x120 [ 1651.027669][ T4202] ____sys_sendmsg+0x6e8/0x810 [ 1651.032441][ T4202] ? kernel_sendmsg+0x50/0x50 [ 1651.037126][ T4202] ? do_recvmmsg+0x6d0/0x6d0 [ 1651.041729][ T4202] ? lock_chain_count+0x20/0x20 [ 1651.046598][ T4202] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1651.052606][ T4202] ___sys_sendmsg+0xf3/0x170 [ 1651.057214][ T4202] ? sendmsg_copy_msghdr+0x160/0x160 [ 1651.062513][ T4202] ? __fget_files+0x21b/0x3e0 [ 1651.067204][ T4202] ? lock_downgrade+0x6e0/0x6e0 [ 1651.072162][ T4202] ? __fget_files+0x23d/0x3e0 [ 1651.076851][ T4202] ? __fget_light+0xea/0x280 [ 1651.081448][ T4202] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1651.088009][ T4202] __sys_sendmsg+0xe5/0x1b0 [ 1651.092505][ T4202] ? __sys_sendmsg_sock+0x30/0x30 [ 1651.097528][ T4202] ? syscall_enter_from_user_mode+0x21/0x70 [ 1651.103421][ T4202] do_syscall_64+0x35/0xb0 [ 1651.107824][ T4202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1651.113707][ T4202] RIP: 0033:0x7f238b7b8ae9 [ 1651.118108][ T4202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1651.138181][ T4202] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1651.147054][ T4202] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1651.155027][ T4202] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1651.162999][ T4202] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1651.170969][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1651.178925][ T4202] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1651.186900][ T4202] [ 1651.191072][ T4202] nbd: failed to add new device [ 1651.200201][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1651.208833][T27219] usb 1-1: can't set config #250, error -71 [ 1651.209269][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1651.217795][T27219] usb 1-1: USB disconnect, device number 30 [ 1651.223085][ T2607] usb 5-1: SerialNumber: syz [ 1651.223661][ T8243] usb 3-1: can't set config #250, error -71 [ 1651.262093][ T8243] usb 3-1: USB disconnect, device number 90 [ 1651.309273][ T4094] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1651.316260][ T4094] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1651.323470][ T9168] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1651.350179][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1651.356541][ T2607] hub: probe of 5-1:250.228 failed with error -5 [ 1651.531028][ T4095] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 1651.588847][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1651.618858][T27219] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1651.709905][ T8243] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1651.748892][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1651.757517][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1651.766537][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1651.775788][ T9168] usb 6-1: config 250 has no interface number 0 [ 1651.778821][ T4095] usb 2-1: Using ep0 maxpacket: 8 [ 1651.782147][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1651.782177][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1651.782204][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1651.821056][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1651.834683][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1651.858967][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1651.939423][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1651.949108][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1651.957353][ T9168] usb 6-1: SerialNumber: syz [ 1651.979137][ T4189] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1651.979629][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1651.987149][ T4189] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1651.994681][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1652.010319][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1652.019707][T27219] usb 1-1: config 250 has no interface number 0 [ 1652.025980][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1652.029653][ T9168] hub 6-1:250.228: bad descriptor, ignoring hub [ 1652.037608][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1652.043916][ T9168] hub: probe of 6-1:250.228 failed with error -5 [ 1652.058727][ T8243] usb 3-1: Using ep0 maxpacket: 8 [ 1652.061320][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1652.076886][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1652.090493][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1652.189797][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1652.199243][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1652.207218][T27219] usb 1-1: SerialNumber: syz [ 1652.218952][ T8243] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1652.227479][ T8243] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1652.236421][ T8243] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.240286][ T4197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1652.246799][ T8243] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1652.265442][ T4197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1652.279549][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1652.285983][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1652.349066][ T8243] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1652.358329][ T8243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1652.366435][ T8243] usb 3-1: SerialNumber: syz [ 1652.962882][ T4254] UDC core: couldn't find an available UDC or it's busy: -16 [ 1652.970696][ T4254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1653.231002][ T4255] UDC core: couldn't find an available UDC or it's busy: -16 [ 1653.238587][ T4255] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1654.248091][ T9426] usb 3-1: USB disconnect, device number 91 [ 1656.838946][ T4095] usb 2-1: device descriptor read/all, error -110 [ 1656.998766][ T4095] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 1657.179966][ T4095] usb 2-1: device descriptor read/64, error -32 [ 1657.459177][ T4095] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 1657.578894][ T4095] usb 2-1: device descriptor read/8, error -32 [ 1657.872629][ T4095] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 1657.989005][ T4095] usb 2-1: device descriptor read/8, error -32 [ 1658.119426][T31752] usb 2-1: USB disconnect, device number 70 [ 1658.126767][ T2607] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1658.141187][ T9168] usblp 6-1:250.228: usblp2: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1658.154770][T27219] usblp 1-1:250.228: usblp3: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1658.180589][T31752] usblp0: removed 07:57:29 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 21) 07:57:29 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 07:57:29 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000080)={0x0, 0x80000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:29 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1658.270279][ T2607] usb 5-1: USB disconnect, device number 35 [ 1658.277389][ T9168] usb 6-1: USB disconnect, device number 48 [ 1658.314565][ T9168] usblp2: removed [ 1658.322201][ T2607] usblp1: removed [ 1658.410576][ T4297] FAULT_INJECTION: forcing a failure. [ 1658.410576][ T4297] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.423679][ T4297] CPU: 0 PID: 4297 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1658.432009][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.442078][ T4297] Call Trace: [ 1658.445532][ T4297] [ 1658.448461][ T4297] dump_stack_lvl+0xcd/0x134 [ 1658.453063][ T4297] should_fail.cold+0x5/0xa [ 1658.457761][ T4297] ? mempool_init_node+0x2e6/0x590 [ 1658.462881][ T4297] should_failslab+0x5/0x10 [ 1658.467387][ T4297] kmem_cache_alloc+0x5e/0x3a0 [ 1658.472156][ T4297] ? mempool_free_pages+0x20/0x20 [ 1658.477274][ T4297] ? mempool_free_pages+0x20/0x20 [ 1658.482302][ T4297] mempool_init_node+0x2e6/0x590 [ 1658.487252][ T4297] ? mempool_free_pages+0x20/0x20 [ 1658.492280][ T4297] ? mempool_free+0x3b0/0x3b0 [ 1658.496961][ T4297] mempool_init+0x38/0x50 [ 1658.501295][ T4297] bioset_init+0x336/0x800 [ 1658.505899][ T4297] blk_alloc_queue+0xd9/0x620 [ 1658.510582][ T4297] __blk_mq_alloc_disk+0x4c/0x160 [ 1658.515629][ T4297] nbd_dev_add+0x3b2/0xcd0 [ 1658.520081][ T4297] nbd_genl_connect+0x11f3/0x1930 [ 1658.525140][ T4297] ? nbd_start_device+0xd10/0xd10 [ 1658.530194][ T4297] ? __nla_parse+0x3d/0x50 [ 1658.534627][ T4297] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1658.540883][ T4297] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1658.548262][ T4297] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1658.555642][ T4297] genl_family_rcv_msg_doit+0x228/0x320 [ 1658.561194][ T4297] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1658.568575][ T4297] ? mutex_lock_io_nested+0x1150/0x1150 [ 1658.574380][ T4297] ? genl_op_from_small+0x23/0x3c0 [ 1658.579511][ T4297] ? genl_get_cmd+0x3cf/0x480 [ 1658.584197][ T4297] genl_rcv_msg+0x328/0x580 [ 1658.588710][ T4297] ? genl_get_cmd+0x480/0x480 [ 1658.593392][ T4297] ? nbd_start_device+0xd10/0xd10 [ 1658.598433][ T4297] ? lock_release+0x720/0x720 [ 1658.603123][ T4297] netlink_rcv_skb+0x153/0x420 [ 1658.607892][ T4297] ? genl_get_cmd+0x480/0x480 [ 1658.612575][ T4297] ? netlink_ack+0xa60/0xa60 [ 1658.617174][ T4297] ? netlink_deliver_tap+0x1b1/0xc30 [ 1658.622470][ T4297] ? _copy_from_iter+0x12b/0x1320 [ 1658.627506][ T4297] genl_rcv+0x24/0x40 [ 1658.631490][ T4297] netlink_unicast+0x533/0x7d0 [ 1658.636264][ T4297] ? netlink_attachskb+0x880/0x880 [ 1658.641390][ T4297] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1658.647644][ T4297] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1658.653890][ T4297] ? __phys_addr_symbol+0x2c/0x70 [ 1658.658919][ T4297] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1658.664646][ T4297] ? __check_object_size+0x16e/0x3f0 [ 1658.669940][ T4297] netlink_sendmsg+0x86d/0xda0 [ 1658.674712][ T4297] ? netlink_unicast+0x7d0/0x7d0 [ 1658.679657][ T4297] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1658.685910][ T4297] ? netlink_unicast+0x7d0/0x7d0 [ 1658.688886][T31752] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1658.690936][ T4297] sock_sendmsg+0xcf/0x120 [ 1658.690965][ T4297] ____sys_sendmsg+0x6e8/0x810 [ 1658.707809][ T4297] ? kernel_sendmsg+0x50/0x50 [ 1658.712493][ T4297] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.717095][ T4297] ? lock_chain_count+0x20/0x20 [ 1658.722041][ T4297] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1658.728041][ T4297] ___sys_sendmsg+0xf3/0x170 [ 1658.732639][ T4297] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.738024][ T4297] ? __fget_files+0x21b/0x3e0 [ 1658.742715][ T4297] ? lock_downgrade+0x6e0/0x6e0 [ 1658.747582][ T4297] ? __fget_files+0x23d/0x3e0 [ 1658.752274][ T4297] ? __fget_light+0xea/0x280 [ 1658.756876][ T4297] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1658.763130][ T4297] __sys_sendmsg+0xe5/0x1b0 [ 1658.767643][ T4297] ? __sys_sendmsg_sock+0x30/0x30 [ 1658.768710][ T9168] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1658.772681][ T4297] ? syscall_enter_from_user_mode+0x21/0x70 [ 1658.772720][ T4297] do_syscall_64+0x35/0xb0 [ 1658.772745][ T4297] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1658.780415][ T2607] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1658.786153][ T4297] RIP: 0033:0x7f238b7b8ae9 [ 1658.786175][ T4297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.791004][ T9172] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1658.796564][ T4297] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.796589][ T4297] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1658.851938][ T4297] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 07:57:30 executing program 0: r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0xb, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = geteuid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000100)="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", 0x2000, &(0x7f0000002cc0)={&(0x7f0000002100)={0x50, 0x0, 0x5, {0x7, 0x22, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1}}, &(0x7f0000000040)={0x18, 0x0, 0x1ff}, &(0x7f0000002180)={0x18, 0x0, 0x9}, &(0x7f00000021c0)={0x18}, &(0x7f0000002200)={0x18, 0xffffffffffffffda, 0x1000, {0xc}}, &(0x7f0000002240)={0x28, 0x0, 0xb06, {{0x1000, 0xff74, 0x0, 0xffffffffffffffff}}}, &(0x7f0000002280)={0x60, 0x0, 0x5, {{0x2, 0x1, 0x4, 0x38, 0x0, 0x0, 0x1f, 0x933}}}, 0x0, &(0x7f0000002340)={0x1b, 0x0, 0x5, {')\x00\x00\x00\x01\x00\x00\x00\x00.\x00'}}, &(0x7f0000002380)={0x20, 0x0, 0x4}, &(0x7f00000023c0)={0x78, 0x0, 0x4, {0x1, 0xffffffff, 0x0, {0x4, 0x44, 0x8, 0x0, 0x0, 0x2f1c, 0x0, 0x1f, 0x9, 0x0, 0x0, 0xffffffffffffffff}}}, &(0x7f0000002440)={0x90, 0x0, 0x3ff, {0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x1, 0x0, {0x2, 0x2, 0x0, 0x0, 0x10001, 0x100000000, 0x0, 0xfff, 0x0, 0x8000, 0x4, 0xee00, 0x0, 0x3}}}, &(0x7f0000002500)={0x10, 0x0, 0x5}, &(0x7f0000002980)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="dc000000000000000000000004000000000000000400000000000000030000002308000023277d00000000000000000000000000020000000000000000000000010000002807000000000000800000000200000003000000000000000400000000000000020000000000000004000000", @ANYBLOB, @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB], &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0x0, 0x2, 0x3, 0x81, 0x0, 0xfffffffe, {0x0, 0x5, 0x0, 0x4c, 0x0, 0x7, 0x7ff, 0x7, 0xb7, 0xa000, 0x0, r2, 0x0, 0x3, 0x1}}}}, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x3, r4}], {}, [{0x8, 0x3, r5}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x4}}, 0x44, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x36}}, {@max_read={'max_read', 0x3d, 0x1000}}], [{@context={'context', 0x3d, 'root'}}, {@dont_hash}, {@appraise}]}}) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 07:57:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 22) [ 1658.859912][ T4297] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.867884][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.875856][ T4297] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1658.883852][ T4297] [ 1658.888038][ T4297] nbd: failed to add new device [ 1658.948835][T31752] usb 2-1: Using ep0 maxpacket: 8 [ 1658.954560][ T4323] FAULT_INJECTION: forcing a failure. [ 1658.954560][ T4323] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.967814][ T4323] CPU: 0 PID: 4323 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1658.976149][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.986202][ T4323] Call Trace: [ 1658.989478][ T4323] [ 1658.992410][ T4323] dump_stack_lvl+0xcd/0x134 [ 1658.997017][ T4323] should_fail.cold+0x5/0xa [ 1659.001531][ T4323] ? blk_alloc_queue_stats+0x3c/0x110 [ 1659.006914][ T4323] should_failslab+0x5/0x10 [ 1659.011425][ T4323] kmem_cache_alloc_trace+0x55/0x2c0 [ 1659.016717][ T4323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1659.022976][ T4323] blk_alloc_queue_stats+0x3c/0x110 [ 1659.028183][ T4323] blk_alloc_queue+0xfb/0x620 [ 1659.032869][ T4323] __blk_mq_alloc_disk+0x4c/0x160 [ 1659.037883][ T4323] nbd_dev_add+0x3b2/0xcd0 [ 1659.038750][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1659.042297][ T4323] nbd_genl_connect+0x11f3/0x1930 [ 1659.042334][ T4323] ? nbd_start_device+0xd10/0xd10 [ 1659.047429][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1659.052340][ T4323] ? __nla_parse+0x3d/0x50 [ 1659.052370][ T4323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1659.052398][ T4323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1659.052424][ T4323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1659.052454][ T4323] genl_family_rcv_msg_doit+0x228/0x320 [ 1659.052480][ T4323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1659.057831][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1659.062557][ T4323] ? mutex_lock_io_nested+0x1150/0x1150 [ 1659.062594][ T4323] ? genl_op_from_small+0x23/0x3c0 [ 1659.062615][ T4323] ? genl_get_cmd+0x3cf/0x480 [ 1659.062639][ T4323] genl_rcv_msg+0x328/0x580 [ 1659.062663][ T4323] ? genl_get_cmd+0x480/0x480 [ 1659.062684][ T4323] ? nbd_start_device+0xd10/0xd10 [ 1659.062713][ T4323] ? lock_release+0x720/0x720 [ 1659.062743][ T4323] netlink_rcv_skb+0x153/0x420 [ 1659.062765][ T4323] ? genl_get_cmd+0x480/0x480 [ 1659.062787][ T4323] ? netlink_ack+0xa60/0xa60 [ 1659.062812][ T4323] ? netlink_deliver_tap+0x1b1/0xc30 [ 1659.088839][T31752] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1659.094087][ T4323] ? _copy_from_iter+0x12b/0x1320 [ 1659.094125][ T4323] genl_rcv+0x24/0x40 [ 1659.094151][ T4323] netlink_unicast+0x533/0x7d0 [ 1659.094177][ T4323] ? netlink_attachskb+0x880/0x880 [ 1659.101732][T31752] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1659.106776][ T4323] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.106807][ T4323] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.106830][ T4323] ? __phys_addr_symbol+0x2c/0x70 [ 1659.106853][ T4323] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1659.106878][ T4323] ? __check_object_size+0x16e/0x3f0 [ 1659.112458][T31752] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1659.117656][ T4323] netlink_sendmsg+0x86d/0xda0 [ 1659.122447][T31752] usb 2-1: config 250 has no interface number 0 [ 1659.127040][ T4323] ? netlink_unicast+0x7d0/0x7d0 [ 1659.131745][T31752] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1659.136679][ T4323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1659.141380][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1659.146052][ T4323] ? netlink_unicast+0x7d0/0x7d0 [ 1659.151271][T31752] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1659.155782][ T4323] sock_sendmsg+0xcf/0x120 [ 1659.161164][T31752] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1659.169417][ T4323] ____sys_sendmsg+0x6e8/0x810 [ 1659.169444][ T4323] ? kernel_sendmsg+0x50/0x50 [ 1659.174446][T31752] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1659.178395][ T4323] ? do_recvmmsg+0x6d0/0x6d0 [ 1659.239704][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1659.239766][ T4323] ? lock_chain_count+0x20/0x20 [ 1659.245991][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1659.250983][ T4323] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1659.251015][ T4323] ___sys_sendmsg+0xf3/0x170 [ 1659.251043][ T4323] ? sendmsg_copy_msghdr+0x160/0x160 [ 1659.251070][ T4323] ? __fget_files+0x21b/0x3e0 [ 1659.251095][ T4323] ? lock_downgrade+0x6e0/0x6e0 [ 1659.262717][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1659.268844][ T4323] ? __fget_files+0x23d/0x3e0 [ 1659.268880][ T4323] ? __fget_light+0xea/0x280 07:57:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 23) [ 1659.268902][ T4323] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.268932][ T4323] __sys_sendmsg+0xe5/0x1b0 [ 1659.268956][ T4323] ? __sys_sendmsg_sock+0x30/0x30 [ 1659.279367][ T9168] usb 6-1: config 250 has no interface number 0 [ 1659.284258][ T4323] ? syscall_enter_from_user_mode+0x21/0x70 [ 1659.294720][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1659.299014][ T4323] do_syscall_64+0x35/0xb0 [ 1659.299039][ T4323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1659.299066][ T4323] RIP: 0033:0x7f238b7b8ae9 [ 1659.299085][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1659.312604][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1659.317226][ T4323] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 [ 1659.321908][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1659.328778][ T4323] ORIG_RAX: 000000000000002e [ 1659.328788][ T4323] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1659.328804][ T4323] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1659.328817][ T4323] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.328831][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1659.333395][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1659.341689][ T4323] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1659.341720][ T4323] [ 1659.341939][ T4323] nbd: failed to add new device [ 1659.346571][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1659.427920][ T4327] FAULT_INJECTION: forcing a failure. [ 1659.427920][ T4327] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.439104][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1659.439130][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1659.443522][ T4327] CPU: 0 PID: 4327 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1659.449466][ T9172] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.453778][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.473392][ T9172] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1659.483734][ T4327] Call Trace: [ 1659.483747][ T4327] [ 1659.483756][ T4327] dump_stack_lvl+0xcd/0x134 [ 1659.500191][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1659.500357][ T4327] should_fail.cold+0x5/0xa [ 1659.505014][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1659.512959][ T4327] ? percpu_ref_init+0xcf/0x3d0 [ 1659.512981][ T4327] should_failslab+0x5/0x10 [ 1659.513004][ T4327] kmem_cache_alloc_trace+0x55/0x2c0 [ 1659.513029][ T4327] ? blk_clear_pm_only+0x80/0x80 [ 1659.513050][ T4327] percpu_ref_init+0xcf/0x3d0 [ 1659.513073][ T4327] blk_alloc_queue+0x42c/0x620 [ 1659.521207][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1659.529063][ T4327] __blk_mq_alloc_disk+0x4c/0x160 [ 1659.529092][ T4327] nbd_dev_add+0x3b2/0xcd0 [ 1659.529123][ T4327] nbd_genl_connect+0x11f3/0x1930 [ 1659.537060][ T2607] usb 5-1: config 250 has no interface number 0 [ 1659.550477][ T4327] ? nbd_start_device+0xd10/0xd10 [ 1659.550505][ T4327] ? __nla_parse+0x3d/0x50 [ 1659.550528][ T4327] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1659.550555][ T4327] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1659.550579][ T4327] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1659.550608][ T4327] genl_family_rcv_msg_doit+0x228/0x320 [ 1659.550633][ T4327] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1659.558851][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1659.561787][ T4327] ? mutex_lock_io_nested+0x1150/0x1150 [ 1659.566616][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1659.573611][ T4327] ? genl_op_from_small+0x23/0x3c0 [ 1659.573635][ T4327] ? genl_get_cmd+0x3cf/0x480 [ 1659.573660][ T4327] genl_rcv_msg+0x328/0x580 [ 1659.586258][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1659.594504][ T4327] ? genl_get_cmd+0x480/0x480 [ 1659.594527][ T4327] ? nbd_start_device+0xd10/0xd10 [ 1659.594558][ T4327] ? lock_release+0x720/0x720 [ 1659.603888][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1659.612117][ T4327] netlink_rcv_skb+0x153/0x420 [ 1659.612148][ T4327] ? genl_get_cmd+0x480/0x480 [ 1659.612170][ T4327] ? netlink_ack+0xa60/0xa60 [ 1659.612193][ T4327] ? netlink_deliver_tap+0x1b1/0xc30 [ 1659.612219][ T4327] ? _copy_from_iter+0x12b/0x1320 [ 1659.612245][ T4327] genl_rcv+0x24/0x40 [ 1659.622716][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1659.632478][ T4327] netlink_unicast+0x533/0x7d0 [ 1659.632507][ T4327] ? netlink_attachskb+0x880/0x880 [ 1659.651181][T31752] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1659.652605][ T4327] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.652640][ T4327] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.652667][ T4327] ? __phys_addr_symbol+0x2c/0x70 [ 1659.661214][T31752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1659.665609][ T4327] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1659.674476][T31752] usb 2-1: SerialNumber: syz [ 1659.679241][ T4327] ? __check_object_size+0x16e/0x3f0 [ 1659.679271][ T4327] netlink_sendmsg+0x86d/0xda0 [ 1659.679298][ T4327] ? netlink_unicast+0x7d0/0x7d0 [ 1659.770662][ T4301] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1659.776522][ T4327] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1659.826429][ T4301] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1659.828988][ T4327] ? netlink_unicast+0x7d0/0x7d0 [ 1659.859870][T31752] hub 2-1:250.228: bad descriptor, ignoring hub [ 1659.861424][ T4327] sock_sendmsg+0xcf/0x120 [ 1659.866084][T31752] hub: probe of 2-1:250.228 failed with error -5 [ 1659.870636][ T4327] ____sys_sendmsg+0x6e8/0x810 [ 1659.870663][ T4327] ? kernel_sendmsg+0x50/0x50 [ 1659.870684][ T4327] ? do_recvmmsg+0x6d0/0x6d0 [ 1659.870710][ T4327] ? lock_chain_count+0x20/0x20 [ 1659.870735][ T4327] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1659.870769][ T4327] ___sys_sendmsg+0xf3/0x170 [ 1659.870802][ T4327] ? sendmsg_copy_msghdr+0x160/0x160 [ 1659.885117][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1659.891919][ T4327] ? __fget_files+0x21b/0x3e0 [ 1659.891948][ T4327] ? lock_downgrade+0x6e0/0x6e0 [ 1659.891983][ T4327] ? __fget_files+0x23d/0x3e0 [ 1659.896729][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1659.901811][ T4327] ? __fget_light+0xea/0x280 [ 1659.901837][ T4327] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1659.901869][ T4327] __sys_sendmsg+0xe5/0x1b0 [ 1659.911015][ T2607] usb 5-1: SerialNumber: syz [ 1659.917252][ T4327] ? __sys_sendmsg_sock+0x30/0x30 [ 1659.926706][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1659.928555][ T4327] ? syscall_enter_from_user_mode+0x21/0x70 [ 1659.928594][ T4327] do_syscall_64+0x35/0xb0 [ 1659.928617][ T4327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1659.928645][ T4327] RIP: 0033:0x7f238b7b8ae9 [ 1659.928664][ T4327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1659.928686][ T4327] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 07:57:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 24) [ 1659.928707][ T4327] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1659.936752][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1659.942523][ T4327] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1659.942537][ T4327] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.942552][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1659.942565][ T4327] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1659.942592][ T4327] [ 1659.943689][ T4327] nbd: failed to add new device [ 1659.947190][ T9168] usb 6-1: SerialNumber: syz [ 1659.953178][T27219] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 1659.969173][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1660.231316][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1660.239365][ T9172] usb 3-1: SerialNumber: syz [ 1660.269254][T31752] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 71 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1660.284383][ T4291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1660.291919][ T4292] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1660.305178][ T4340] FAULT_INJECTION: forcing a failure. [ 1660.305178][ T4340] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.308935][ T4291] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1660.318024][ T4340] CPU: 0 PID: 4340 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1660.326159][ T4292] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1660.333607][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.350516][ T4340] Call Trace: [ 1660.353796][ T4340] [ 1660.356814][ T4340] dump_stack_lvl+0xcd/0x134 [ 1660.361412][ T4340] should_fail.cold+0x5/0xa [ 1660.365914][ T4340] ? blkg_alloc+0x88/0x670 [ 1660.370318][ T4340] should_failslab+0x5/0x10 [ 1660.374899][ T4340] kmem_cache_alloc_node_trace+0x59/0x310 [ 1660.380700][ T4340] blkg_alloc+0x88/0x670 [ 1660.384937][ T4340] blkcg_init_queue+0x24/0x780 [ 1660.389693][ T4340] blk_alloc_queue+0x44c/0x620 [ 1660.394450][ T4340] __blk_mq_alloc_disk+0x4c/0x160 [ 1660.399464][ T4340] nbd_dev_add+0x3b2/0xcd0 [ 1660.403875][ T4340] nbd_genl_connect+0x11f3/0x1930 [ 1660.408897][ T4340] ? nbd_start_device+0xd10/0xd10 [ 1660.413999][ T4340] ? __nla_parse+0x3d/0x50 [ 1660.418403][ T4340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1660.424809][ T4340] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1660.432169][ T4340] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1660.439450][ T4340] genl_family_rcv_msg_doit+0x228/0x320 [ 1660.444989][ T4340] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1660.452433][ T4340] ? mutex_lock_io_nested+0x1150/0x1150 [ 1660.458086][ T4340] ? genl_op_from_small+0x23/0x3c0 [ 1660.463185][ T4340] ? genl_get_cmd+0x3cf/0x480 [ 1660.467854][ T4340] genl_rcv_msg+0x328/0x580 [ 1660.472433][ T4340] ? genl_get_cmd+0x480/0x480 [ 1660.477186][ T4340] ? nbd_start_device+0xd10/0xd10 [ 1660.482312][ T4340] ? lock_release+0x720/0x720 [ 1660.486983][ T4340] netlink_rcv_skb+0x153/0x420 [ 1660.491822][ T4340] ? genl_get_cmd+0x480/0x480 [ 1660.496488][ T4340] ? netlink_ack+0xa60/0xa60 [ 1660.501153][ T4340] ? netlink_deliver_tap+0x1b1/0xc30 [ 1660.506429][ T4340] ? _copy_from_iter+0x12b/0x1320 [ 1660.511443][ T4340] genl_rcv+0x24/0x40 [ 1660.515412][ T4340] netlink_unicast+0x533/0x7d0 [ 1660.520168][ T4340] ? netlink_attachskb+0x880/0x880 [ 1660.525438][ T4340] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1660.531939][ T4340] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1660.538183][ T4340] ? __phys_addr_symbol+0x2c/0x70 [ 1660.543200][ T4340] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1660.548913][ T4340] ? __check_object_size+0x16e/0x3f0 [ 1660.554189][ T4340] netlink_sendmsg+0x86d/0xda0 [ 1660.558943][ T4340] ? netlink_unicast+0x7d0/0x7d0 [ 1660.563874][ T4340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1660.570111][ T4340] ? netlink_unicast+0x7d0/0x7d0 [ 1660.575044][ T4340] sock_sendmsg+0xcf/0x120 [ 1660.579453][ T4340] ____sys_sendmsg+0x6e8/0x810 [ 1660.584207][ T4340] ? kernel_sendmsg+0x50/0x50 [ 1660.588871][ T4340] ? do_recvmmsg+0x6d0/0x6d0 [ 1660.593451][ T4340] ? lock_chain_count+0x20/0x20 [ 1660.598289][ T4340] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1660.604263][ T4340] ___sys_sendmsg+0xf3/0x170 [ 1660.608842][ T4340] ? sendmsg_copy_msghdr+0x160/0x160 [ 1660.614121][ T4340] ? __fget_files+0x21b/0x3e0 [ 1660.618787][ T4340] ? lock_downgrade+0x6e0/0x6e0 [ 1660.623639][ T4340] ? __fget_files+0x23d/0x3e0 [ 1660.628308][ T4340] ? __fget_light+0xea/0x280 [ 1660.632889][ T4340] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1660.639122][ T4340] __sys_sendmsg+0xe5/0x1b0 [ 1660.643787][ T4340] ? __sys_sendmsg_sock+0x30/0x30 [ 1660.648821][ T4340] ? syscall_enter_from_user_mode+0x21/0x70 [ 1660.654710][ T4340] do_syscall_64+0x35/0xb0 [ 1660.659113][ T4340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1660.664999][ T4340] RIP: 0033:0x7f238b7b8ae9 [ 1660.669401][ T4340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.688993][ T4340] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1660.697392][ T4340] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1660.705349][ T4340] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1660.713305][ T4340] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.721261][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.729216][ T4340] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1660.737182][ T4340] [ 1660.740479][ T4340] nbd: failed to add new device [ 1660.748140][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1660.759931][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1660.766283][ T2607] hub: probe of 5-1:250.228 failed with error -5 [ 1660.773867][ T9168] hub 6-1:250.228: bad descriptor, ignoring hub [ 1660.780243][ T9168] hub: probe of 6-1:250.228 failed with error -5 07:57:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 25) [ 1660.840710][T27219] usb 1-1: device firmware changed [ 1660.852941][T27219] usb 1-1: USB disconnect, device number 31 [ 1660.877366][T27219] usblp3: removed [ 1660.886436][ T4360] FAULT_INJECTION: forcing a failure. [ 1660.886436][ T4360] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.899322][ T4360] CPU: 1 PID: 4360 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1660.907831][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.917973][ T4360] Call Trace: [ 1660.921248][ T4360] [ 1660.924176][ T4360] dump_stack_lvl+0xcd/0x134 [ 1660.928778][ T4360] should_fail.cold+0x5/0xa [ 1660.933465][ T4360] ? percpu_ref_init+0xcf/0x3d0 [ 1660.938319][ T4360] should_failslab+0x5/0x10 [ 1660.943007][ T4360] kmem_cache_alloc_trace+0x55/0x2c0 [ 1660.948385][ T4360] ? blkg_async_bio_workfn+0x2b0/0x2b0 [ 1660.953941][ T4360] percpu_ref_init+0xcf/0x3d0 [ 1660.958627][ T4360] blkg_alloc+0xb4/0x670 [ 1660.962887][ T4360] blkcg_init_queue+0x24/0x780 [ 1660.967669][ T4360] blk_alloc_queue+0x44c/0x620 [ 1660.972443][ T4360] __blk_mq_alloc_disk+0x4c/0x160 [ 1660.977480][ T4360] nbd_dev_add+0x3b2/0xcd0 [ 1660.981909][ T4360] nbd_genl_connect+0x11f3/0x1930 [ 1660.986948][ T4360] ? nbd_start_device+0xd10/0xd10 [ 1660.991980][ T4360] ? __nla_parse+0x3d/0x50 [ 1660.996388][ T4360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1661.002729][ T4360] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1661.010283][ T4360] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1661.017574][ T4360] genl_family_rcv_msg_doit+0x228/0x320 [ 1661.023106][ T4360] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1661.030650][ T4360] ? mutex_lock_io_nested+0x1150/0x1150 [ 1661.036606][ T4360] ? genl_op_from_small+0x23/0x3c0 [ 1661.041717][ T4360] ? genl_get_cmd+0x3cf/0x480 [ 1661.046602][ T4360] genl_rcv_msg+0x328/0x580 [ 1661.051109][ T4360] ? genl_get_cmd+0x480/0x480 [ 1661.055778][ T4360] ? nbd_start_device+0xd10/0xd10 [ 1661.061034][ T4360] ? lock_release+0x720/0x720 [ 1661.065716][ T4360] netlink_rcv_skb+0x153/0x420 [ 1661.070808][ T4360] ? genl_get_cmd+0x480/0x480 [ 1661.075491][ T4360] ? netlink_ack+0xa60/0xa60 [ 1661.080097][ T4360] ? netlink_deliver_tap+0x1b1/0xc30 [ 1661.085402][ T4360] ? _copy_from_iter+0x12b/0x1320 [ 1661.090433][ T4360] genl_rcv+0x24/0x40 [ 1661.094407][ T4360] netlink_unicast+0x533/0x7d0 [ 1661.099263][ T4360] ? netlink_attachskb+0x880/0x880 [ 1661.104381][ T4360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.110739][ T4360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.117068][ T4360] ? __phys_addr_symbol+0x2c/0x70 [ 1661.122180][ T4360] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1661.127987][ T4360] ? __check_object_size+0x16e/0x3f0 [ 1661.133282][ T4360] netlink_sendmsg+0x86d/0xda0 [ 1661.138058][ T4360] ? netlink_unicast+0x7d0/0x7d0 [ 1661.143172][ T4360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1661.149415][ T4360] ? netlink_unicast+0x7d0/0x7d0 [ 1661.154350][ T4360] sock_sendmsg+0xcf/0x120 [ 1661.158781][ T4360] ____sys_sendmsg+0x6e8/0x810 [ 1661.163806][ T4360] ? kernel_sendmsg+0x50/0x50 [ 1661.168481][ T4360] ? do_recvmmsg+0x6d0/0x6d0 [ 1661.173264][ T4360] ? lock_chain_count+0x20/0x20 [ 1661.178122][ T4360] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1661.184097][ T4360] ___sys_sendmsg+0xf3/0x170 [ 1661.188762][ T4360] ? sendmsg_copy_msghdr+0x160/0x160 [ 1661.194037][ T4360] ? __fget_files+0x21b/0x3e0 [ 1661.198704][ T4360] ? lock_downgrade+0x6e0/0x6e0 [ 1661.203561][ T4360] ? __fget_files+0x23d/0x3e0 [ 1661.208259][ T4360] ? __fget_light+0xea/0x280 [ 1661.212850][ T4360] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.219090][ T4360] __sys_sendmsg+0xe5/0x1b0 [ 1661.223587][ T4360] ? __sys_sendmsg_sock+0x30/0x30 [ 1661.228876][ T4360] ? syscall_enter_from_user_mode+0x21/0x70 [ 1661.234769][ T4360] do_syscall_64+0x35/0xb0 [ 1661.239182][ T4360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1661.245080][ T4360] RIP: 0033:0x7f238b7b8ae9 [ 1661.249505][ T4360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1661.269129][ T4360] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1661.277797][ T4360] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 07:57:32 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1661.285778][ T4360] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1661.293748][ T4360] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.301731][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1661.309702][ T4360] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1661.317959][ T4360] [ 1661.321471][ T4360] nbd: failed to add new device 07:57:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 26) [ 1661.460466][ T4380] FAULT_INJECTION: forcing a failure. [ 1661.460466][ T4380] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.473469][ T4380] CPU: 1 PID: 4380 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1661.481815][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.491881][ T4380] Call Trace: [ 1661.495162][ T4380] [ 1661.498091][ T4380] dump_stack_lvl+0xcd/0x134 [ 1661.502699][ T4380] should_fail.cold+0x5/0xa [ 1661.507316][ T4380] ? blk_throtl_init+0x7c/0x650 [ 1661.512189][ T4380] should_failslab+0x5/0x10 [ 1661.516712][ T4380] kmem_cache_alloc_node_trace+0x59/0x310 [ 1661.522546][ T4380] blk_throtl_init+0x7c/0x650 [ 1661.527344][ T4380] blkcg_init_queue+0x158/0x780 [ 1661.532476][ T4380] blk_alloc_queue+0x44c/0x620 [ 1661.537259][ T4380] __blk_mq_alloc_disk+0x4c/0x160 [ 1661.542701][ T4380] nbd_dev_add+0x3b2/0xcd0 [ 1661.547126][ T4380] nbd_genl_connect+0x11f3/0x1930 [ 1661.552187][ T4380] ? nbd_start_device+0xd10/0xd10 [ 1661.557237][ T4380] ? __nla_parse+0x3d/0x50 [ 1661.561676][ T4380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1661.568112][ T4380] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1661.575503][ T4380] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1661.583029][ T4380] genl_family_rcv_msg_doit+0x228/0x320 [ 1661.588596][ T4380] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1661.595974][ T4380] ? mutex_lock_io_nested+0x1150/0x1150 [ 1661.601540][ T4380] ? genl_op_from_small+0x23/0x3c0 [ 1661.606657][ T4380] ? genl_get_cmd+0x3cf/0x480 07:57:33 executing program 0: r0 = syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x6e1e, &(0x7f00000002c0)={0x0, 0x5e76, 0x4, 0x0, 0x262, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x10}}, 0x20}}, 0x10000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_newneigh={0x28, 0x1c, 0x8, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, r8, 0x1, 0x20}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48000) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000380)={r6, r7+60000000}, 0x1, 0x1}, 0x1) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_disconnect(r2) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) [ 1661.609574][ T4375] UDC core: couldn't find an available UDC or it's busy: -16 [ 1661.611336][ T4380] genl_rcv_msg+0x328/0x580 [ 1661.611367][ T4380] ? genl_get_cmd+0x480/0x480 [ 1661.611390][ T4380] ? nbd_start_device+0xd10/0xd10 [ 1661.618788][ T4375] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1661.623240][ T4380] ? lock_release+0x720/0x720 [ 1661.644976][ T4380] netlink_rcv_skb+0x153/0x420 [ 1661.649749][ T4380] ? genl_get_cmd+0x480/0x480 [ 1661.654437][ T4380] ? netlink_ack+0xa60/0xa60 [ 1661.659037][ T4380] ? netlink_deliver_tap+0x1b1/0xc30 [ 1661.664344][ T4380] ? _copy_from_iter+0x12b/0x1320 [ 1661.669392][ T4380] genl_rcv+0x24/0x40 [ 1661.673394][ T4380] netlink_unicast+0x533/0x7d0 [ 1661.678187][ T4380] ? netlink_attachskb+0x880/0x880 [ 1661.683317][ T4380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.689585][ T4380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.695846][ T4380] ? __phys_addr_symbol+0x2c/0x70 [ 1661.700889][ T4380] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1661.706631][ T4380] ? __check_object_size+0x16e/0x3f0 [ 1661.711947][ T4380] netlink_sendmsg+0x86d/0xda0 [ 1661.716739][ T4380] ? netlink_unicast+0x7d0/0x7d0 [ 1661.721707][ T4380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1661.727970][ T4380] ? netlink_unicast+0x7d0/0x7d0 [ 1661.732925][ T4380] sock_sendmsg+0xcf/0x120 [ 1661.737363][ T4380] ____sys_sendmsg+0x6e8/0x810 [ 1661.742151][ T4380] ? kernel_sendmsg+0x50/0x50 [ 1661.746847][ T4380] ? do_recvmmsg+0x6d0/0x6d0 [ 1661.751460][ T4380] ? lock_chain_count+0x20/0x20 [ 1661.756335][ T4380] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1661.762351][ T4380] ___sys_sendmsg+0xf3/0x170 [ 1661.766966][ T4380] ? sendmsg_copy_msghdr+0x160/0x160 [ 1661.772280][ T4380] ? __fget_files+0x21b/0x3e0 [ 1661.776977][ T4380] ? lock_downgrade+0x6e0/0x6e0 [ 1661.781864][ T4380] ? __fget_files+0x23d/0x3e0 [ 1661.786743][ T4380] ? __fget_light+0xea/0x280 [ 1661.791443][ T4380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1661.797709][ T4380] __sys_sendmsg+0xe5/0x1b0 [ 1661.802226][ T4380] ? __sys_sendmsg_sock+0x30/0x30 [ 1661.807280][ T4380] ? syscall_enter_from_user_mode+0x21/0x70 [ 1661.813203][ T4380] do_syscall_64+0x35/0xb0 [ 1661.817647][ T4380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1661.823569][ T4380] RIP: 0033:0x7f238b7b8ae9 [ 1661.827996][ T4380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1661.847627][ T4380] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1661.856050][ T4380] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1661.864016][ T4380] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1661.871979][ T4380] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.879947][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1661.887911][ T4380] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1661.895986][ T4380] [ 1661.900031][ T4380] nbd: failed to add new device 07:57:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 27) [ 1661.910426][T20208] usb 2-1: reset high-speed USB device number 71 using dummy_hcd [ 1661.967509][ T4397] FAULT_INJECTION: forcing a failure. [ 1661.967509][ T4397] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.980761][ T4397] CPU: 1 PID: 4397 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1661.989185][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.999248][ T4397] Call Trace: [ 1662.002542][ T4397] [ 1662.005577][ T4397] dump_stack_lvl+0xcd/0x134 [ 1662.010197][ T4397] should_fail.cold+0x5/0xa [ 1662.014898][ T4397] ? throtl_pd_alloc+0xbb/0xa80 [ 1662.019848][ T4397] should_failslab+0x5/0x10 [ 1662.024358][ T4397] kmem_cache_alloc_node_trace+0x59/0x310 [ 1662.030248][ T4397] ? rwlock_bug.part.0+0x90/0x90 [ 1662.035192][ T4397] ? _raw_spin_lock_irq+0x41/0x50 [ 1662.040396][ T4397] ? throtl_charge_bio+0x230/0x230 [ 1662.045587][ T4397] throtl_pd_alloc+0xbb/0xa80 [ 1662.050341][ T4397] ? throtl_charge_bio+0x230/0x230 [ 1662.055527][ T4397] blkcg_activate_policy+0x232/0xc00 [ 1662.060811][ T4397] blk_throtl_init+0x43d/0x650 [ 1662.065741][ T4397] blkcg_init_queue+0x158/0x780 [ 1662.070718][ T4397] blk_alloc_queue+0x44c/0x620 [ 1662.075478][ T4397] __blk_mq_alloc_disk+0x4c/0x160 [ 1662.080501][ T4397] nbd_dev_add+0x3b2/0xcd0 [ 1662.084909][ T4397] nbd_genl_connect+0x11f3/0x1930 [ 1662.089928][ T4397] ? nbd_start_device+0xd10/0xd10 [ 1662.095165][ T4397] ? __nla_parse+0x3d/0x50 [ 1662.099579][ T4397] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1662.105827][ T4397] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1662.113198][ T4397] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1662.120484][ T4397] genl_family_rcv_msg_doit+0x228/0x320 [ 1662.126034][ T4397] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1662.133610][ T4397] ? mutex_lock_io_nested+0x1150/0x1150 [ 1662.139160][ T4397] ? genl_op_from_small+0x23/0x3c0 [ 1662.144353][ T4397] ? genl_get_cmd+0x3cf/0x480 [ 1662.149021][ T4397] genl_rcv_msg+0x328/0x580 [ 1662.153514][ T4397] ? genl_get_cmd+0x480/0x480 [ 1662.158177][ T4397] ? nbd_start_device+0xd10/0xd10 [ 1662.163198][ T4397] ? lock_release+0x720/0x720 [ 1662.167865][ T4397] netlink_rcv_skb+0x153/0x420 [ 1662.172791][ T4397] ? genl_get_cmd+0x480/0x480 [ 1662.177641][ T4397] ? netlink_ack+0xa60/0xa60 [ 1662.182221][ T4397] ? netlink_deliver_tap+0x1b1/0xc30 [ 1662.187584][ T4397] ? _copy_from_iter+0x12b/0x1320 [ 1662.192598][ T4397] genl_rcv+0x24/0x40 [ 1662.196565][ T4397] netlink_unicast+0x533/0x7d0 [ 1662.201320][ T4397] ? netlink_attachskb+0x880/0x880 [ 1662.206588][ T4397] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1662.212816][ T4397] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1662.219301][ T4397] ? __phys_addr_symbol+0x2c/0x70 [ 1662.224666][ T4397] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1662.230572][ T4397] ? __check_object_size+0x16e/0x3f0 [ 1662.235939][ T4397] netlink_sendmsg+0x86d/0xda0 [ 1662.240986][ T4397] ? netlink_unicast+0x7d0/0x7d0 [ 1662.245913][ T4397] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1662.252142][ T4397] ? netlink_unicast+0x7d0/0x7d0 [ 1662.257063][ T4397] sock_sendmsg+0xcf/0x120 [ 1662.261464][ T4397] ____sys_sendmsg+0x6e8/0x810 [ 1662.266218][ T4397] ? kernel_sendmsg+0x50/0x50 [ 1662.270888][ T4397] ? do_recvmmsg+0x6d0/0x6d0 [ 1662.275465][ T4397] ? lock_chain_count+0x20/0x20 [ 1662.280303][ T4397] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1662.286292][ T4397] ___sys_sendmsg+0xf3/0x170 [ 1662.290877][ T4397] ? sendmsg_copy_msghdr+0x160/0x160 [ 1662.296168][ T4397] ? __fget_files+0x21b/0x3e0 [ 1662.300834][ T4397] ? lock_downgrade+0x6e0/0x6e0 [ 1662.305704][ T4397] ? __fget_files+0x23d/0x3e0 [ 1662.310370][ T4397] ? __fget_light+0xea/0x280 [ 1662.314946][ T4397] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1662.321178][ T4397] __sys_sendmsg+0xe5/0x1b0 [ 1662.325873][ T4397] ? __sys_sendmsg_sock+0x30/0x30 [ 1662.330901][ T4397] ? syscall_enter_from_user_mode+0x21/0x70 [ 1662.336976][ T4397] do_syscall_64+0x35/0xb0 [ 1662.341378][ T4397] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1662.347258][ T4397] RIP: 0033:0x7f238b7b8ae9 [ 1662.351659][ T4397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1662.371258][ T4397] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.379838][ T4397] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1662.387805][ T4397] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1662.395761][ T4397] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.403890][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1662.411844][ T4397] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1662.419902][ T4397] [ 1662.656609][T30559] usb 3-1: USB disconnect, device number 92 [ 1662.748771][T27219] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1662.756707][T20208] usb 2-1: device not accepting address 71, error -71 [ 1662.999347][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1663.119473][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1663.128367][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1663.137527][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1663.147002][T27219] usb 1-1: config 250 has no interface number 0 [ 1663.153396][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1663.165255][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1663.175927][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1663.186604][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1663.200520][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1663.278801][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1663.288446][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1663.296659][T27219] usb 1-1: SerialNumber: syz [ 1663.321395][ T4391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1663.329183][ T4391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1663.339644][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1663.345901][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1663.640192][T20208] usb 2-1: USB disconnect, device number 71 [ 1663.647802][T20208] usblp0: removed [ 1663.653816][ T9168] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1663.667575][ T2607] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1663.678715][ C0] usblp0: nonzero read bulk status received: -71 07:57:35 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1663.686368][T27219] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:57:35 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000002c0)=""/194, 0xc2}], 0x2}, 0x20) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 28) 07:57:35 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 1) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1663.741626][ T9168] usb 6-1: USB disconnect, device number 49 [ 1663.804800][ T4447] FAULT_INJECTION: forcing a failure. [ 1663.804800][ T4447] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.818427][ T4447] CPU: 0 PID: 4447 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1663.826779][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.836855][ T4447] Call Trace: [ 1663.840142][ T4447] [ 1663.843079][ T4447] dump_stack_lvl+0xcd/0x134 [ 1663.847778][ T4447] should_fail.cold+0x5/0xa [ 1663.852302][ T4447] ? blk_iolatency_init+0x4b/0x380 [ 1663.857427][ T4447] should_failslab+0x5/0x10 [ 1663.861946][ T4447] kmem_cache_alloc_trace+0x55/0x2c0 [ 1663.867422][ T4447] blk_iolatency_init+0x4b/0x380 [ 1663.872385][ T4447] blkcg_init_queue+0x194/0x780 [ 1663.877266][ T4447] blk_alloc_queue+0x44c/0x620 [ 1663.882054][ T4447] __blk_mq_alloc_disk+0x4c/0x160 [ 1663.887100][ T4447] nbd_dev_add+0x3b2/0xcd0 [ 1663.891544][ T4447] nbd_genl_connect+0x11f3/0x1930 [ 1663.896599][ T4447] ? nbd_start_device+0xd10/0xd10 [ 1663.901645][ T4447] ? __nla_parse+0x3d/0x50 [ 1663.906083][ T4447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1663.912348][ T4447] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1663.919916][ T4447] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1663.927234][ T4447] genl_family_rcv_msg_doit+0x228/0x320 [ 1663.932807][ T4447] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1663.940294][ T4447] ? mutex_lock_io_nested+0x1150/0x1150 [ 1663.945868][ T4447] ? genl_op_from_small+0x23/0x3c0 [ 1663.951173][ T4447] ? genl_get_cmd+0x3cf/0x480 [ 1663.955886][ T4447] genl_rcv_msg+0x328/0x580 [ 1663.960421][ T4447] ? genl_get_cmd+0x480/0x480 [ 1663.965124][ T4447] ? nbd_start_device+0xd10/0xd10 [ 1663.970173][ T4447] ? lock_release+0x720/0x720 [ 1663.974865][ T4447] netlink_rcv_skb+0x153/0x420 [ 1663.979652][ T4447] ? genl_get_cmd+0x480/0x480 [ 1663.984358][ T4447] ? netlink_ack+0xa60/0xa60 [ 1663.988971][ T4447] ? netlink_deliver_tap+0x1b1/0xc30 [ 1663.994269][ T4447] ? _copy_from_iter+0x12b/0x1320 [ 1663.999168][ T9168] usblp0: removed [ 1663.999300][ T4447] genl_rcv+0x24/0x40 [ 1664.006889][ T4447] netlink_unicast+0x533/0x7d0 [ 1664.011661][ T4447] ? netlink_attachskb+0x880/0x880 [ 1664.016774][ T4447] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.023564][ T4447] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.029819][ T4447] ? __phys_addr_symbol+0x2c/0x70 [ 1664.034850][ T4447] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1664.040581][ T4447] ? __check_object_size+0x16e/0x3f0 [ 1664.046104][ T4447] netlink_sendmsg+0x86d/0xda0 [ 1664.050858][ T4447] ? netlink_unicast+0x7d0/0x7d0 [ 1664.055789][ T4447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1664.062026][ T4447] ? netlink_unicast+0x7d0/0x7d0 [ 1664.066957][ T4447] sock_sendmsg+0xcf/0x120 [ 1664.071534][ T4447] ____sys_sendmsg+0x6e8/0x810 [ 1664.076287][ T4447] ? kernel_sendmsg+0x50/0x50 [ 1664.080950][ T4447] ? do_recvmmsg+0x6d0/0x6d0 [ 1664.085532][ T4447] ? lock_chain_count+0x20/0x20 [ 1664.090377][ T4447] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1664.096458][ T4447] ___sys_sendmsg+0xf3/0x170 [ 1664.101042][ T4447] ? sendmsg_copy_msghdr+0x160/0x160 [ 1664.106408][ T4447] ? __fget_files+0x21b/0x3e0 [ 1664.111089][ T4447] ? lock_downgrade+0x6e0/0x6e0 [ 1664.115934][ T4447] ? __fget_files+0x23d/0x3e0 [ 1664.120604][ T4447] ? __fget_light+0xea/0x280 [ 1664.125538][ T4447] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.131864][ T4447] __sys_sendmsg+0xe5/0x1b0 [ 1664.136372][ T4447] ? __sys_sendmsg_sock+0x30/0x30 [ 1664.141486][ T4447] ? syscall_enter_from_user_mode+0x21/0x70 [ 1664.147609][ T4447] do_syscall_64+0x35/0xb0 [ 1664.152025][ T4447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1664.157912][ T4447] RIP: 0033:0x7f238b7b8ae9 [ 1664.162322][ T4447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.182332][ T4447] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.190913][ T4447] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1664.199048][ T4447] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1664.207353][ T4447] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.215336][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1664.223470][ T4447] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1664.231528][ T4447] [ 1664.236240][ T4447] nbd: failed to add new device [ 1664.248474][T27219] usb 1-1: USB disconnect, device number 32 07:57:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 29) [ 1664.256285][T27219] usblp2: removed [ 1664.312244][ T2607] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 1664.325054][ T4470] FAULT_INJECTION: forcing a failure. [ 1664.325054][ T4470] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.337859][ T4470] CPU: 1 PID: 4470 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1664.346194][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.356262][ T4470] Call Trace: [ 1664.359547][ T4470] [ 1664.362571][ T4470] dump_stack_lvl+0xcd/0x134 [ 1664.367177][ T4470] should_fail.cold+0x5/0xa [ 1664.371783][ T4470] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1664.377692][ T4470] ? iolatency_pd_alloc+0xb8/0x1b0 [ 1664.383089][ T4470] should_failslab+0x5/0x10 [ 1664.387607][ T4470] kmem_cache_alloc_node_trace+0x59/0x310 [ 1664.393350][ T4470] ? rwlock_bug.part.0+0x90/0x90 [ 1664.398321][ T4470] iolatency_pd_alloc+0xb8/0x1b0 [ 1664.403279][ T4470] ? iolat_acquire_inflight+0x50/0x50 [ 1664.408653][ T4470] blkcg_activate_policy+0x232/0xc00 [ 1664.414035][ T4470] blk_iolatency_init+0x1aa/0x380 [ 1664.419075][ T4470] blkcg_init_queue+0x194/0x780 [ 1664.423951][ T4470] blk_alloc_queue+0x44c/0x620 [ 1664.428724][ T4470] __blk_mq_alloc_disk+0x4c/0x160 [ 1664.433768][ T4470] nbd_dev_add+0x3b2/0xcd0 [ 1664.438186][ T4470] nbd_genl_connect+0x11f3/0x1930 [ 1664.443204][ T4470] ? nbd_start_device+0xd10/0xd10 [ 1664.448218][ T4470] ? __nla_parse+0x3d/0x50 [ 1664.452619][ T4470] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1664.458850][ T4470] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1664.466224][ T4470] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1664.473501][ T4470] genl_family_rcv_msg_doit+0x228/0x320 [ 1664.479242][ T4470] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1664.486825][ T4470] ? mutex_lock_io_nested+0x1150/0x1150 [ 1664.492602][ T4470] ? genl_op_from_small+0x23/0x3c0 [ 1664.497704][ T4470] ? genl_get_cmd+0x3cf/0x480 [ 1664.502374][ T4470] genl_rcv_msg+0x328/0x580 [ 1664.506882][ T4470] ? genl_get_cmd+0x480/0x480 [ 1664.511544][ T4470] ? nbd_start_device+0xd10/0xd10 [ 1664.516562][ T4470] ? lock_release+0x720/0x720 [ 1664.521541][ T4470] netlink_rcv_skb+0x153/0x420 [ 1664.526294][ T4470] ? genl_get_cmd+0x480/0x480 [ 1664.530956][ T4470] ? netlink_ack+0xa60/0xa60 [ 1664.535534][ T4470] ? netlink_deliver_tap+0x1b1/0xc30 [ 1664.540811][ T4470] ? _copy_from_iter+0x12b/0x1320 [ 1664.545841][ T4470] genl_rcv+0x24/0x40 [ 1664.548716][T20208] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1664.549822][ T4470] netlink_unicast+0x533/0x7d0 [ 1664.562127][ T4470] ? netlink_attachskb+0x880/0x880 [ 1664.567336][ T4470] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.573681][ T4470] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.579936][ T4470] ? __phys_addr_symbol+0x2c/0x70 [ 1664.584952][ T4470] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1664.590658][ T4470] ? __check_object_size+0x16e/0x3f0 [ 1664.595935][ T4470] netlink_sendmsg+0x86d/0xda0 [ 1664.600688][ T4470] ? netlink_unicast+0x7d0/0x7d0 [ 1664.605615][ T4470] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1664.611849][ T4470] ? netlink_unicast+0x7d0/0x7d0 [ 1664.616777][ T4470] sock_sendmsg+0xcf/0x120 [ 1664.621192][ T4470] ____sys_sendmsg+0x6e8/0x810 [ 1664.625945][ T4470] ? kernel_sendmsg+0x50/0x50 [ 1664.630610][ T4470] ? do_recvmmsg+0x6d0/0x6d0 [ 1664.635190][ T4470] ? lock_chain_count+0x20/0x20 [ 1664.638732][T27219] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1664.640028][ T4470] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1664.640066][ T4470] ___sys_sendmsg+0xf3/0x170 [ 1664.658118][ T4470] ? sendmsg_copy_msghdr+0x160/0x160 [ 1664.663404][ T4470] ? __fget_files+0x21b/0x3e0 [ 1664.668070][ T4470] ? lock_downgrade+0x6e0/0x6e0 [ 1664.672913][ T4470] ? __fget_files+0x23d/0x3e0 [ 1664.677580][ T4470] ? __fget_light+0xea/0x280 [ 1664.682159][ T4470] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1664.686096][ T4474] UDC core: couldn't find an available UDC or it's busy: -16 [ 1664.688397][ T4470] __sys_sendmsg+0xe5/0x1b0 [ 1664.695961][ T4474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1664.700315][ T4470] ? __sys_sendmsg_sock+0x30/0x30 [ 1664.713020][ T4470] ? syscall_enter_from_user_mode+0x21/0x70 [ 1664.718930][ T4470] do_syscall_64+0x35/0xb0 [ 1664.723339][ T4470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1664.729222][ T4470] RIP: 0033:0x7f238b7b8ae9 [ 1664.733620][ T4470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.753310][ T4470] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1664.761811][ T4470] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1664.769785][ T4470] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1664.777745][ T4470] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.785697][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1664.789362][T20208] usb 2-1: Using ep0 maxpacket: 8 [ 1664.793654][ T4470] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1664.806621][ T4470] 07:57:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 30) [ 1664.812612][ T9172] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1664.882155][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1664.914966][ T4483] FAULT_INJECTION: forcing a failure. [ 1664.914966][ T4483] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.920844][T20208] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1664.928282][ T4483] CPU: 1 PID: 4483 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1664.936438][T20208] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1664.944652][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.944667][ T4483] Call Trace: [ 1664.944675][ T4483] [ 1664.944684][ T4483] dump_stack_lvl+0xcd/0x134 [ 1664.944715][ T4483] should_fail.cold+0x5/0xa [ 1664.944739][ T4483] ? blk_stat_alloc_callback+0x54/0x280 [ 1664.944761][ T4483] should_failslab+0x5/0x10 [ 1664.944782][ T4483] kmem_cache_alloc_trace+0x55/0x2c0 [ 1664.944805][ T4483] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1664.944840][ T4483] ? blk_mq_delay_kick_requeue_list+0x30/0x30 [ 1664.944863][ T4483] ? blk_mq_has_request+0xb0/0xb0 [ 1664.944884][ T4483] blk_stat_alloc_callback+0x54/0x280 [ 1664.944913][ T4483] blk_mq_init_allocated_queue+0x89/0x12c0 [ 1664.944941][ T4483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1664.944968][ T4483] ? blkcg_init_queue+0x17b/0x780 [ 1664.944994][ T4483] ? blk_queue_dma_alignment+0xc/0x50 [ 1664.953980][T20208] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1664.963977][ T4483] ? blk_set_default_limits+0x9/0x620 [ 1664.964009][ T4483] ? blk_alloc_queue+0x4ae/0x620 [ 1664.964033][ T4483] __blk_mq_alloc_disk+0x8b/0x160 [ 1664.967306][T20208] usb 2-1: config 250 has no interface number 0 [ 1664.970219][ T4483] nbd_dev_add+0x3b2/0xcd0 [ 1664.970249][ T4483] nbd_genl_connect+0x11f3/0x1930 [ 1664.974930][T20208] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1664.979381][ T4483] ? nbd_start_device+0xd10/0xd10 [ 1664.979408][ T4483] ? __nla_parse+0x3d/0x50 [ 1664.984958][T20208] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1664.989399][ T4483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1664.989429][ T4483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1664.994703][T20208] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1665.000124][ T4483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1665.000156][ T4483] genl_family_rcv_msg_doit+0x228/0x320 [ 1665.006196][T20208] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1665.011188][ T4483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1665.011214][ T4483] ? mutex_lock_io_nested+0x1150/0x1150 [ 1665.016561][T20208] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1665.022427][ T4483] ? genl_op_from_small+0x23/0x3c0 [ 1665.022451][ T4483] ? genl_get_cmd+0x3cf/0x480 [ 1665.190580][ T4483] genl_rcv_msg+0x328/0x580 [ 1665.195086][ T4483] ? genl_get_cmd+0x480/0x480 [ 1665.199752][ T4483] ? nbd_start_device+0xd10/0xd10 [ 1665.204773][ T4483] ? lock_release+0x720/0x720 [ 1665.209449][ T4483] netlink_rcv_skb+0x153/0x420 [ 1665.214207][ T4483] ? genl_get_cmd+0x480/0x480 [ 1665.218870][ T4483] ? netlink_ack+0xa60/0xa60 [ 1665.223451][ T4483] ? netlink_deliver_tap+0x1b1/0xc30 [ 1665.228727][ T4483] ? _copy_from_iter+0x12b/0x1320 [ 1665.233743][ T4483] genl_rcv+0x24/0x40 [ 1665.237714][ T4483] netlink_unicast+0x533/0x7d0 [ 1665.242470][ T4483] ? netlink_attachskb+0x880/0x880 [ 1665.247567][ T4483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1665.253801][ T4483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1665.260043][ T4483] ? __phys_addr_symbol+0x2c/0x70 [ 1665.265058][ T4483] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1665.270770][ T4483] ? __check_object_size+0x16e/0x3f0 [ 1665.276053][ T4483] netlink_sendmsg+0x86d/0xda0 [ 1665.280816][ T4483] ? netlink_unicast+0x7d0/0x7d0 [ 1665.285747][ T4483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1665.291980][ T4483] ? netlink_unicast+0x7d0/0x7d0 [ 1665.296907][ T4483] sock_sendmsg+0xcf/0x120 [ 1665.301316][ T4483] ____sys_sendmsg+0x6e8/0x810 [ 1665.306071][ T4483] ? kernel_sendmsg+0x50/0x50 [ 1665.310736][ T4483] ? do_recvmmsg+0x6d0/0x6d0 [ 1665.315318][ T4483] ? lock_chain_count+0x20/0x20 [ 1665.320158][ T4483] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1665.326136][ T4483] ___sys_sendmsg+0xf3/0x170 [ 1665.330719][ T4483] ? sendmsg_copy_msghdr+0x160/0x160 [ 1665.335999][ T4483] ? __fget_files+0x21b/0x3e0 [ 1665.340666][ T4483] ? lock_downgrade+0x6e0/0x6e0 [ 1665.345515][ T4483] ? __fget_files+0x23d/0x3e0 [ 1665.350189][ T4483] ? __fget_light+0xea/0x280 [ 1665.354770][ T4483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1665.361009][ T4483] __sys_sendmsg+0xe5/0x1b0 [ 1665.365509][ T4483] ? __sys_sendmsg_sock+0x30/0x30 [ 1665.370538][ T4483] ? syscall_enter_from_user_mode+0x21/0x70 [ 1665.376428][ T4483] do_syscall_64+0x35/0xb0 [ 1665.380921][ T4483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1665.386895][ T4483] RIP: 0033:0x7f238b7b8ae9 [ 1665.391386][ T4483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.411076][ T4483] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1665.419484][ T4483] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1665.427447][ T4483] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1665.435408][ T4483] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.443372][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1665.451337][ T4483] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1665.459310][ T4483] [ 1665.463471][ T4483] nbd: failed to add new device [ 1665.539059][ T9168] usb 6-1: new high-speed USB device number 50 using dummy_hcd 07:57:37 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff110701ffe0000009058202a600"/53], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="1b0000001a005f0014f9f507000909000200"/27, 0x1b) sendfile(r4, r5, &(0x7f0000000080)=0x10000, 0x8) [ 1665.599591][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1665.605192][ T9172] usb 3-1: Using ep0 maxpacket: 8 07:57:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 31) [ 1665.641784][T20208] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1665.651242][T20208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1665.659418][T20208] usb 2-1: SerialNumber: syz [ 1665.664737][T27219] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1665.672368][T27219] usb 1-1: can't read configurations, error -71 [ 1665.707414][ T4442] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1665.722359][ T4442] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1665.739213][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1665.744376][ T4495] FAULT_INJECTION: forcing a failure. [ 1665.744376][ T4495] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.747716][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1665.760412][ T4495] CPU: 0 PID: 4495 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1665.769287][ T9172] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.777546][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.787784][ T9172] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1665.797870][ T4495] Call Trace: [ 1665.797878][ T4495] [ 1665.797887][ T4495] dump_stack_lvl+0xcd/0x134 [ 1665.817898][ T4495] should_fail.cold+0x5/0xa [ 1665.822410][ T4495] ? blk_mq_delay_kick_requeue_list+0x30/0x30 [ 1665.828483][ T4495] ? blk_stat_alloc_callback+0x81/0x280 [ 1665.834039][ T4495] should_failslab+0x5/0x10 [ 1665.838547][ T4495] __kmalloc+0x72/0x340 [ 1665.842711][ T4495] ? blk_mq_delay_kick_requeue_list+0x30/0x30 [ 1665.848783][ T4495] ? blk_mq_has_request+0xb0/0xb0 [ 1665.853809][ T4495] blk_stat_alloc_callback+0x81/0x280 [ 1665.859195][ T4495] blk_mq_init_allocated_queue+0x89/0x12c0 [ 1665.865011][ T4495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1665.871264][ T4495] ? blkcg_init_queue+0x17b/0x780 [ 1665.876393][ T4495] ? blk_queue_dma_alignment+0xc/0x50 [ 1665.881775][ T4495] ? blk_set_default_limits+0x9/0x620 [ 1665.887156][ T4495] ? blk_alloc_queue+0x4ae/0x620 [ 1665.892191][ T4495] __blk_mq_alloc_disk+0x8b/0x160 [ 1665.897322][ T4495] nbd_dev_add+0x3b2/0xcd0 [ 1665.901751][ T4495] nbd_genl_connect+0x11f3/0x1930 [ 1665.906793][ T4495] ? nbd_start_device+0xd10/0xd10 [ 1665.911910][ T4495] ? __nla_parse+0x3d/0x50 [ 1665.916507][ T4495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1665.922757][ T4495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1665.930223][ T4495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1665.937777][ T4495] genl_family_rcv_msg_doit+0x228/0x320 [ 1665.943543][ T4495] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1665.950907][ T4495] ? mutex_lock_io_nested+0x1150/0x1150 [ 1665.956466][ T4495] ? genl_op_from_small+0x23/0x3c0 [ 1665.961581][ T4495] ? genl_get_cmd+0x3cf/0x480 [ 1665.966267][ T4495] genl_rcv_msg+0x328/0x580 [ 1665.970785][ T4495] ? genl_get_cmd+0x480/0x480 [ 1665.975474][ T4495] ? nbd_start_device+0xd10/0xd10 [ 1665.980517][ T4495] ? lock_release+0x720/0x720 [ 1665.985206][ T4495] netlink_rcv_skb+0x153/0x420 [ 1665.989974][ T4495] ? genl_get_cmd+0x480/0x480 [ 1665.994658][ T4495] ? netlink_ack+0xa60/0xa60 [ 1665.999257][ T4495] ? netlink_deliver_tap+0x1b1/0xc30 [ 1666.004549][ T4495] ? _copy_from_iter+0x12b/0x1320 [ 1666.009666][ T4495] genl_rcv+0x24/0x40 [ 1666.013651][ T4495] netlink_unicast+0x533/0x7d0 [ 1666.018422][ T4495] ? netlink_attachskb+0x880/0x880 [ 1666.023622][ T4495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.029875][ T4495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.036124][ T4495] ? __phys_addr_symbol+0x2c/0x70 [ 1666.041154][ T4495] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1666.046966][ T4495] ? __check_object_size+0x16e/0x3f0 [ 1666.052264][ T4495] netlink_sendmsg+0x86d/0xda0 07:57:37 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1666.057046][ T4495] ? netlink_unicast+0x7d0/0x7d0 [ 1666.061998][ T4495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1666.068250][ T4495] ? netlink_unicast+0x7d0/0x7d0 [ 1666.073191][ T4495] sock_sendmsg+0xcf/0x120 [ 1666.077616][ T4495] ____sys_sendmsg+0x6e8/0x810 [ 1666.082392][ T4495] ? kernel_sendmsg+0x50/0x50 [ 1666.087078][ T4495] ? do_recvmmsg+0x6d0/0x6d0 [ 1666.091681][ T4495] ? lock_chain_count+0x20/0x20 [ 1666.096541][ T4495] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1666.102543][ T4495] ___sys_sendmsg+0xf3/0x170 [ 1666.107147][ T4495] ? sendmsg_copy_msghdr+0x160/0x160 [ 1666.112430][ T4495] ? __fget_files+0x21b/0x3e0 [ 1666.117112][ T4495] ? lock_downgrade+0x6e0/0x6e0 [ 1666.121963][ T4495] ? __fget_files+0x23d/0x3e0 [ 1666.126632][ T4495] ? __fget_light+0xea/0x280 [ 1666.131217][ T4495] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.137474][ T4495] __sys_sendmsg+0xe5/0x1b0 [ 1666.141981][ T4495] ? __sys_sendmsg_sock+0x30/0x30 [ 1666.147010][ T4495] ? syscall_enter_from_user_mode+0x21/0x70 [ 1666.152915][ T4495] do_syscall_64+0x35/0xb0 [ 1666.157337][ T4495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1666.163458][ T4495] RIP: 0033:0x7f238b7b8ae9 [ 1666.168023][ T4495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.188227][ T4495] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1666.196640][ T4495] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1666.204784][ T4495] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1666.212751][ T4495] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.220802][ T4495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.228879][ T4495] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1666.236850][ T4495] [ 1666.240838][ T4495] nbd: failed to add new device [ 1666.246561][T20208] hub 2-1:250.228: bad descriptor, ignoring hub [ 1666.253303][T20208] hub: probe of 2-1:250.228 failed with error -5 07:57:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 32) [ 1666.253709][ T2607] usb 5-1: can't restore configuration #250 (error=-71) [ 1666.300043][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1666.310163][T20208] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 72 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1666.315126][ T2607] usb 5-1: USB disconnect, device number 36 [ 1666.329207][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1666.338297][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1666.338615][ T4512] FAULT_INJECTION: forcing a failure. [ 1666.338615][ T4512] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.346535][ T9172] usb 3-1: SerialNumber: syz [ 1666.359062][ T4512] CPU: 0 PID: 4512 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1666.372023][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.382078][ T4512] Call Trace: [ 1666.385347][ T4512] [ 1666.388265][ T4512] dump_stack_lvl+0xcd/0x134 [ 1666.392858][ T4512] should_fail.cold+0x5/0xa [ 1666.397357][ T4512] ? blk_mq_init_allocated_queue+0xfd/0x12c0 [ 1666.403329][ T4512] should_failslab+0x5/0x10 [ 1666.407830][ T4512] kmem_cache_alloc_trace+0x55/0x2c0 [ 1666.413110][ T4512] blk_mq_init_allocated_queue+0xfd/0x12c0 [ 1666.419000][ T4512] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1666.425407][ T4512] ? blkcg_init_queue+0x17b/0x780 [ 1666.430422][ T4512] ? blk_queue_dma_alignment+0xc/0x50 [ 1666.435788][ T4512] ? blk_set_default_limits+0x9/0x620 [ 1666.441162][ T4512] ? blk_alloc_queue+0x4ae/0x620 [ 1666.446105][ T4512] __blk_mq_alloc_disk+0x8b/0x160 [ 1666.451122][ T4512] nbd_dev_add+0x3b2/0xcd0 [ 1666.455534][ T4512] nbd_genl_connect+0x11f3/0x1930 [ 1666.460556][ T4512] ? nbd_start_device+0xd10/0xd10 [ 1666.465574][ T4512] ? __nla_parse+0x3d/0x50 [ 1666.469981][ T4512] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1666.476211][ T4512] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1666.483744][ T4512] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1666.491022][ T4512] genl_family_rcv_msg_doit+0x228/0x320 [ 1666.496561][ T4512] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1666.503918][ T4512] ? mutex_lock_io_nested+0x1150/0x1150 [ 1666.509464][ T4512] ? genl_op_from_small+0x23/0x3c0 [ 1666.514651][ T4512] ? genl_get_cmd+0x3cf/0x480 [ 1666.519317][ T4512] genl_rcv_msg+0x328/0x580 [ 1666.523898][ T4512] ? genl_get_cmd+0x480/0x480 [ 1666.528562][ T4512] ? nbd_start_device+0xd10/0xd10 [ 1666.533583][ T4512] ? lock_release+0x720/0x720 [ 1666.538255][ T4512] netlink_rcv_skb+0x153/0x420 [ 1666.543008][ T4512] ? genl_get_cmd+0x480/0x480 [ 1666.547675][ T4512] ? netlink_ack+0xa60/0xa60 [ 1666.552255][ T4512] ? netlink_deliver_tap+0x1b1/0xc30 [ 1666.557540][ T4512] ? _copy_from_iter+0x12b/0x1320 [ 1666.562645][ T4512] genl_rcv+0x24/0x40 [ 1666.566612][ T4512] netlink_unicast+0x533/0x7d0 [ 1666.571367][ T4512] ? netlink_attachskb+0x880/0x880 [ 1666.576463][ T4512] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.582698][ T4512] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.588932][ T4512] ? __phys_addr_symbol+0x2c/0x70 [ 1666.594120][ T4512] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1666.599833][ T4512] ? __check_object_size+0x16e/0x3f0 [ 1666.605111][ T4512] netlink_sendmsg+0x86d/0xda0 [ 1666.609872][ T4512] ? netlink_unicast+0x7d0/0x7d0 [ 1666.614801][ T4512] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1666.621038][ T4512] ? netlink_unicast+0x7d0/0x7d0 [ 1666.625965][ T4512] sock_sendmsg+0xcf/0x120 [ 1666.630461][ T4512] ____sys_sendmsg+0x6e8/0x810 [ 1666.635215][ T4512] ? kernel_sendmsg+0x50/0x50 [ 1666.639879][ T4512] ? do_recvmmsg+0x6d0/0x6d0 [ 1666.644460][ T4512] ? lock_chain_count+0x20/0x20 [ 1666.649299][ T4512] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1666.655280][ T4512] ___sys_sendmsg+0xf3/0x170 [ 1666.659863][ T4512] ? sendmsg_copy_msghdr+0x160/0x160 [ 1666.665145][ T4512] ? __fget_files+0x21b/0x3e0 [ 1666.669813][ T4512] ? lock_downgrade+0x6e0/0x6e0 [ 1666.674669][ T4512] ? __fget_files+0x23d/0x3e0 [ 1666.679342][ T4512] ? __fget_light+0xea/0x280 [ 1666.683923][ T4512] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1666.690337][ T4512] __sys_sendmsg+0xe5/0x1b0 [ 1666.694840][ T4512] ? __sys_sendmsg_sock+0x30/0x30 [ 1666.699863][ T4512] ? syscall_enter_from_user_mode+0x21/0x70 [ 1666.705756][ T4512] do_syscall_64+0x35/0xb0 [ 1666.710166][ T4512] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1666.716057][ T4512] RIP: 0033:0x7f238b7b8ae9 [ 1666.720461][ T4512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.740150][ T4512] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1666.748578][ T4512] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 07:57:38 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1666.756540][ T4512] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1666.764510][ T4512] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.772486][ T4512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.780454][ T4512] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1666.788428][ T4512] [ 1666.792707][ T4512] nbd: failed to add new device [ 1666.831939][ T2607] usblp1: removed [ 1666.869054][ T9168] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1666.869199][T27219] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1666.876734][ T9168] usb 6-1: can't read configurations, error -71 07:57:38 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1666.910233][ T9172] usb 3-1: can't set config #250, error -71 [ 1666.920601][ T9172] usb 3-1: USB disconnect, device number 93 [ 1666.929449][T30977] usb 2-1: USB disconnect, device number 72 [ 1666.949116][T30977] usblp0: removed [ 1667.118928][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1667.218877][ T2607] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1667.238764][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.247327][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1667.256489][T27219] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.266795][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1667.276061][T27219] usb 1-1: config 250 has no interface number 0 [ 1667.282483][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1667.296207][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1667.303760][T30977] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1667.318856][ T9168] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1667.369829][ T9172] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1667.379482][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1667.388738][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1667.396722][T27219] usb 1-1: SerialNumber: syz [ 1667.478807][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1667.548715][T30977] usb 2-1: Using ep0 maxpacket: 8 [ 1667.598854][ T9168] usb 6-1: Using ep0 maxpacket: 8 [ 1667.618869][ T2607] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.627381][ T2607] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1667.636308][ T2607] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1667.645789][ T2607] usb 5-1: config 250 has no interface number 0 [ 1667.652136][ T2607] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1667.663629][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1667.670169][T30977] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.674086][ T2607] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1667.682497][T30977] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1667.682523][T30977] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1667.693097][ T2607] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1667.701977][T30977] usb 2-1: config 250 has no interface number 0 [ 1667.711209][ T2607] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1667.711315][ T9172] usb 3-1: Using ep0 maxpacket: 8 [ 1667.743332][T30977] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1667.755029][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1667.765498][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1667.775957][T30977] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1667.789704][T30977] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1667.798958][ T9168] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.807359][ T9168] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1667.809105][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1667.816308][ T9168] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1667.816336][ T9168] usb 6-1: config 250 has no interface number 0 [ 1667.816372][ T9168] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1667.816401][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1667.816429][ T9168] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1667.816455][ T9168] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1667.816485][ T9168] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1667.820080][ T2607] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1667.822912][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1667.832226][ T2607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1667.879257][T27219] usb 1-1: USB disconnect, device number 34 [ 1667.884260][ T2607] usb 5-1: SerialNumber: syz [ 1667.910328][T30977] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1667.926744][ T9172] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1667.934597][T30977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1667.942937][ T9172] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1667.950943][T30977] usb 2-1: SerialNumber: syz [ 1667.959766][ T9172] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.974723][ T9172] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1668.019655][ T4503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1668.020033][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.026639][ T4503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1668.032906][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.041201][ T9168] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1668.055090][ T9168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1668.063218][ T9168] usb 6-1: SerialNumber: syz 07:57:39 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1668.088967][ T9172] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1668.098300][ T9172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1668.099085][T30977] usb 2-1: can't set config #250, error -71 [ 1668.106670][ T9172] usb 3-1: SerialNumber: syz [ 1668.117585][T30977] usb 2-1: USB disconnect, device number 73 [ 1668.120934][ T2607] hub 5-1:250.228: bad descriptor, ignoring hub [ 1668.130025][ T2607] hub: probe of 5-1:250.228 failed with error -5 07:57:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 33) [ 1668.138542][ T4525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1668.148228][ T4525] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1668.159943][ T9168] hub 6-1:250.228: bad descriptor, ignoring hub [ 1668.166293][ T9168] hub: probe of 6-1:250.228 failed with error -5 [ 1668.198864][ T4576] FAULT_INJECTION: forcing a failure. [ 1668.198864][ T4576] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.211663][ T4576] CPU: 1 PID: 4576 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1668.220004][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.230067][ T4576] Call Trace: [ 1668.233348][ T4576] [ 1668.236280][ T4576] dump_stack_lvl+0xcd/0x134 [ 1668.240884][ T4576] should_fail.cold+0x5/0xa [ 1668.245391][ T4576] ? blk_mq_realloc_hw_ctxs+0x109/0x1530 [ 1668.251020][ T4576] should_failslab+0x5/0x10 [ 1668.255517][ T4576] __kmalloc_node+0x75/0x390 [ 1668.260105][ T4576] blk_mq_realloc_hw_ctxs+0x109/0x1530 [ 1668.265559][ T4576] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1668.271019][ T4576] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1668.277078][ T4576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.283314][ T4576] ? blkcg_init_queue+0x17b/0x780 [ 1668.288330][ T4576] ? blk_queue_dma_alignment+0xc/0x50 [ 1668.293696][ T4576] ? blk_set_default_limits+0x9/0x620 [ 1668.299064][ T4576] __blk_mq_alloc_disk+0x8b/0x160 [ 1668.304102][ T4576] nbd_dev_add+0x3b2/0xcd0 [ 1668.308798][ T4576] nbd_genl_connect+0x11f3/0x1930 [ 1668.313847][ T4576] ? nbd_start_device+0xd10/0xd10 [ 1668.318876][ T4576] ? __nla_parse+0x3d/0x50 [ 1668.323290][ T4576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.329530][ T4576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1668.336891][ T4576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1668.344342][ T4576] genl_family_rcv_msg_doit+0x228/0x320 [ 1668.349880][ T4576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1668.357328][ T4576] ? mutex_lock_io_nested+0x1150/0x1150 [ 1668.362871][ T4576] ? genl_op_from_small+0x23/0x3c0 [ 1668.368057][ T4576] ? genl_get_cmd+0x3cf/0x480 [ 1668.372722][ T4576] genl_rcv_msg+0x328/0x580 [ 1668.377217][ T4576] ? genl_get_cmd+0x480/0x480 [ 1668.382057][ T4576] ? nbd_start_device+0xd10/0xd10 [ 1668.387077][ T4576] ? lock_release+0x720/0x720 [ 1668.391747][ T4576] netlink_rcv_skb+0x153/0x420 [ 1668.396673][ T4576] ? genl_get_cmd+0x480/0x480 [ 1668.401339][ T4576] ? netlink_ack+0xa60/0xa60 [ 1668.405923][ T4576] ? netlink_deliver_tap+0x1b1/0xc30 [ 1668.411199][ T4576] ? _copy_from_iter+0x12b/0x1320 [ 1668.416213][ T4576] genl_rcv+0x24/0x40 [ 1668.420182][ T4576] netlink_unicast+0x533/0x7d0 [ 1668.424938][ T4576] ? netlink_attachskb+0x880/0x880 [ 1668.430030][ T4576] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.436264][ T4576] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.442495][ T4576] ? __phys_addr_symbol+0x2c/0x70 [ 1668.447598][ T4576] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1668.453306][ T4576] ? __check_object_size+0x16e/0x3f0 [ 1668.458587][ T4576] netlink_sendmsg+0x86d/0xda0 [ 1668.463340][ T4576] ? netlink_unicast+0x7d0/0x7d0 [ 1668.468274][ T4576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.474506][ T4576] ? netlink_unicast+0x7d0/0x7d0 [ 1668.479430][ T4576] sock_sendmsg+0xcf/0x120 [ 1668.483837][ T4576] ____sys_sendmsg+0x6e8/0x810 [ 1668.488592][ T4576] ? kernel_sendmsg+0x50/0x50 [ 1668.493256][ T4576] ? do_recvmmsg+0x6d0/0x6d0 [ 1668.497838][ T4576] ? lock_chain_count+0x20/0x20 [ 1668.502677][ T4576] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.508655][ T4576] ___sys_sendmsg+0xf3/0x170 [ 1668.513241][ T4576] ? sendmsg_copy_msghdr+0x160/0x160 [ 1668.518519][ T4576] ? __fget_files+0x21b/0x3e0 [ 1668.523273][ T4576] ? lock_downgrade+0x6e0/0x6e0 [ 1668.528123][ T4576] ? __fget_files+0x23d/0x3e0 [ 1668.532798][ T4576] ? __fget_light+0xea/0x280 [ 1668.537382][ T4576] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.543702][ T4576] __sys_sendmsg+0xe5/0x1b0 [ 1668.548197][ T4576] ? __sys_sendmsg_sock+0x30/0x30 [ 1668.553305][ T4576] ? syscall_enter_from_user_mode+0x21/0x70 [ 1668.559194][ T4576] do_syscall_64+0x35/0xb0 [ 1668.563600][ T4576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.569488][ T4576] RIP: 0033:0x7f238b7b8ae9 [ 1668.573978][ T4576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.593574][ T4576] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1668.601975][ T4576] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1668.609934][ T4576] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1668.617893][ T4576] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.625849][ T4576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1668.633809][ T4576] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1668.641778][ T4576] [ 1668.645679][ T4576] nbd: failed to add new device [ 1668.670139][ T2607] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1668.695352][ T9168] usblp 6-1:250.228: usblp1: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:57:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 34) [ 1668.800236][T27219] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1668.844032][ T4599] FAULT_INJECTION: forcing a failure. [ 1668.844032][ T4599] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.857379][ T4599] CPU: 0 PID: 4599 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1668.865712][ T4599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.875769][ T4599] Call Trace: [ 1668.879045][ T4599] [ 1668.881973][ T4599] dump_stack_lvl+0xcd/0x134 [ 1668.886581][ T4599] should_fail.cold+0x5/0xa [ 1668.891094][ T4599] ? blk_mq_realloc_hw_ctxs+0x8ee/0x1530 [ 1668.896734][ T4599] should_failslab+0x5/0x10 [ 1668.901242][ T4599] __kmalloc_node+0x75/0x390 [ 1668.905845][ T4599] blk_mq_realloc_hw_ctxs+0x8ee/0x1530 [ 1668.911326][ T4599] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1668.917231][ T4599] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.923480][ T4599] ? blkcg_init_queue+0x17b/0x780 [ 1668.928510][ T4599] ? blk_queue_dma_alignment+0xc/0x50 [ 1668.933889][ T4599] ? blk_set_default_limits+0x9/0x620 [ 1668.939275][ T4599] __blk_mq_alloc_disk+0x8b/0x160 [ 1668.944716][ T4599] nbd_dev_add+0x3b2/0xcd0 [ 1668.949150][ T4599] nbd_genl_connect+0x11f3/0x1930 [ 1668.954193][ T4599] ? nbd_start_device+0xd10/0xd10 [ 1668.959227][ T4599] ? __nla_parse+0x3d/0x50 [ 1668.963654][ T4599] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.969906][ T4599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1668.977370][ T4599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1668.984659][ T4599] genl_family_rcv_msg_doit+0x228/0x320 07:57:40 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000340)={0x20, 0x22, 0x6d, {0x6d, 0xa, "2a4204a7db3d57288ced689b1336eacd29d36ee5f32229801fb97e6e583c4890e5feeed6dcc9cbe8faddd55b08d15856bb27ea3944209cd7087ef18a98cc415da2f4e2e309819391cc8a8d98645e98af150bb8b24e859ab304fc68d8c4d1c6cbb3adb60c80fb9685697d0c"}}, &(0x7f00000003c0)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "a6dab5ba5a07377afaa1bbe3e45fcefa04ee82edca738cf8b90682668f469d6d0ec64b80aac900d4ac9821f0c26f42b46c7ce1e87677a48a081b83d6af9936fa48c1640956189987def2e8978b47a42ff4ca7dd32afa06888468414788683e7fb224d6c4ff2d0a73e36e71a3cc4b0c3c05926571339035c008356f2d12b7038bc860bb3ce885456d801d8fc6e1726ed839ea9382a5f81fb86f898bc6d71941b8d600e3ced967ec85"}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x1, 0x0, 0x8, 'u'}, @local=@item_4={0x3, 0x2, 0xa, "56f4f9ac"}, @global=@item_012={0x2, 0x1, 0x9, "31cd"}, @global=@item_4={0x3, 0x1, 0x9, "1f368157"}, @global=@item_012={0x0, 0x1, 0x9}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xc15}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0xc, 0x8a, "b6eed54e14e62d430f24e51890a0362008208f08c130bafb8972f4880f673245613617988a22af25730116a319e74157b623065ea0d6a22206855ba26330845b524286e602e8b1903a0c5fd47037a89a0756b4afbd874cc8f55395eb85114e1d282bb8082289d6c8c20778c15806f338a059cff45cecb6920d9508bc04581d3e2260766cac1483b7f09e"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000005c0)={0x20, 0x1, 0xad, "bd18bc776d9420bc8d70e1e73657fc85462f32c78fd9ed464aa71ec9ecc4f2fe89cb7fc9081c7603d4f7f77bc5c78c0ead90d43d6e2116cb65a1af935da0b58980a25aa40eb00b362040c611beaecf40b41e6a6cbad1ee973e66edc2b0496359382feea9bad298d4ad3e7e19006dd420edc83affbf0f459076ff1f7163abfced96822bcfec497e31fca413c37c1d04c0129dff96a3fae52da442d4feaa0db51ba081c006297ceeb90c56e3221e"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x3}}) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0xa6, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0xad, 0x89, 0xde, 0x8, 0xeb1a, 0xe359, 0x78ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x1, 0x9, 0x81, 0xd0, 0x1d, [{{0x9, 0x4, 0x3c, 0x20, 0x2, 0x12, 0xea, 0x59, 0x71, [], [{{0x9, 0x5, 0xa, 0x4, 0x40, 0x8, 0x3f, 0x5, [@generic={0x4a, 0x14, "f2d8af18515a2284fb34f9f892800ca73e639034e0010b340d2c3c56b6b0dcf950b5f924548b7c5824130b6931bd5069e237030ea078aa332649c999c9e448487dff65898221abc8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x78, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x28, 0x4}, @generic={0x1f, 0xb, "2b3e61498d850d43aefda4165dc2a631074a12edfab2307c8a17faad4b"}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0x7f, 0xd2, 0x4, 0x8, 0x3f}, 0x39, &(0x7f0000000800)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xc5a, 0xf000, 0x1ff, [0xc000, 0x0, 0xff30, 0xff, 0xff3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "de0cf65218eb45f8743079567b9028a3"}]}, 0x5, [{0x68, &(0x7f0000000b80)=ANY=[@ANYBLOB="6803764714a952fc8b54d8f1efa21c1c3e25781905b058f54b1f30089a04948f6c9b1e7b3e1ef906afe5e4cfc02f47fa1844e4193b7198d9fad8dbb8a6a9a4442235803d443dc496899bbb1da7ebd97de0638df2e1639bc6de151cd1ebc27e49325f5e5c2d6a219a37110ca6877ee18e89e73a0b229bd487552ba3f7856456ec7854632f841010cb5ced81eef5769d115aec46575cadcd4e9b683f224c9a323e"]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x88, &(0x7f0000000900)=@string={0x88, 0x3, "1d8ef01df9b5baf0d2fba90265bd7c3d8a37c30776cda0fa2ac7684d05f5357e7abc2974f34c13403b448b00144bea38ca6d89d6c21bf2e59b823ffe44c1e0ed4f7ca3a631999b814e085e83a46537bebac3b25c9ddc9c9855661f01b0b5bb4cd90673b711831d11744db5a66571c217b0a4b394eeef569811124309502d447db01628ef149d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x100, &(0x7f0000000a00)=@string={0x100, 0x3, "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"}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x8, 0x40, 0x7, 0x2c, 0x0, 0x2, 0x40000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x5, @perf_bp={&(0x7f0000000080), 0x7111e283decd6341}, 0x20d1, 0xfffffffffffffffc, 0x1, 0x6, 0xffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x4) [ 1668.990197][ T4599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1668.997572][ T4599] ? mutex_lock_io_nested+0x1150/0x1150 [ 1669.003132][ T4599] ? genl_op_from_small+0x23/0x3c0 [ 1669.008249][ T4599] ? genl_get_cmd+0x3cf/0x480 [ 1669.012934][ T4599] genl_rcv_msg+0x328/0x580 [ 1669.017450][ T4599] ? genl_get_cmd+0x480/0x480 [ 1669.022147][ T4599] ? nbd_start_device+0xd10/0xd10 [ 1669.027209][ T4599] ? lock_release+0x720/0x720 [ 1669.031909][ T4599] netlink_rcv_skb+0x153/0x420 [ 1669.036679][ T4599] ? genl_get_cmd+0x480/0x480 [ 1669.041361][ T4599] ? netlink_ack+0xa60/0xa60 [ 1669.045963][ T4599] ? netlink_deliver_tap+0x1b1/0xc30 [ 1669.051263][ T4599] ? _copy_from_iter+0x12b/0x1320 [ 1669.056312][ T4599] genl_rcv+0x24/0x40 [ 1669.060328][ T4599] netlink_unicast+0x533/0x7d0 [ 1669.065120][ T4599] ? netlink_attachskb+0x880/0x880 [ 1669.070242][ T4599] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.076509][ T4599] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.082778][ T4599] ? __phys_addr_symbol+0x2c/0x70 [ 1669.087815][ T4599] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1669.093541][ T4599] ? __check_object_size+0x16e/0x3f0 [ 1669.098839][ T4599] netlink_sendmsg+0x86d/0xda0 [ 1669.103618][ T4599] ? netlink_unicast+0x7d0/0x7d0 [ 1669.108566][ T4599] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.114819][ T4599] ? netlink_unicast+0x7d0/0x7d0 [ 1669.119878][ T4599] sock_sendmsg+0xcf/0x120 [ 1669.124300][ T4599] ____sys_sendmsg+0x6e8/0x810 [ 1669.129076][ T4599] ? kernel_sendmsg+0x50/0x50 [ 1669.133844][ T4599] ? do_recvmmsg+0x6d0/0x6d0 [ 1669.138619][ T4599] ? lock_chain_count+0x20/0x20 [ 1669.143477][ T4599] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1669.149474][ T4599] ___sys_sendmsg+0xf3/0x170 [ 1669.154074][ T4599] ? sendmsg_copy_msghdr+0x160/0x160 [ 1669.159372][ T4599] ? __fget_files+0x21b/0x3e0 [ 1669.164060][ T4599] ? lock_downgrade+0x6e0/0x6e0 [ 1669.168933][ T4599] ? __fget_files+0x23d/0x3e0 [ 1669.173625][ T4599] ? __fget_light+0xea/0x280 [ 1669.178223][ T4599] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.184464][ T4599] __sys_sendmsg+0xe5/0x1b0 [ 1669.189157][ T4599] ? __sys_sendmsg_sock+0x30/0x30 [ 1669.194209][ T4599] ? syscall_enter_from_user_mode+0x21/0x70 [ 1669.200204][ T4599] do_syscall_64+0x35/0xb0 [ 1669.204630][ T4599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.210533][ T4599] RIP: 0033:0x7f238b7b8ae9 [ 1669.214948][ T4599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.234543][ T4599] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 07:57:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 35) [ 1669.242958][ T4599] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1669.250916][ T4599] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1669.258985][ T4599] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.266943][ T4599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.275236][ T4599] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1669.283213][ T4599] [ 1669.286598][ T4599] nbd: failed to add new device [ 1669.364175][ T4619] FAULT_INJECTION: forcing a failure. [ 1669.364175][ T4619] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.377161][ T4619] CPU: 0 PID: 4619 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1669.385497][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.395552][ T4619] Call Trace: [ 1669.398827][ T4619] [ 1669.401755][ T4619] dump_stack_lvl+0xcd/0x134 [ 1669.406363][ T4619] should_fail.cold+0x5/0xa [ 1669.410874][ T4619] ? blk_mq_realloc_hw_ctxs+0xba8/0x1530 [ 1669.416490][ T4619] should_failslab+0x5/0x10 [ 1669.420983][ T4619] __kmalloc_node+0x75/0x390 [ 1669.425587][ T4619] blk_mq_realloc_hw_ctxs+0xba8/0x1530 [ 1669.431269][ T4619] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1669.437151][ T4619] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.443382][ T4619] ? blkcg_init_queue+0x17b/0x780 [ 1669.448405][ T4619] ? blk_queue_dma_alignment+0xc/0x50 [ 1669.453777][ T4619] ? blk_set_default_limits+0x9/0x620 [ 1669.459348][ T4619] __blk_mq_alloc_disk+0x8b/0x160 [ 1669.464364][ T4619] nbd_dev_add+0x3b2/0xcd0 [ 1669.468773][ T4619] nbd_genl_connect+0x11f3/0x1930 [ 1669.473795][ T4619] ? nbd_start_device+0xd10/0xd10 [ 1669.478817][ T4619] ? __nla_parse+0x3d/0x50 [ 1669.483227][ T4619] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.489456][ T4619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1669.496816][ T4619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1669.504089][ T4619] genl_family_rcv_msg_doit+0x228/0x320 [ 1669.509622][ T4619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1669.516978][ T4619] ? mutex_lock_io_nested+0x1150/0x1150 [ 1669.522518][ T4619] ? genl_op_from_small+0x23/0x3c0 [ 1669.527614][ T4619] ? genl_get_cmd+0x3cf/0x480 [ 1669.532277][ T4619] genl_rcv_msg+0x328/0x580 [ 1669.536767][ T4619] ? genl_get_cmd+0x480/0x480 [ 1669.541432][ T4619] ? nbd_start_device+0xd10/0xd10 [ 1669.546449][ T4619] ? lock_release+0x720/0x720 [ 1669.551117][ T4619] netlink_rcv_skb+0x153/0x420 [ 1669.555865][ T4619] ? genl_get_cmd+0x480/0x480 [ 1669.560535][ T4619] ? netlink_ack+0xa60/0xa60 [ 1669.565117][ T4619] ? netlink_deliver_tap+0x1b1/0xc30 [ 1669.570630][ T4619] ? _copy_from_iter+0x12b/0x1320 [ 1669.575729][ T4619] genl_rcv+0x24/0x40 [ 1669.579786][ T4619] netlink_unicast+0x533/0x7d0 [ 1669.582663][ T4621] UDC core: couldn't find an available UDC or it's busy: -16 [ 1669.584931][ T4619] ? netlink_attachskb+0x880/0x880 [ 1669.592338][ T4621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1669.597391][ T4619] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.611039][ T4619] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.617296][ T4619] ? __phys_addr_symbol+0x2c/0x70 [ 1669.622337][ T4619] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1669.628060][ T4619] ? __check_object_size+0x16e/0x3f0 [ 1669.633340][ T4619] netlink_sendmsg+0x86d/0xda0 [ 1669.638097][ T4619] ? netlink_unicast+0x7d0/0x7d0 [ 1669.643022][ T4619] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.649476][ T4619] ? netlink_unicast+0x7d0/0x7d0 [ 1669.654401][ T4619] sock_sendmsg+0xcf/0x120 [ 1669.658825][ T4619] ____sys_sendmsg+0x6e8/0x810 [ 1669.663592][ T4619] ? kernel_sendmsg+0x50/0x50 [ 1669.668252][ T4619] ? do_recvmmsg+0x6d0/0x6d0 [ 1669.672829][ T4619] ? lock_chain_count+0x20/0x20 [ 1669.677670][ T4619] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1669.683649][ T4619] ___sys_sendmsg+0xf3/0x170 [ 1669.688237][ T4619] ? sendmsg_copy_msghdr+0x160/0x160 [ 1669.693511][ T4619] ? __fget_files+0x21b/0x3e0 [ 1669.698180][ T4619] ? lock_downgrade+0x6e0/0x6e0 [ 1669.703039][ T4619] ? __fget_files+0x23d/0x3e0 [ 1669.707707][ T4619] ? __fget_light+0xea/0x280 [ 1669.712372][ T4619] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1669.718691][ T4619] __sys_sendmsg+0xe5/0x1b0 [ 1669.723180][ T4619] ? __sys_sendmsg_sock+0x30/0x30 [ 1669.728204][ T4619] ? syscall_enter_from_user_mode+0x21/0x70 [ 1669.734105][ T4619] do_syscall_64+0x35/0xb0 [ 1669.738508][ T4619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.744389][ T4619] RIP: 0033:0x7f238b7b8ae9 [ 1669.748786][ T4619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.768588][ T4619] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1669.777173][ T4619] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1669.785167][ T4619] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1669.793319][ T4619] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.801538][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:57:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 36) [ 1669.809495][ T4619] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1669.817463][ T4619] [ 1669.820861][ T4619] nbd: failed to add new device [ 1669.869588][ T4624] FAULT_INJECTION: forcing a failure. [ 1669.869588][ T4624] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.882408][ T4624] CPU: 1 PID: 4624 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1669.890937][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.899040][ T4525] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 1669.900999][ T4624] Call Trace: [ 1669.901009][ T4624] [ 1669.901018][ T4624] dump_stack_lvl+0xcd/0x134 [ 1669.901052][ T4624] should_fail.cold+0x5/0xa [ 1669.901079][ T4624] ? sbitmap_init_node+0x1c3/0x6f0 [ 1669.929119][ T4624] should_failslab+0x5/0x10 [ 1669.933633][ T4624] __kmalloc_node+0x75/0x390 [ 1669.938237][ T4624] sbitmap_init_node+0x1c3/0x6f0 [ 1669.943451][ T4624] ? trace_kmalloc_node+0x32/0x100 [ 1669.948575][ T4624] blk_mq_realloc_hw_ctxs+0xc20/0x1530 [ 1669.954054][ T4624] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1669.958739][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1669.959942][ T4624] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.959975][ T4624] ? blkcg_init_queue+0x17b/0x780 [ 1669.960002][ T4624] ? blk_queue_dma_alignment+0xc/0x50 [ 1669.960028][ T4624] ? blk_set_default_limits+0x9/0x620 [ 1669.979523][T30977] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1669.981602][ T4624] __blk_mq_alloc_disk+0x8b/0x160 [ 1669.999468][ T4624] nbd_dev_add+0x3b2/0xcd0 [ 1670.003887][ T4624] nbd_genl_connect+0x11f3/0x1930 [ 1670.008913][ T4624] ? nbd_start_device+0xd10/0xd10 [ 1670.013949][ T4624] ? __nla_parse+0x3d/0x50 [ 1670.018379][ T4624] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1670.024632][ T4624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1670.032012][ T4624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1670.039315][ T4624] genl_family_rcv_msg_doit+0x228/0x320 [ 1670.044872][ T4624] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1670.052256][ T4624] ? mutex_lock_io_nested+0x1150/0x1150 [ 1670.057807][ T4624] ? genl_op_from_small+0x23/0x3c0 [ 1670.062910][ T4624] ? genl_get_cmd+0x3cf/0x480 [ 1670.067592][ T4624] genl_rcv_msg+0x328/0x580 [ 1670.072099][ T4624] ? genl_get_cmd+0x480/0x480 [ 1670.076767][ T4624] ? nbd_start_device+0xd10/0xd10 [ 1670.078789][T27219] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1670.081794][ T4624] ? lock_release+0x720/0x720 [ 1670.081829][ T4624] netlink_rcv_skb+0x153/0x420 [ 1670.081854][ T4624] ? genl_get_cmd+0x480/0x480 [ 1670.081877][ T4624] ? netlink_ack+0xa60/0xa60 [ 1670.090247][T27219] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1670.094841][ T4624] ? netlink_deliver_tap+0x1b1/0xc30 [ 1670.099719][T27219] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1670.104226][ T4624] ? _copy_from_iter+0x12b/0x1320 [ 1670.108874][T27219] usb 1-1: config 250 has no interface number 0 [ 1670.117618][ T4624] genl_rcv+0x24/0x40 [ 1670.122969][T27219] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1670.132040][ T4624] netlink_unicast+0x533/0x7d0 [ 1670.132070][ T4624] ? netlink_attachskb+0x880/0x880 [ 1670.132088][ T4624] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.137091][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1670.143300][ T4624] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.143331][ T4624] ? __phys_addr_symbol+0x2c/0x70 [ 1670.143352][ T4624] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1670.143374][ T4624] ? __check_object_size+0x16e/0x3f0 [ 1670.143400][ T4624] netlink_sendmsg+0x86d/0xda0 [ 1670.147355][T27219] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1670.158781][ T4624] ? netlink_unicast+0x7d0/0x7d0 [ 1670.158811][ T4624] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1670.158836][ T4624] ? netlink_unicast+0x7d0/0x7d0 [ 1670.158856][ T4624] sock_sendmsg+0xcf/0x120 [ 1670.158878][ T4624] ____sys_sendmsg+0x6e8/0x810 [ 1670.158903][ T4624] ? kernel_sendmsg+0x50/0x50 [ 1670.158923][ T4624] ? do_recvmmsg+0x6d0/0x6d0 [ 1670.163674][T27219] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 07:57:41 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1670.168758][ T4624] ? lock_chain_count+0x20/0x20 [ 1670.168784][ T4624] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1670.168812][ T4624] ___sys_sendmsg+0xf3/0x170 [ 1670.168839][ T4624] ? sendmsg_copy_msghdr+0x160/0x160 [ 1670.168864][ T4624] ? __fget_files+0x21b/0x3e0 [ 1670.168886][ T4624] ? lock_downgrade+0x6e0/0x6e0 [ 1670.168920][ T4624] ? __fget_files+0x23d/0x3e0 [ 1670.168951][ T4624] ? __fget_light+0xea/0x280 [ 1670.168977][ T4624] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.169009][ T4624] __sys_sendmsg+0xe5/0x1b0 [ 1670.169032][ T4624] ? __sys_sendmsg_sock+0x30/0x30 [ 1670.169070][ T4624] ? syscall_enter_from_user_mode+0x21/0x70 [ 1670.169106][ T4624] do_syscall_64+0x35/0xb0 [ 1670.169127][ T4624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.175353][T27219] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1670.185734][ T4624] RIP: 0033:0x7f238b7b8ae9 [ 1670.185757][ T4624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.185776][ T4624] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.185796][ T4624] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1670.185810][ T4624] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1670.185822][ T4624] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.185835][ T4624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:57:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 37) [ 1670.185847][ T4624] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1670.185873][ T4624] [ 1670.186630][ T4624] nbd: failed to add new device [ 1670.260454][ T4525] usb 5-1: Using ep0 maxpacket: 8 [ 1670.271892][ T9172] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1670.318725][T30977] usb 2-1: Using ep0 maxpacket: 8 [ 1670.358938][ T4525] usb 5-1: device descriptor read/all, error -71 [ 1670.445519][ T4636] FAULT_INJECTION: forcing a failure. [ 1670.445519][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.467984][ T4636] CPU: 0 PID: 4636 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1670.476326][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.486383][ T4636] Call Trace: [ 1670.489664][ T4636] [ 1670.492596][ T4636] dump_stack_lvl+0xcd/0x134 [ 1670.497201][ T4636] should_fail.cold+0x5/0xa [ 1670.501727][ T4636] ? blk_alloc_flush_queue+0x91/0x320 [ 1670.507126][ T4636] should_failslab+0x5/0x10 [ 1670.511643][ T4636] kmem_cache_alloc_node_trace+0x59/0x310 [ 1670.517379][ T4636] blk_alloc_flush_queue+0x91/0x320 [ 1670.522593][ T4636] blk_mq_realloc_hw_ctxs+0xd8c/0x1530 [ 1670.528070][ T4636] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1670.533972][ T4636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1670.540221][ T4636] ? blkcg_init_queue+0x17b/0x780 [ 1670.545262][ T4636] ? blk_queue_dma_alignment+0xc/0x50 [ 1670.550828][ T4636] ? blk_set_default_limits+0x9/0x620 [ 1670.556225][ T4636] __blk_mq_alloc_disk+0x8b/0x160 [ 1670.561270][ T4636] nbd_dev_add+0x3b2/0xcd0 [ 1670.565707][ T4636] nbd_genl_connect+0x11f3/0x1930 [ 1670.570752][ T4636] ? nbd_start_device+0xd10/0xd10 [ 1670.575794][ T4636] ? __nla_parse+0x3d/0x50 [ 1670.580229][ T4636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1670.586570][ T4636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1670.593953][ T4636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1670.601250][ T4636] genl_family_rcv_msg_doit+0x228/0x320 [ 1670.606813][ T4636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1670.614210][ T4636] ? mutex_lock_io_nested+0x1150/0x1150 [ 1670.619860][ T4636] ? genl_op_from_small+0x23/0x3c0 [ 1670.624974][ T4636] ? genl_get_cmd+0x3cf/0x480 [ 1670.629645][ T4636] genl_rcv_msg+0x328/0x580 [ 1670.632779][T31752] usb 3-1: USB disconnect, device number 94 [ 1670.634155][ T4636] ? genl_get_cmd+0x480/0x480 [ 1670.634182][ T4636] ? nbd_start_device+0xd10/0xd10 [ 1670.634216][ T4636] ? lock_release+0x720/0x720 [ 1670.654400][ T4636] netlink_rcv_skb+0x153/0x420 [ 1670.659169][ T4636] ? genl_get_cmd+0x480/0x480 [ 1670.663852][ T4636] ? netlink_ack+0xa60/0xa60 [ 1670.668453][ T4636] ? netlink_deliver_tap+0x1b1/0xc30 [ 1670.673748][ T4636] ? _copy_from_iter+0x12b/0x1320 [ 1670.678791][ T4636] genl_rcv+0x24/0x40 [ 1670.682789][ T4636] netlink_unicast+0x533/0x7d0 [ 1670.687571][ T4636] ? netlink_attachskb+0x880/0x880 [ 1670.692685][ T4636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.698939][ T4636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.705167][ T4636] ? __phys_addr_symbol+0x2c/0x70 [ 1670.710409][ T4636] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1670.716119][ T4636] ? __check_object_size+0x16e/0x3f0 [ 1670.721412][ T4636] netlink_sendmsg+0x86d/0xda0 [ 1670.726171][ T4636] ? netlink_unicast+0x7d0/0x7d0 [ 1670.731097][ T4636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1670.737324][ T4636] ? netlink_unicast+0x7d0/0x7d0 [ 1670.742258][ T4636] sock_sendmsg+0xcf/0x120 [ 1670.746673][ T4636] ____sys_sendmsg+0x6e8/0x810 [ 1670.751425][ T4636] ? kernel_sendmsg+0x50/0x50 [ 1670.756089][ T4636] ? do_recvmmsg+0x6d0/0x6d0 [ 1670.760687][ T4636] ? lock_chain_count+0x20/0x20 [ 1670.765542][ T4636] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1670.771571][ T4636] ___sys_sendmsg+0xf3/0x170 [ 1670.776152][ T4636] ? sendmsg_copy_msghdr+0x160/0x160 [ 1670.781431][ T4636] ? __fget_files+0x21b/0x3e0 [ 1670.786109][ T4636] ? lock_downgrade+0x6e0/0x6e0 [ 1670.790952][ T4636] ? __fget_files+0x23d/0x3e0 [ 1670.795620][ T4636] ? __fget_light+0xea/0x280 [ 1670.800196][ T4636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1670.806430][ T4636] __sys_sendmsg+0xe5/0x1b0 [ 1670.810946][ T4636] ? __sys_sendmsg_sock+0x30/0x30 [ 1670.815964][ T4636] ? syscall_enter_from_user_mode+0x21/0x70 [ 1670.821849][ T4636] do_syscall_64+0x35/0xb0 [ 1670.826252][ T4636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1670.832137][ T4636] RIP: 0033:0x7f238b7b8ae9 [ 1670.836536][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.856127][ T4636] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.864544][ T4636] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1670.872520][ T4636] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1670.880475][ T4636] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.888432][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.896390][ T4636] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1670.904372][ T4636] [ 1670.908863][ T4636] nbd: failed to add new device [ 1670.913926][T27219] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1670.923024][T27219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1670.931105][T27219] usb 1-1: SerialNumber: syz [ 1670.952484][T30977] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1670.960910][T30977] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1670.969862][T30977] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1670.979148][T30977] usb 2-1: config 250 has no interface number 0 [ 1670.985464][T30977] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1670.997027][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1671.007499][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 07:57:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 38) [ 1671.017978][T30977] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1671.031486][T30977] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1671.039151][ T4614] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1671.054810][ T4614] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1671.075582][ T4652] FAULT_INJECTION: forcing a failure. [ 1671.075582][ T4652] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.075851][T27219] hub 1-1:250.228: bad descriptor, ignoring hub [ 1671.088376][ T4652] CPU: 1 PID: 4652 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1671.094488][T27219] hub: probe of 1-1:250.228 failed with error -5 [ 1671.102751][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.102766][ T4652] Call Trace: [ 1671.102773][ T4652] [ 1671.102781][ T4652] dump_stack_lvl+0xcd/0x134 [ 1671.102813][ T4652] should_fail.cold+0x5/0xa [ 1671.134400][ T4652] ? blk_alloc_flush_queue+0x121/0x320 [ 1671.139872][ T4652] should_failslab+0x5/0x10 [ 1671.144379][ T4652] __kmalloc_node+0x75/0x390 [ 1671.148980][ T4652] blk_alloc_flush_queue+0x121/0x320 [ 1671.154280][ T4652] blk_mq_realloc_hw_ctxs+0xd8c/0x1530 [ 1671.159766][ T4652] blk_mq_init_allocated_queue+0x324/0x12c0 [ 1671.165669][ T4652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1671.171927][ T4652] ? blkcg_init_queue+0x17b/0x780 [ 1671.176959][ T4652] ? blk_queue_dma_alignment+0xc/0x50 [ 1671.182342][ T4652] ? blk_set_default_limits+0x9/0x620 [ 1671.187815][ T4652] __blk_mq_alloc_disk+0x8b/0x160 [ 1671.192848][ T4652] nbd_dev_add+0x3b2/0xcd0 [ 1671.197280][ T4652] nbd_genl_connect+0x11f3/0x1930 [ 1671.202333][ T4652] ? nbd_start_device+0xd10/0xd10 [ 1671.207368][ T4652] ? __nla_parse+0x3d/0x50 [ 1671.209130][T30977] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1671.211788][ T4652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1671.220912][T30977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1671.226991][ T4652] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1671.242282][ T4652] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1671.249591][ T4652] genl_family_rcv_msg_doit+0x228/0x320 [ 1671.255145][ T4652] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1671.262521][ T4652] ? mutex_lock_io_nested+0x1150/0x1150 [ 1671.268169][ T4652] ? genl_op_from_small+0x23/0x3c0 [ 1671.273289][ T4652] ? genl_get_cmd+0x3cf/0x480 [ 1671.278065][ T4652] genl_rcv_msg+0x328/0x580 [ 1671.282577][ T4652] ? genl_get_cmd+0x480/0x480 [ 1671.287349][ T4652] ? nbd_start_device+0xd10/0xd10 [ 1671.292389][ T4652] ? lock_release+0x720/0x720 [ 1671.297080][ T4652] netlink_rcv_skb+0x153/0x420 [ 1671.301846][ T4652] ? genl_get_cmd+0x480/0x480 [ 1671.306530][ T4652] ? netlink_ack+0xa60/0xa60 [ 1671.308767][T30977] usb 2-1: can't set config #250, error -71 [ 1671.311127][ T4652] ? netlink_deliver_tap+0x1b1/0xc30 07:57:42 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1671.311157][ T4652] ? _copy_from_iter+0x12b/0x1320 [ 1671.311183][ T4652] genl_rcv+0x24/0x40 [ 1671.331303][ T4652] netlink_unicast+0x533/0x7d0 [ 1671.332013][T30977] usb 2-1: USB disconnect, device number 74 [ 1671.336083][ T4652] ? netlink_attachskb+0x880/0x880 [ 1671.336107][ T4652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1671.336138][ T4652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1671.359551][ T4652] ? __phys_addr_symbol+0x2c/0x70 [ 1671.364686][ T4652] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1671.370441][ T4652] ? __check_object_size+0x16e/0x3f0 [ 1671.375768][ T4652] netlink_sendmsg+0x86d/0xda0 [ 1671.380551][ T4652] ? netlink_unicast+0x7d0/0x7d0 [ 1671.385503][ T4652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1671.391760][ T4652] ? netlink_unicast+0x7d0/0x7d0 [ 1671.396710][ T4652] sock_sendmsg+0xcf/0x120 [ 1671.401140][ T4652] ____sys_sendmsg+0x6e8/0x810 [ 1671.405914][ T4652] ? kernel_sendmsg+0x50/0x50 [ 1671.410595][ T4652] ? do_recvmmsg+0x6d0/0x6d0 [ 1671.415199][ T4652] ? lock_chain_count+0x20/0x20 [ 1671.420055][ T4652] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1671.426049][ T4652] ___sys_sendmsg+0xf3/0x170 [ 1671.430633][ T4652] ? sendmsg_copy_msghdr+0x160/0x160 [ 1671.435919][ T4652] ? __fget_files+0x21b/0x3e0 [ 1671.440590][ T4652] ? lock_downgrade+0x6e0/0x6e0 [ 1671.445436][ T4652] ? __fget_files+0x23d/0x3e0 [ 1671.450405][ T4652] ? __fget_light+0xea/0x280 [ 1671.454986][ T4652] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1671.461224][ T4652] __sys_sendmsg+0xe5/0x1b0 [ 1671.465729][ T4652] ? __sys_sendmsg_sock+0x30/0x30 [ 1671.470749][ T4652] ? syscall_enter_from_user_mode+0x21/0x70 [ 1671.476635][ T4652] do_syscall_64+0x35/0xb0 [ 1671.481039][ T4652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1671.487013][ T4652] RIP: 0033:0x7f238b7b8ae9 [ 1671.491425][ T4652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1671.511022][ T4652] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1671.519425][ T4652] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1671.527558][ T4652] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1671.535763][ T4652] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.543734][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.551694][ T4652] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1671.559685][ T4652] [ 1671.563752][ T4652] nbd: failed to add new device [ 1671.639279][ T4525] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 1671.788726][T30977] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1671.898727][ T4525] usb 5-1: Using ep0 maxpacket: 8 [ 1672.028763][T30977] usb 2-1: Using ep0 maxpacket: 8 [ 1672.059027][ T4633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.066165][ T4633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.148995][T30977] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1672.157544][T30977] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1672.166682][T30977] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1672.175958][T30977] usb 2-1: config 250 has no interface number 0 [ 1672.182268][T30977] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1672.193795][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1672.204259][T30977] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1672.214937][T30977] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1672.228525][T30977] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1672.291708][ T4633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.298736][ T4633] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.311191][T30977] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1672.320564][T30977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1672.328544][T30977] usb 2-1: SerialNumber: syz [ 1672.358703][ C1] usblp0: nonzero read bulk status received: -71 [ 1672.359670][T27219] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1672.383557][ T4664] raw-gadget gadget: fail, usb_ep_enable returned -22 07:57:44 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) r0 = syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592fa00e8af294f5a2b6155ed62892a25a4dca7089573af6bff2b9263c173d73fe2904351b429233cdd715317be6548732c61999292e0bf3317713f3222534e5d6c9d44d38d14756e3475d60da47a6724139e7c942777cde42466a2cbdb04c9e0b3e59484ee8ef5d10b8e9a5e37fb0a3e48000ce80000000000000004b32c4c2cd541a1ee51568a4cf61b3a28b84c821fdc55058a9e1500"/172], 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x20010, r0, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x5, 0xf5, 0x0, 0x80, 0x3}, 0x40) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 07:57:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 39) 07:57:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) r0 = syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6436e05a27a86fe1ff923c007f3ddb623fde5fe9a7fc93bbe73a77fa85a508897f48beb74af70a794c315415e25aea103469e4521"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_usb_disconnect(r2) syz_usb_control_io$printer(r2, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x2, 0xe7, {0xe7, 0x5, "0d19d02ddd66a4c47e1c618d386d09237d17a248d91a47896a5c0f723853652ed2881c0db14408e6c11be5b316a2bf1c3f982310ea81fbe423de03ebb5eddf57025cc738523b2194f8c05089208cdb5e82a07a75881149f8fc7093f980337eba6a60a68aebda40007d23520636b5e8775f9a105c7dc2d40ece2af2f99f579afe47ce936bf759ad47a6c739ffcc9ff57517c08ec3110da67689214bd8479743b59164923d85f4ba3759c2f769d5a5e99914eb252a231520ef25170aa1f6eb2cf8b2c62865b4a7b632d0f2c1639ed2b5f53a0207a43322b9587a63915f4421916a3b7c81de59"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}}, &(0x7f0000000740)={0x34, &(0x7f0000000440)={0x0, 0xd, 0xe4, "807dbe6a886bfde453d78ad8799a36ebabf7c5cb096b6cb17e8d21a70c74476ea8421218c62f6893976674bdf2e0d20283e97513ca4c321b7385db8932ae2288bf5793fe6b731a477874aa4e92d8bbc89596ea564f708bf1f8ca073aee6a69407ba3213b761e0376cdfc8b261bd95d3bebdc78ed3702ff1a7c89567c54b6a8d2584604590e566a61ecdbb77494c3a1dace581720735470b6c2be22e84318c49d543595cf70653554a95f43eab881bf9e02732e14d346347b7e6c3c6177f65236ec9ed1234bb6ee719c2219e7c46404379b34f1236c0614e13efc5e3ab127ae001f403584"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000005c0)={0x20, 0x0, 0xea, {0xe8, "7a96829ac4f7f34270a4ab12fd31d273e4d6daf4ff2fea84716714f3ce98334160015383fdda28ca0025dc78649918fd5e4ddc3829287cb2046f979db4cdf3a7f1ef9319f806c09bebd8cd83fd8e1824ffe8764545fa985e3a4e9d4f9f074105be8cd19b188aa72cd5ce14ce9a1a863ec7a521990ac9f8e5a1922ee85ddc315aa98041808e6f4464406262c898fa4fb0409c30d2a2989707c15d9d6aed3ef91afcce72aaf90feca1f58fa8c4b8d143cd0e53ac721289f6742465acbd5ea4beb65c4b78b8f423d4cbfc0279bc0f956caf4752019edc24f7283bb8f7d0593ea508d9332e4e0cac7e97"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x9}}) write(r0, &(0x7f0000000000)="1b0000001a005f0014f9f5070009090002000000004000000000", 0x1a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180), 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1672.417207][ T4664] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1672.450759][T30977] hub 2-1:250.228: bad descriptor, ignoring hub [ 1672.457157][T30977] hub: probe of 2-1:250.228 failed with error -5 [ 1672.511264][ T4690] FAULT_INJECTION: forcing a failure. [ 1672.511264][ T4690] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.524686][ T4690] CPU: 0 PID: 4690 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1672.533013][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1672.543052][ T4690] Call Trace: [ 1672.546312][ T4690] [ 1672.549300][ T4690] dump_stack_lvl+0xcd/0x134 [ 1672.553883][ T4690] should_fail.cold+0x5/0xa [ 1672.558375][ T4690] ? __alloc_disk_node+0x77/0x5c0 [ 1672.563391][ T4690] should_failslab+0x5/0x10 [ 1672.567892][ T4690] kmem_cache_alloc_node_trace+0x59/0x310 [ 1672.573618][ T4690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1672.579862][ T4690] ? kobject_get+0xbc/0x150 [ 1672.584539][ T4690] __alloc_disk_node+0x77/0x5c0 [ 1672.589412][ T4690] __blk_mq_alloc_disk+0xed/0x160 [ 1672.594638][ T4690] nbd_dev_add+0x3b2/0xcd0 [ 1672.599054][ T4690] nbd_genl_connect+0x11f3/0x1930 [ 1672.604154][ T4690] ? nbd_start_device+0xd10/0xd10 [ 1672.609167][ T4690] ? __nla_parse+0x3d/0x50 [ 1672.613571][ T4690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1672.619886][ T4690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1672.627251][ T4690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1672.634530][ T4690] genl_family_rcv_msg_doit+0x228/0x320 [ 1672.640074][ T4690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1672.647431][ T4690] ? mutex_lock_io_nested+0x1150/0x1150 [ 1672.652989][ T4690] ? genl_op_from_small+0x23/0x3c0 [ 1672.658095][ T4690] ? genl_get_cmd+0x3cf/0x480 [ 1672.662934][ T4690] genl_rcv_msg+0x328/0x580 [ 1672.667424][ T4690] ? genl_get_cmd+0x480/0x480 [ 1672.672092][ T4690] ? nbd_start_device+0xd10/0xd10 [ 1672.677124][ T4690] ? lock_release+0x720/0x720 [ 1672.681792][ T4690] netlink_rcv_skb+0x153/0x420 [ 1672.686548][ T4690] ? genl_get_cmd+0x480/0x480 [ 1672.691227][ T4690] ? netlink_ack+0xa60/0xa60 [ 1672.695804][ T4690] ? netlink_deliver_tap+0x1b1/0xc30 [ 1672.701085][ T4690] ? _copy_from_iter+0x12b/0x1320 [ 1672.706101][ T4690] genl_rcv+0x24/0x40 [ 1672.710066][ T4690] netlink_unicast+0x533/0x7d0 [ 1672.714819][ T4690] ? netlink_attachskb+0x880/0x880 [ 1672.719915][ T4690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1672.726161][ T4690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1672.732393][ T4690] ? __phys_addr_symbol+0x2c/0x70 [ 1672.737407][ T4690] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1672.743115][ T4690] ? __check_object_size+0x16e/0x3f0 [ 1672.748406][ T4690] netlink_sendmsg+0x86d/0xda0 [ 1672.753163][ T4690] ? netlink_unicast+0x7d0/0x7d0 [ 1672.758108][ T4690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1672.764344][ T4690] ? netlink_unicast+0x7d0/0x7d0 [ 1672.769271][ T4690] sock_sendmsg+0xcf/0x120 [ 1672.773850][ T4690] ____sys_sendmsg+0x6e8/0x810 [ 1672.778693][ T4690] ? kernel_sendmsg+0x50/0x50 [ 1672.783369][ T4690] ? do_recvmmsg+0x6d0/0x6d0 [ 1672.787946][ T4690] ? lock_chain_count+0x20/0x20 [ 1672.792872][ T4690] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1672.798860][ T4690] ___sys_sendmsg+0xf3/0x170 [ 1672.803539][ T4690] ? sendmsg_copy_msghdr+0x160/0x160 [ 1672.808839][ T4690] ? __fget_files+0x21b/0x3e0 [ 1672.813524][ T4690] ? lock_downgrade+0x6e0/0x6e0 [ 1672.818480][ T4690] ? __fget_files+0x23d/0x3e0 [ 1672.823259][ T4690] ? __fget_light+0xea/0x280 [ 1672.827953][ T4690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1672.834205][ T4690] __sys_sendmsg+0xe5/0x1b0 [ 1672.838717][ T4690] ? __sys_sendmsg_sock+0x30/0x30 [ 1672.843762][ T4690] ? syscall_enter_from_user_mode+0x21/0x70 [ 1672.849677][ T4690] do_syscall_64+0x35/0xb0 [ 1672.854104][ T4690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1672.860008][ T4690] RIP: 0033:0x7f238b7b8ae9 [ 1672.864426][ T4690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.884039][ T4690] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.892458][ T4690] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1672.900434][ T4690] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 07:57:44 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1672.908406][ T4690] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.916390][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1672.924383][ T4690] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1672.932386][ T4690] [ 1672.937165][ T4690] nbd: failed to add new device [ 1672.969736][T30977] usblp 2-1:250.228: usblp3: USB Bidirectional printer dev 75 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 07:57:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 40) [ 1673.082643][ T4709] FAULT_INJECTION: forcing a failure. [ 1673.082643][ T4709] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.095559][ T4709] CPU: 0 PID: 4709 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1673.103889][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.113945][ T4709] Call Trace: [ 1673.117220][ T4709] [ 1673.120150][ T4709] dump_stack_lvl+0xcd/0x134 [ 1673.124756][ T4709] should_fail.cold+0x5/0xa [ 1673.129270][ T4709] ? __alloc_disk_node+0x77/0x5c0 [ 1673.134303][ T4709] should_failslab+0x5/0x10 [ 1673.138813][ T4709] kmem_cache_alloc_node_trace+0x59/0x310 [ 1673.144546][ T4709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1673.150797][ T4709] ? kobject_get+0xbc/0x150 [ 1673.155318][ T4709] __alloc_disk_node+0x77/0x5c0 [ 1673.160181][ T4709] __blk_mq_alloc_disk+0xed/0x160 [ 1673.165215][ T4709] nbd_dev_add+0x3b2/0xcd0 [ 1673.169649][ T4709] nbd_genl_connect+0x11f3/0x1930 [ 1673.174692][ T4709] ? nbd_start_device+0xd10/0xd10 [ 1673.179728][ T4709] ? __nla_parse+0x3d/0x50 [ 1673.184153][ T4709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1673.190398][ T4709] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1673.197758][ T4709] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1673.205040][ T4709] genl_family_rcv_msg_doit+0x228/0x320 [ 1673.210575][ T4709] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1673.217929][ T4709] ? mutex_lock_io_nested+0x1150/0x1150 [ 1673.223646][ T4709] ? genl_op_from_small+0x23/0x3c0 [ 1673.228743][ T4709] ? genl_get_cmd+0x3cf/0x480 [ 1673.233669][ T4709] genl_rcv_msg+0x328/0x580 [ 1673.238377][ T4709] ? genl_get_cmd+0x480/0x480 [ 1673.243043][ T4709] ? nbd_start_device+0xd10/0xd10 [ 1673.248060][ T4709] ? lock_release+0x720/0x720 [ 1673.252958][ T4709] netlink_rcv_skb+0x153/0x420 [ 1673.257722][ T4709] ? genl_get_cmd+0x480/0x480 [ 1673.262385][ T4709] ? netlink_ack+0xa60/0xa60 [ 1673.266962][ T4709] ? netlink_deliver_tap+0x1b1/0xc30 [ 1673.272235][ T4709] ? _copy_from_iter+0x12b/0x1320 [ 1673.277496][ T4709] genl_rcv+0x24/0x40 [ 1673.281463][ T4709] netlink_unicast+0x533/0x7d0 [ 1673.286218][ T4709] ? netlink_attachskb+0x880/0x880 [ 1673.291326][ T4709] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1673.297559][ T4709] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1673.303784][ T4709] ? __phys_addr_symbol+0x2c/0x70 [ 1673.308796][ T4709] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1673.314501][ T4709] ? __check_object_size+0x16e/0x3f0 [ 1673.319780][ T4709] netlink_sendmsg+0x86d/0xda0 [ 1673.324746][ T4709] ? netlink_unicast+0x7d0/0x7d0 [ 1673.329672][ T4709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1673.335915][ T4709] ? netlink_unicast+0x7d0/0x7d0 [ 1673.340839][ T4709] sock_sendmsg+0xcf/0x120 [ 1673.345262][ T4709] ____sys_sendmsg+0x6e8/0x810 [ 1673.350036][ T4709] ? kernel_sendmsg+0x50/0x50 [ 1673.354716][ T4709] ? do_recvmmsg+0x6d0/0x6d0 [ 1673.359314][ T4709] ? lock_chain_count+0x20/0x20 [ 1673.364175][ T4709] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1673.370162][ T4709] ___sys_sendmsg+0xf3/0x170 [ 1673.374741][ T4709] ? sendmsg_copy_msghdr+0x160/0x160 [ 1673.380016][ T4709] ? __fget_files+0x21b/0x3e0 [ 1673.384680][ T4709] ? lock_downgrade+0x6e0/0x6e0 [ 1673.389530][ T4709] ? __fget_files+0x23d/0x3e0 [ 1673.394213][ T4709] ? __fget_light+0xea/0x280 [ 1673.398805][ T4709] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1673.405041][ T4709] __sys_sendmsg+0xe5/0x1b0 [ 1673.409535][ T4709] ? __sys_sendmsg_sock+0x30/0x30 [ 1673.414551][ T4709] ? syscall_enter_from_user_mode+0x21/0x70 [ 1673.420435][ T4709] do_syscall_64+0x35/0xb0 [ 1673.424845][ T4709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1673.430729][ T4709] RIP: 0033:0x7f238b7b8ae9 [ 1673.435136][ T4709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.454728][ T4709] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.463141][ T4709] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1673.471107][ T4709] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1673.479111][ T4709] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.487078][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.495217][ T4709] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1673.503181][ T4709] [ 1673.507415][ T4709] nbd: failed to add new device [ 1673.519543][ T9168] usb 3-1: new high-speed USB device number 95 using dummy_hcd 07:57:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 41) [ 1673.529297][ T2607] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 1673.606915][ T4719] FAULT_INJECTION: forcing a failure. [ 1673.606915][ T4719] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.608985][ T9172] usb 6-1: device descriptor read/64, error -71 [ 1673.619913][ T4719] CPU: 0 PID: 4719 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1673.634364][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1673.644432][ T4719] Call Trace: [ 1673.647714][ T4719] [ 1673.650644][ T4719] dump_stack_lvl+0xcd/0x134 [ 1673.655252][ T4719] should_fail.cold+0x5/0xa [ 1673.659769][ T4719] ? bdev_free_inode+0x220/0x220 [ 1673.664728][ T4719] ? bdev_alloc_inode+0x18/0x50 [ 1673.669590][ T4719] should_failslab+0x5/0x10 [ 1673.674103][ T4719] kmem_cache_alloc+0x5e/0x3a0 [ 1673.678880][ T4719] ? bdev_free_inode+0x220/0x220 [ 1673.683837][ T4719] bdev_alloc_inode+0x18/0x50 [ 1673.688522][ T4719] ? bdev_free_inode+0x220/0x220 [ 1673.693466][ T4719] alloc_inode+0x61/0x230 [ 1673.697812][ T4719] new_inode+0x27/0x2f0 [ 1673.701983][ T4719] ? dirty_writeback_centisecs_handler+0xb0/0xb0 [ 1673.708320][ T4719] bdev_alloc+0x21/0x2e0 [ 1673.712575][ T4719] __alloc_disk_node+0xfa/0x5c0 [ 1673.717442][ T4719] __blk_mq_alloc_disk+0xed/0x160 [ 1673.722472][ T4719] nbd_dev_add+0x3b2/0xcd0 [ 1673.726896][ T4719] nbd_genl_connect+0x11f3/0x1930 [ 1673.731936][ T4719] ? nbd_start_device+0xd10/0xd10 [ 1673.736973][ T4719] ? __nla_parse+0x3d/0x50 [ 1673.741401][ T4719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1673.747654][ T4719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1673.755030][ T4719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1673.762329][ T4719] genl_family_rcv_msg_doit+0x228/0x320 [ 1673.767884][ T4719] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1673.775267][ T4719] ? mutex_lock_io_nested+0x1150/0x1150 [ 1673.780836][ T4719] ? genl_op_from_small+0x23/0x3c0 [ 1673.785956][ T4719] ? genl_get_cmd+0x3cf/0x480 [ 1673.790638][ T4719] genl_rcv_msg+0x328/0x580 [ 1673.795152][ T4719] ? genl_get_cmd+0x480/0x480 [ 1673.799850][ T4719] ? nbd_start_device+0xd10/0xd10 [ 1673.805087][ T4719] ? lock_release+0x720/0x720 [ 1673.809785][ T4719] netlink_rcv_skb+0x153/0x420 [ 1673.814566][ T4719] ? genl_get_cmd+0x480/0x480 [ 1673.819253][ T4719] ? netlink_ack+0xa60/0xa60 [ 1673.823855][ T4719] ? netlink_deliver_tap+0x1b1/0xc30 [ 1673.829146][ T4719] ? _copy_from_iter+0x12b/0x1320 [ 1673.834172][ T4719] genl_rcv+0x24/0x40 [ 1673.838139][ T4719] netlink_unicast+0x533/0x7d0 [ 1673.843144][ T4719] ? netlink_attachskb+0x880/0x880 [ 1673.848257][ T4719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 07:57:45 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1673.854508][ T4719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1673.860756][ T4719] ? __phys_addr_symbol+0x2c/0x70 [ 1673.865789][ T4719] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1673.871526][ T4719] ? __check_object_size+0x16e/0x3f0 [ 1673.876833][ T4719] netlink_sendmsg+0x86d/0xda0 [ 1673.881614][ T4719] ? netlink_unicast+0x7d0/0x7d0 [ 1673.886559][ T4719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1673.892811][ T4719] ? netlink_unicast+0x7d0/0x7d0 [ 1673.897758][ T4719] sock_sendmsg+0xcf/0x120 [ 1673.902163][ T4719] ____sys_sendmsg+0x6e8/0x810 [ 1673.906913][ T4719] ? kernel_sendmsg+0x50/0x50 [ 1673.911575][ T4719] ? do_recvmmsg+0x6d0/0x6d0 [ 1673.916369][ T4719] ? lock_chain_count+0x20/0x20 [ 1673.921222][ T4719] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1673.927193][ T4719] ___sys_sendmsg+0xf3/0x170 [ 1673.931774][ T4719] ? sendmsg_copy_msghdr+0x160/0x160 [ 1673.937073][ T4719] ? __fget_files+0x21b/0x3e0 [ 1673.941740][ T4719] ? lock_downgrade+0x6e0/0x6e0 [ 1673.946600][ T4719] ? __fget_files+0x23d/0x3e0 [ 1673.951271][ T4719] ? __fget_light+0xea/0x280 [ 1673.955869][ T4719] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1673.962101][ T4719] __sys_sendmsg+0xe5/0x1b0 [ 1673.966592][ T4719] ? __sys_sendmsg_sock+0x30/0x30 [ 1673.971613][ T4719] ? syscall_enter_from_user_mode+0x21/0x70 [ 1673.977514][ T4719] do_syscall_64+0x35/0xb0 [ 1673.982127][ T4719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1673.988007][ T4719] RIP: 0033:0x7f238b7b8ae9 [ 1673.992412][ T4719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.012004][ T4719] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.020400][ T4719] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1674.028357][ T4719] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1674.036321][ T4719] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.044274][ T4719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:57:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 42) [ 1674.052228][ T4719] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1674.060200][ T4719] [ 1674.064355][ T4719] nbd: failed to add new device [ 1674.071172][T30977] usb 2-1: USB disconnect, device number 75 [ 1674.135401][ T4736] FAULT_INJECTION: forcing a failure. [ 1674.135401][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.148595][ T4736] CPU: 0 PID: 4736 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1674.156937][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.166990][ T4736] Call Trace: [ 1674.170265][ T4736] [ 1674.173190][ T4736] dump_stack_lvl+0xcd/0x134 [ 1674.177779][ T4736] should_fail.cold+0x5/0xa [ 1674.182296][ T4736] ? security_inode_alloc+0x34/0x160 [ 1674.187590][ T4736] should_failslab+0x5/0x10 [ 1674.192096][ T4736] kmem_cache_alloc+0x5e/0x3a0 [ 1674.196869][ T4736] security_inode_alloc+0x34/0x160 [ 1674.201992][ T4736] inode_init_always+0x5d8/0xe10 [ 1674.206936][ T4736] alloc_inode+0x82/0x230 [ 1674.211251][ T4736] new_inode+0x27/0x2f0 [ 1674.215394][ T4736] ? dirty_writeback_centisecs_handler+0xb0/0xb0 [ 1674.221726][ T4736] bdev_alloc+0x21/0x2e0 [ 1674.226166][ T4736] __alloc_disk_node+0xfa/0x5c0 [ 1674.231008][ T4736] __blk_mq_alloc_disk+0xed/0x160 [ 1674.236031][ T4736] nbd_dev_add+0x3b2/0xcd0 [ 1674.240437][ T4736] nbd_genl_connect+0x11f3/0x1930 [ 1674.245453][ T4736] ? nbd_start_device+0xd10/0xd10 [ 1674.250466][ T4736] ? __nla_parse+0x3d/0x50 [ 1674.254873][ T4736] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1674.261104][ T4736] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1674.268459][ T4736] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1674.275728][ T4736] genl_family_rcv_msg_doit+0x228/0x320 [ 1674.281260][ T4736] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1674.288621][ T4736] ? mutex_lock_io_nested+0x1150/0x1150 [ 1674.294168][ T4736] ? genl_op_from_small+0x23/0x3c0 [ 1674.299265][ T4736] ? genl_get_cmd+0x3cf/0x480 [ 1674.303937][ T4736] genl_rcv_msg+0x328/0x580 [ 1674.308446][ T4736] ? genl_get_cmd+0x480/0x480 [ 1674.313117][ T4736] ? nbd_start_device+0xd10/0xd10 [ 1674.318131][ T4736] ? lock_release+0x720/0x720 [ 1674.322796][ T4736] netlink_rcv_skb+0x153/0x420 [ 1674.327548][ T4736] ? genl_get_cmd+0x480/0x480 [ 1674.332207][ T4736] ? netlink_ack+0xa60/0xa60 [ 1674.336784][ T4736] ? netlink_deliver_tap+0x1b1/0xc30 [ 1674.342060][ T4736] ? _copy_from_iter+0x12b/0x1320 [ 1674.347075][ T4736] genl_rcv+0x24/0x40 [ 1674.351052][ T4736] netlink_unicast+0x533/0x7d0 [ 1674.355802][ T4736] ? netlink_attachskb+0x880/0x880 [ 1674.361175][ T4736] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.367406][ T4736] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.373638][ T4736] ? __phys_addr_symbol+0x2c/0x70 [ 1674.378666][ T4736] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1674.384681][ T4736] ? __check_object_size+0x16e/0x3f0 [ 1674.390049][ T4736] netlink_sendmsg+0x86d/0xda0 [ 1674.394803][ T4736] ? netlink_unicast+0x7d0/0x7d0 [ 1674.399738][ T4736] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1674.405983][ T4736] ? netlink_unicast+0x7d0/0x7d0 [ 1674.410906][ T4736] sock_sendmsg+0xcf/0x120 [ 1674.415314][ T4736] ____sys_sendmsg+0x6e8/0x810 [ 1674.420080][ T4736] ? kernel_sendmsg+0x50/0x50 [ 1674.424743][ T4736] ? do_recvmmsg+0x6d0/0x6d0 [ 1674.429324][ T4736] ? lock_chain_count+0x20/0x20 [ 1674.434166][ T4736] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1674.440153][ T4736] ___sys_sendmsg+0xf3/0x170 [ 1674.444729][ T4736] ? sendmsg_copy_msghdr+0x160/0x160 [ 1674.450009][ T4736] ? __fget_files+0x21b/0x3e0 [ 1674.454691][ T4736] ? lock_downgrade+0x6e0/0x6e0 [ 1674.459532][ T4736] ? __fget_files+0x23d/0x3e0 [ 1674.464205][ T4736] ? __fget_light+0xea/0x280 [ 1674.468787][ T4736] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.475135][ T4736] __sys_sendmsg+0xe5/0x1b0 [ 1674.479640][ T4736] ? __sys_sendmsg_sock+0x30/0x30 [ 1674.484848][ T4736] ? syscall_enter_from_user_mode+0x21/0x70 [ 1674.490838][ T4736] do_syscall_64+0x35/0xb0 [ 1674.495272][ T4736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1674.501184][ T4736] RIP: 0033:0x7f238b7b8ae9 [ 1674.505595][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.525215][ T4736] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.533621][ T4736] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1674.541583][ T4736] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1674.549553][ T4736] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.557778][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.565844][ T4736] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1674.573826][ T4736] [ 1674.577364][ T4736] nbd: failed to add new device [ 1674.582688][T27219] usb 1-1: reset high-speed USB device number 35 using dummy_hcd 07:57:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 43) [ 1674.609069][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1674.649183][ T9168] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1674.666589][ T4741] FAULT_INJECTION: forcing a failure. [ 1674.666589][ T4741] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.668863][ T9172] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1674.679910][ T4741] CPU: 0 PID: 4741 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1674.695791][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.705867][ T4741] Call Trace: [ 1674.709149][ T4741] [ 1674.712080][ T4741] dump_stack_lvl+0xcd/0x134 [ 1674.716687][ T4741] should_fail.cold+0x5/0xa [ 1674.721203][ T4741] ? rand_initialize_disk+0x3b/0xc0 [ 1674.726413][ T4741] should_failslab+0x5/0x10 [ 1674.730931][ T4741] kmem_cache_alloc_trace+0x55/0x2c0 [ 1674.736231][ T4741] rand_initialize_disk+0x3b/0xc0 [ 1674.741269][ T4741] __alloc_disk_node+0x251/0x5c0 [ 1674.746225][ T4741] __blk_mq_alloc_disk+0xed/0x160 [ 1674.751262][ T4741] nbd_dev_add+0x3b2/0xcd0 [ 1674.755696][ T4741] nbd_genl_connect+0x11f3/0x1930 [ 1674.760744][ T4741] ? nbd_start_device+0xd10/0xd10 [ 1674.765789][ T4741] ? __nla_parse+0x3d/0x50 [ 1674.770224][ T4741] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1674.776459][ T4741] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1674.783823][ T4741] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1674.791100][ T4741] genl_family_rcv_msg_doit+0x228/0x320 [ 1674.796634][ T4741] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1674.803989][ T4741] ? mutex_lock_io_nested+0x1150/0x1150 [ 1674.809812][ T4741] ? genl_op_from_small+0x23/0x3c0 [ 1674.814922][ T4741] ? genl_get_cmd+0x3cf/0x480 [ 1674.819586][ T4741] genl_rcv_msg+0x328/0x580 [ 1674.824080][ T4741] ? genl_get_cmd+0x480/0x480 [ 1674.828758][ T4741] ? nbd_start_device+0xd10/0xd10 [ 1674.833790][ T4741] ? lock_release+0x720/0x720 [ 1674.838459][ T4741] netlink_rcv_skb+0x153/0x420 [ 1674.843212][ T4741] ? genl_get_cmd+0x480/0x480 [ 1674.847893][ T4741] ? netlink_ack+0xa60/0xa60 [ 1674.852482][ T4741] ? netlink_deliver_tap+0x1b1/0xc30 [ 1674.857754][ T4741] ? _copy_from_iter+0x12b/0x1320 [ 1674.862953][ T4741] genl_rcv+0x24/0x40 [ 1674.866961][ T4741] netlink_unicast+0x533/0x7d0 [ 1674.871712][ T4741] ? netlink_attachskb+0x880/0x880 [ 1674.877006][ T4741] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.883255][ T4741] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.889482][ T4741] ? __phys_addr_symbol+0x2c/0x70 [ 1674.894493][ T4741] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1674.900202][ T4741] ? __check_object_size+0x16e/0x3f0 [ 1674.905482][ T4741] netlink_sendmsg+0x86d/0xda0 [ 1674.910234][ T4741] ? netlink_unicast+0x7d0/0x7d0 [ 1674.915159][ T4741] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1674.921390][ T4741] ? netlink_unicast+0x7d0/0x7d0 [ 1674.926313][ T4741] sock_sendmsg+0xcf/0x120 [ 1674.930718][ T4741] ____sys_sendmsg+0x6e8/0x810 [ 1674.935474][ T4741] ? kernel_sendmsg+0x50/0x50 [ 1674.940140][ T4741] ? do_recvmmsg+0x6d0/0x6d0 [ 1674.944718][ T4741] ? lock_chain_count+0x20/0x20 [ 1674.949554][ T4741] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1674.955524][ T4741] ___sys_sendmsg+0xf3/0x170 [ 1674.960188][ T4741] ? sendmsg_copy_msghdr+0x160/0x160 [ 1674.965467][ T4741] ? __fget_files+0x21b/0x3e0 [ 1674.970147][ T4741] ? lock_downgrade+0x6e0/0x6e0 [ 1674.975077][ T4741] ? __fget_files+0x23d/0x3e0 [ 1674.979843][ T4741] ? __fget_light+0xea/0x280 [ 1674.984442][ T4741] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1674.990688][ T4741] __sys_sendmsg+0xe5/0x1b0 [ 1674.995177][ T4741] ? __sys_sendmsg_sock+0x30/0x30 [ 1675.000195][ T4741] ? syscall_enter_from_user_mode+0x21/0x70 [ 1675.006082][ T4741] do_syscall_64+0x35/0xb0 [ 1675.010966][ T4741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1675.016867][ T4741] RIP: 0033:0x7f238b7b8ae9 [ 1675.021266][ T4741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.040857][ T4741] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.049254][ T4741] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1675.057210][ T4741] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1675.065170][ T4741] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.073122][ T4741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.081078][ T4741] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1675.089043][ T4741] 07:57:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 44) [ 1675.139206][ T2607] usb 5-1: Using ep0 maxpacket: 8 [ 1675.159007][T27219] usb 1-1: device descriptor read/64, error 18 [ 1675.189201][ T9168] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1675.197013][ T9168] usb 3-1: can't read configurations, error -61 [ 1675.207461][ T4754] FAULT_INJECTION: forcing a failure. [ 1675.207461][ T4754] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.220540][ T4754] CPU: 1 PID: 4754 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1675.228872][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.238931][ T4754] Call Trace: [ 1675.242209][ T4754] [ 1675.245139][ T4754] dump_stack_lvl+0xcd/0x134 [ 1675.249747][ T4754] should_fail.cold+0x5/0xa [ 1675.254265][ T4754] ? alloc_workqueue+0x930/0xf00 [ 1675.259207][ T4754] should_failslab+0x5/0x10 [ 1675.263699][ T4754] __kmalloc+0x72/0x340 [ 1675.267843][ T4754] alloc_workqueue+0x930/0xf00 [ 1675.272594][ T4754] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1675.278254][ T4754] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1675.283717][ T4754] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1675.289180][ T4754] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1675.295085][ T4754] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1675.300546][ T4754] ? __alloc_disk_node+0x379/0x5c0 [ 1675.305662][ T4754] ? __alloc_disk_node+0x3d1/0x5c0 [ 1675.310765][ T4754] ? nbd_dev_add+0x3c4/0xcd0 [ 1675.315350][ T4754] nbd_dev_add+0x43a/0xcd0 [ 1675.319768][ T4754] nbd_genl_connect+0x11f3/0x1930 [ 1675.325005][ T4754] ? nbd_start_device+0xd10/0xd10 [ 1675.330038][ T4754] ? __nla_parse+0x3d/0x50 [ 1675.334539][ T4754] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1675.340862][ T4754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1675.348222][ T4754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1675.355499][ T4754] genl_family_rcv_msg_doit+0x228/0x320 [ 1675.361037][ T4754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1675.368485][ T4754] ? mutex_lock_io_nested+0x1150/0x1150 [ 1675.374041][ T4754] ? genl_op_from_small+0x23/0x3c0 [ 1675.379150][ T4754] ? genl_get_cmd+0x3cf/0x480 [ 1675.383824][ T4754] genl_rcv_msg+0x328/0x580 [ 1675.388319][ T4754] ? genl_get_cmd+0x480/0x480 [ 1675.392992][ T4754] ? nbd_start_device+0xd10/0xd10 [ 1675.398014][ T4754] ? lock_release+0x720/0x720 [ 1675.402685][ T4754] netlink_rcv_skb+0x153/0x420 [ 1675.407438][ T4754] ? genl_get_cmd+0x480/0x480 [ 1675.412101][ T4754] ? netlink_ack+0xa60/0xa60 [ 1675.416682][ T4754] ? netlink_deliver_tap+0x1b1/0xc30 [ 1675.421958][ T4754] ? _copy_from_iter+0x12b/0x1320 [ 1675.426975][ T4754] genl_rcv+0x24/0x40 [ 1675.430944][ T4754] netlink_unicast+0x533/0x7d0 [ 1675.435871][ T4754] ? netlink_attachskb+0x880/0x880 [ 1675.440966][ T4754] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1675.447285][ T4754] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1675.453781][ T4754] ? __phys_addr_symbol+0x2c/0x70 [ 1675.458799][ T4754] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1675.464514][ T4754] ? __check_object_size+0x16e/0x3f0 [ 1675.469790][ T4754] netlink_sendmsg+0x86d/0xda0 [ 1675.474550][ T4754] ? netlink_unicast+0x7d0/0x7d0 [ 1675.479480][ T4754] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1675.485800][ T4754] ? netlink_unicast+0x7d0/0x7d0 [ 1675.490728][ T4754] sock_sendmsg+0xcf/0x120 [ 1675.495134][ T4754] ____sys_sendmsg+0x6e8/0x810 [ 1675.499889][ T4754] ? kernel_sendmsg+0x50/0x50 [ 1675.504551][ T4754] ? do_recvmmsg+0x6d0/0x6d0 [ 1675.509131][ T4754] ? lock_chain_count+0x20/0x20 [ 1675.513970][ T4754] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1675.519946][ T4754] ___sys_sendmsg+0xf3/0x170 [ 1675.524528][ T4754] ? sendmsg_copy_msghdr+0x160/0x160 [ 1675.529806][ T4754] ? __fget_files+0x21b/0x3e0 [ 1675.534503][ T4754] ? lock_downgrade+0x6e0/0x6e0 [ 1675.539355][ T4754] ? __fget_files+0x23d/0x3e0 [ 1675.544029][ T4754] ? __fget_light+0xea/0x280 [ 1675.548610][ T4754] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1675.554848][ T4754] __sys_sendmsg+0xe5/0x1b0 [ 1675.559340][ T4754] ? __sys_sendmsg_sock+0x30/0x30 [ 1675.564364][ T4754] ? syscall_enter_from_user_mode+0x21/0x70 [ 1675.570254][ T4754] do_syscall_64+0x35/0xb0 [ 1675.574660][ T4754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1675.580548][ T4754] RIP: 0033:0x7f238b7b8ae9 [ 1675.584953][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1675.604702][ T4754] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.613124][ T4754] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1675.621089][ T4754] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1675.629047][ T4754] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 07:57:47 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x79f3, &(0x7f0000000080)={0x0, 0xea16, 0x4, 0x0, 0x9c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r5, 0x0, &(0x7f00000002c0)="d4057adf8fa66ae84de83256e9516c8043e244c21a844e305359bd81589898fb51f6b798e196d4329236587d7d98e679266977a10f3f0dc33382e58d0155da039b7d374a53edbb367618b63ac601cd67e7dcc660c5626fc498768bb69c03006ff67cc921e64ee7036b5325da5b7aefe17d896d5951100f1bc9c3853e6a0d622be103616e10a8b21547d2344363ef9ce91e75dfeff1c2d57b61b0f95a06502f8d32a4bfa44344ccb5d694df1737ddc74967a3850751cc073b06ccbb0d816b755869aee356e67b3f9b9a35b1b106536843feada4ccddc089d10a472956fc802b5837db633e28646e9ad1cb6c0a27f07fea74e1", 0xf2, 0x80}, 0x1f) syz_usb_disconnect(r0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) [ 1675.637002][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.644957][ T4754] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1675.652927][ T4754] [ 1675.656353][ T4754] block (null): Could not allocate knbd recv work queue. [ 1675.663948][ T4754] nbd: failed to add new device [ 1675.731254][T27219] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 1675.749324][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1675.769099][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1675.776182][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1675.839262][ T9172] usb 6-1: device descriptor read/all, error -71 [ 1675.928909][T27219] usb 1-1: device descriptor read/64, error 18 [ 1676.011881][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1676.019256][ T4727] raw-gadget gadget: fail, usb_ep_enable returned -22 07:57:47 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:57:47 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 45) [ 1676.058786][T30977] usblp3: removed [ 1676.068758][ C0] usblp0: nonzero read bulk status received: -71 [ 1676.088826][ T9168] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1676.138122][ T4781] FAULT_INJECTION: forcing a failure. [ 1676.138122][ T4781] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.151056][ T4781] CPU: 1 PID: 4781 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1676.159393][ T4781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.169453][ T4781] Call Trace: [ 1676.172729][ T4781] [ 1676.175659][ T4781] dump_stack_lvl+0xcd/0x134 [ 1676.180269][ T4781] should_fail.cold+0x5/0xa [ 1676.184786][ T4781] ? alloc_workqueue_attrs+0x38/0x80 [ 1676.190172][ T4781] should_failslab+0x5/0x10 [ 1676.194686][ T4781] kmem_cache_alloc_trace+0x55/0x2c0 [ 1676.199995][ T4781] alloc_workqueue_attrs+0x38/0x80 [ 1676.205122][ T4781] alloc_workqueue+0x955/0xf00 [ 1676.209897][ T4781] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.215376][ T4781] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.220850][ T4781] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.226326][ T4781] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1676.229161][T27219] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 1676.232060][ T4781] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.245216][ T4781] ? __alloc_disk_node+0x379/0x5c0 [ 1676.250345][ T4781] ? __alloc_disk_node+0x3d1/0x5c0 [ 1676.255476][ T4781] ? nbd_dev_add+0x3c4/0xcd0 [ 1676.260077][ T4781] nbd_dev_add+0x43a/0xcd0 [ 1676.264510][ T4781] nbd_genl_connect+0x11f3/0x1930 [ 1676.269559][ T4781] ? nbd_start_device+0xd10/0xd10 [ 1676.274600][ T4781] ? __nla_parse+0x3d/0x50 [ 1676.279201][ T4781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 07:57:47 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1676.285628][ T4781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1676.293010][ T4781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1676.300312][ T4781] genl_family_rcv_msg_doit+0x228/0x320 [ 1676.305868][ T4781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1676.313244][ T4781] ? mutex_lock_io_nested+0x1150/0x1150 [ 1676.318817][ T4781] ? genl_op_from_small+0x23/0x3c0 [ 1676.323950][ T4781] ? genl_get_cmd+0x3cf/0x480 [ 1676.328638][ T4781] genl_rcv_msg+0x328/0x580 [ 1676.333407][ T4781] ? genl_get_cmd+0x480/0x480 [ 1676.338089][ T4781] ? nbd_start_device+0xd10/0xd10 [ 1676.343132][ T4781] ? lock_release+0x720/0x720 [ 1676.347831][ T4781] netlink_rcv_skb+0x153/0x420 [ 1676.352608][ T4781] ? genl_get_cmd+0x480/0x480 [ 1676.357290][ T4781] ? netlink_ack+0xa60/0xa60 [ 1676.361886][ T4781] ? netlink_deliver_tap+0x1b1/0xc30 [ 1676.367184][ T4781] ? _copy_from_iter+0x12b/0x1320 [ 1676.372216][ T4781] genl_rcv+0x24/0x40 [ 1676.376201][ T4781] netlink_unicast+0x533/0x7d0 [ 1676.380971][ T4781] ? netlink_attachskb+0x880/0x880 [ 1676.386084][ T4781] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1676.392346][ T4781] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1676.398610][ T4781] ? __phys_addr_symbol+0x2c/0x70 [ 1676.403650][ T4781] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1676.409388][ T4781] ? __check_object_size+0x16e/0x3f0 [ 1676.414687][ T4781] netlink_sendmsg+0x86d/0xda0 [ 1676.419465][ T4781] ? netlink_unicast+0x7d0/0x7d0 [ 1676.424415][ T4781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1676.430670][ T4781] ? netlink_unicast+0x7d0/0x7d0 [ 1676.435613][ T4781] sock_sendmsg+0xcf/0x120 [ 1676.440037][ T4781] ____sys_sendmsg+0x6e8/0x810 [ 1676.444806][ T4781] ? kernel_sendmsg+0x50/0x50 [ 1676.449142][T30977] usb 5-1: USB disconnect, device number 37 [ 1676.449472][ T4781] ? do_recvmmsg+0x6d0/0x6d0 [ 1676.457074][T30977] usblp0: removed [ 1676.459916][ T4781] ? lock_chain_count+0x20/0x20 [ 1676.459945][ T4781] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1676.459980][ T4781] ___sys_sendmsg+0xf3/0x170 [ 1676.460006][ T4781] ? sendmsg_copy_msghdr+0x160/0x160 [ 1676.460035][ T4781] ? __fget_files+0x21b/0x3e0 [ 1676.460059][ T4781] ? lock_downgrade+0x6e0/0x6e0 [ 1676.460094][ T4781] ? __fget_files+0x23d/0x3e0 [ 1676.479346][T27219] usb 1-1: device not accepting address 35, error -71 [ 1676.484312][ T4781] ? __fget_light+0xea/0x280 [ 1676.510104][ T4781] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1676.516340][ T4781] __sys_sendmsg+0xe5/0x1b0 [ 1676.520846][ T4781] ? __sys_sendmsg_sock+0x30/0x30 [ 1676.525889][ T4781] ? syscall_enter_from_user_mode+0x21/0x70 [ 1676.531797][ T4781] do_syscall_64+0x35/0xb0 [ 1676.536230][ T4781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1676.542134][ T4781] RIP: 0033:0x7f238b7b8ae9 [ 1676.546555][ T4781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.566170][ T4781] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1676.574590][ T4781] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 07:57:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 46) [ 1676.582548][ T4781] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1676.590677][ T4781] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.598637][ T4781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.606605][ T4781] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1676.614568][ T4781] [ 1676.618458][ T4781] block (null): Could not allocate knbd recv work queue. [ 1676.625938][ T4781] nbd: failed to add new device [ 1676.673493][ T4805] FAULT_INJECTION: forcing a failure. [ 1676.673493][ T4805] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.686624][ T4805] CPU: 0 PID: 4805 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1676.694958][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.705103][ T4805] Call Trace: [ 1676.708379][ T4805] [ 1676.711309][ T4805] dump_stack_lvl+0xcd/0x134 [ 1676.715917][ T4805] should_fail.cold+0x5/0xa [ 1676.720435][ T4805] should_failslab+0x5/0x10 [ 1676.724945][ T4805] __kmalloc_track_caller+0x79/0x320 [ 1676.730235][ T4805] ? kasprintf+0xbb/0xf0 [ 1676.734579][ T4805] ? __sys_sendmsg+0xe5/0x1b0 [ 1676.739261][ T4805] kvasprintf+0xb5/0x150 [ 1676.743491][ T4805] ? bust_spinlocks+0xe0/0xe0 [ 1676.748160][ T4805] kasprintf+0xbb/0xf0 [ 1676.752216][ T4805] ? kvasprintf_const+0x190/0x190 [ 1676.757545][ T4805] ? call_rcu_zapped+0xb0/0xb0 [ 1676.762316][ T4805] ? lockdep_unlock+0x11c/0x290 [ 1676.767327][ T4805] alloc_workqueue+0x3f0/0xf00 [ 1676.772075][ T4805] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.777526][ T4805] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.782987][ T4805] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1676.788443][ T4805] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1676.794155][ T4805] ? __alloc_disk_node+0x379/0x5c0 [ 1676.799359][ T4805] ? __alloc_disk_node+0x3d1/0x5c0 [ 1676.804462][ T4805] ? nbd_dev_add+0x3c4/0xcd0 [ 1676.809042][ T4805] nbd_dev_add+0x43a/0xcd0 [ 1676.813534][ T4805] nbd_genl_connect+0x11f3/0x1930 [ 1676.818645][ T4805] ? nbd_start_device+0xd10/0xd10 [ 1676.823680][ T4805] ? __nla_parse+0x3d/0x50 [ 1676.828090][ T4805] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1676.834331][ T4805] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1676.841687][ T4805] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1676.849203][ T4805] genl_family_rcv_msg_doit+0x228/0x320 [ 1676.854737][ T4805] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1676.862094][ T4805] ? mutex_lock_io_nested+0x1150/0x1150 [ 1676.867633][ T4805] ? genl_op_from_small+0x23/0x3c0 [ 1676.872729][ T4805] ? genl_get_cmd+0x3cf/0x480 [ 1676.877394][ T4805] genl_rcv_msg+0x328/0x580 [ 1676.881887][ T4805] ? genl_get_cmd+0x480/0x480 [ 1676.886556][ T4805] ? nbd_start_device+0xd10/0xd10 [ 1676.891675][ T4805] ? lock_release+0x720/0x720 [ 1676.896345][ T4805] netlink_rcv_skb+0x153/0x420 [ 1676.901100][ T4805] ? genl_get_cmd+0x480/0x480 [ 1676.905778][ T4805] ? netlink_ack+0xa60/0xa60 [ 1676.910357][ T4805] ? netlink_deliver_tap+0x1b1/0xc30 [ 1676.915630][ T4805] ? _copy_from_iter+0x12b/0x1320 [ 1676.920642][ T4805] genl_rcv+0x24/0x40 [ 1676.924610][ T4805] netlink_unicast+0x533/0x7d0 [ 1676.929596][ T4805] ? netlink_attachskb+0x880/0x880 [ 1676.934691][ T4805] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1676.941128][ T4805] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1676.947373][ T4805] ? __phys_addr_symbol+0x2c/0x70 [ 1676.952608][ T4805] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1676.958315][ T4805] ? __check_object_size+0x16e/0x3f0 [ 1676.963596][ T4805] netlink_sendmsg+0x86d/0xda0 [ 1676.968356][ T4805] ? netlink_unicast+0x7d0/0x7d0 [ 1676.973481][ T4805] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1676.979970][ T4805] ? netlink_unicast+0x7d0/0x7d0 [ 1676.985239][ T4805] sock_sendmsg+0xcf/0x120 [ 1676.989647][ T4805] ____sys_sendmsg+0x6e8/0x810 [ 1676.994589][ T4805] ? kernel_sendmsg+0x50/0x50 [ 1676.999266][ T4805] ? do_recvmmsg+0x6d0/0x6d0 [ 1677.004070][ T4805] ? lock_chain_count+0x20/0x20 [ 1677.009098][ T4805] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1677.015078][ T4805] ___sys_sendmsg+0xf3/0x170 [ 1677.019746][ T4805] ? sendmsg_copy_msghdr+0x160/0x160 [ 1677.025037][ T4805] ? __fget_files+0x21b/0x3e0 [ 1677.029706][ T4805] ? lock_downgrade+0x6e0/0x6e0 [ 1677.034554][ T4805] ? __fget_files+0x23d/0x3e0 [ 1677.039236][ T4805] ? __fget_light+0xea/0x280 [ 1677.043813][ T4805] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1677.050050][ T4805] __sys_sendmsg+0xe5/0x1b0 [ 1677.054540][ T4805] ? __sys_sendmsg_sock+0x30/0x30 [ 1677.059649][ T4805] ? syscall_enter_from_user_mode+0x21/0x70 [ 1677.065533][ T4805] do_syscall_64+0x35/0xb0 [ 1677.069936][ T4805] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1677.076059][ T4805] RIP: 0033:0x7f238b7b8ae9 [ 1677.080474][ T4805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.100080][ T4805] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.108650][ T4805] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1677.116988][ T4805] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1677.124946][ T4805] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.132919][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1677.140967][ T4805] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1677.149010][ T4805] [ 1677.158722][T20209] usb 2-1: new high-speed USB device number 76 using dummy_hcd 07:57:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 47) [ 1677.229107][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1677.234747][ T9172] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1677.240958][T27219] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 1677.258793][T30977] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1677.265685][ T4818] FAULT_INJECTION: forcing a failure. [ 1677.265685][ T4818] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.279411][ T4818] CPU: 1 PID: 4818 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1677.287740][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.297783][ T4818] Call Trace: [ 1677.301048][ T4818] [ 1677.303971][ T4818] dump_stack_lvl+0xcd/0x134 [ 1677.308559][ T4818] should_fail.cold+0x5/0xa [ 1677.313154][ T4818] ? apply_wqattrs_prepare+0xac/0x890 [ 1677.318516][ T4818] should_failslab+0x5/0x10 [ 1677.323012][ T4818] __kmalloc+0x72/0x340 [ 1677.327162][ T4818] apply_wqattrs_prepare+0xac/0x890 [ 1677.332361][ T4818] apply_workqueue_attrs_locked+0xc1/0x140 [ 1677.338162][ T4818] alloc_workqueue+0xb30/0xf00 [ 1677.342921][ T4818] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1677.348375][ T4818] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1677.353831][ T4818] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1677.359559][ T4818] ? __alloc_disk_node+0x379/0x5c0 [ 1677.364757][ T4818] ? __alloc_disk_node+0x3d1/0x5c0 [ 1677.369868][ T4818] ? nbd_dev_add+0x3c4/0xcd0 [ 1677.374461][ T4818] nbd_dev_add+0x43a/0xcd0 [ 1677.378875][ T4818] nbd_genl_connect+0x11f3/0x1930 [ 1677.383902][ T4818] ? nbd_start_device+0xd10/0xd10 [ 1677.388918][ T4818] ? __nla_parse+0x3d/0x50 [ 1677.393330][ T4818] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1677.399564][ T4818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1677.406924][ T4818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1677.414202][ T4818] genl_family_rcv_msg_doit+0x228/0x320 [ 1677.419736][ T4818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1677.427096][ T4818] ? mutex_lock_io_nested+0x1150/0x1150 [ 1677.432639][ T4818] ? genl_op_from_small+0x23/0x3c0 [ 1677.437739][ T4818] ? genl_get_cmd+0x3cf/0x480 [ 1677.442408][ T4818] genl_rcv_msg+0x328/0x580 [ 1677.446902][ T4818] ? genl_get_cmd+0x480/0x480 [ 1677.451980][ T4818] ? nbd_start_device+0xd10/0xd10 [ 1677.457003][ T4818] ? lock_release+0x720/0x720 [ 1677.461678][ T4818] netlink_rcv_skb+0x153/0x420 [ 1677.466432][ T4818] ? genl_get_cmd+0x480/0x480 [ 1677.471096][ T4818] ? netlink_ack+0xa60/0xa60 [ 1677.475677][ T4818] ? netlink_deliver_tap+0x1b1/0xc30 [ 1677.480951][ T4818] ? _copy_from_iter+0x12b/0x1320 [ 1677.485967][ T4818] genl_rcv+0x24/0x40 [ 1677.489937][ T4818] netlink_unicast+0x533/0x7d0 [ 1677.494692][ T4818] ? netlink_attachskb+0x880/0x880 [ 1677.499788][ T4818] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1677.506023][ T4818] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1677.512255][ T4818] ? __phys_addr_symbol+0x2c/0x70 [ 1677.517272][ T4818] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1677.522982][ T4818] ? __check_object_size+0x16e/0x3f0 [ 1677.528260][ T4818] netlink_sendmsg+0x86d/0xda0 [ 1677.533019][ T4818] ? netlink_unicast+0x7d0/0x7d0 [ 1677.538125][ T4818] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1677.544358][ T4818] ? netlink_unicast+0x7d0/0x7d0 [ 1677.549285][ T4818] sock_sendmsg+0xcf/0x120 [ 1677.553786][ T4818] ____sys_sendmsg+0x6e8/0x810 [ 1677.558546][ T4818] ? kernel_sendmsg+0x50/0x50 [ 1677.563384][ T4818] ? do_recvmmsg+0x6d0/0x6d0 [ 1677.567967][ T4818] ? lock_chain_count+0x20/0x20 [ 1677.572982][ T4818] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1677.578959][ T4818] ___sys_sendmsg+0xf3/0x170 [ 1677.583643][ T4818] ? sendmsg_copy_msghdr+0x160/0x160 [ 1677.588921][ T4818] ? __fget_files+0x21b/0x3e0 [ 1677.593762][ T4818] ? lock_downgrade+0x6e0/0x6e0 [ 1677.598616][ T4818] ? __fget_files+0x23d/0x3e0 [ 1677.603293][ T4818] ? __fget_light+0xea/0x280 [ 1677.607877][ T4818] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1677.614113][ T4818] __sys_sendmsg+0xe5/0x1b0 [ 1677.618608][ T4818] ? __sys_sendmsg_sock+0x30/0x30 [ 1677.623634][ T4818] ? syscall_enter_from_user_mode+0x21/0x70 [ 1677.629525][ T4818] do_syscall_64+0x35/0xb0 [ 1677.633933][ T4818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1677.639993][ T4818] RIP: 0033:0x7f238b7b8ae9 [ 1677.644398][ T4818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.664167][ T4818] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.672656][ T4818] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1677.680616][ T4818] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1677.688574][ T4818] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.696531][ T4818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1677.704488][ T4818] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1677.712459][ T4818] [ 1677.724447][ T4818] block (null): Could not allocate knbd recv work queue. 07:57:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 48) 07:57:49 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1677.732052][ T4818] nbd: failed to add new device [ 1677.749344][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1677.799025][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1677.807506][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1677.809088][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1677.816600][ T9168] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.828887][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1677.831936][ T9168] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1677.895728][ T4824] FAULT_INJECTION: forcing a failure. [ 1677.895728][ T4824] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.908920][ T4824] CPU: 1 PID: 4824 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1677.917268][ T4824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.927346][ T4824] Call Trace: [ 1677.930629][ T4824] [ 1677.933560][ T4824] dump_stack_lvl+0xcd/0x134 [ 1677.938168][ T4824] should_fail.cold+0x5/0xa [ 1677.942694][ T4824] ? alloc_workqueue_attrs+0x38/0x80 [ 1677.947994][ T4824] should_failslab+0x5/0x10 [ 1677.950821][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1677.952510][ T4824] kmem_cache_alloc_trace+0x55/0x2c0 [ 1677.960928][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1677.966293][ T4824] alloc_workqueue_attrs+0x38/0x80 [ 1677.975260][T20209] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1677.980208][ T4824] apply_wqattrs_prepare+0xb4/0x890 [ 1677.980246][ T4824] apply_workqueue_attrs_locked+0xc1/0x140 [ 1677.980269][ T4824] alloc_workqueue+0xb30/0xf00 [ 1677.980288][ T4824] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1677.980315][ T4824] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1677.989791][T20209] usb 2-1: config 250 has no interface number 0 [ 1677.994909][ T4824] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1678.000746][T20209] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1678.005431][ T4824] ? __alloc_disk_node+0x379/0x5c0 [ 1678.010909][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1678.016291][ T4824] ? __alloc_disk_node+0x3d1/0x5c0 [ 1678.022558][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1678.028294][ T4824] ? nbd_dev_add+0x3c4/0xcd0 [ 1678.039800][T20209] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1678.044798][ T4824] nbd_dev_add+0x43a/0xcd0 [ 1678.055460][T20209] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1678.060448][ T4824] nbd_genl_connect+0x11f3/0x1930 [ 1678.060486][ T4824] ? nbd_start_device+0xd10/0xd10 [ 1678.060514][ T4824] ? __nla_parse+0x3d/0x50 [ 1678.060537][ T4824] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1678.060563][ T4824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1678.060590][ T4824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1678.071499][ T4788] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.075545][ T4824] genl_family_rcv_msg_doit+0x228/0x320 [ 1678.122111][ T4788] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.128578][ T4824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1678.162272][ T4824] ? mutex_lock_io_nested+0x1150/0x1150 [ 1678.167846][ T4824] ? genl_op_from_small+0x23/0x3c0 [ 1678.172968][ T4824] ? genl_get_cmd+0x3cf/0x480 [ 1678.177658][ T4824] genl_rcv_msg+0x328/0x580 [ 1678.182172][ T4824] ? genl_get_cmd+0x480/0x480 [ 1678.186854][ T4824] ? nbd_start_device+0xd10/0xd10 [ 1678.191897][ T4824] ? lock_release+0x720/0x720 [ 1678.196590][ T4824] netlink_rcv_skb+0x153/0x420 [ 1678.201359][ T4824] ? genl_get_cmd+0x480/0x480 [ 1678.206046][ T4824] ? netlink_ack+0xa60/0xa60 [ 1678.210647][ T4824] ? netlink_deliver_tap+0x1b1/0xc30 [ 1678.215941][ T4824] ? _copy_from_iter+0x12b/0x1320 [ 1678.220977][ T4824] genl_rcv+0x24/0x40 [ 1678.224965][ T4824] netlink_unicast+0x533/0x7d0 [ 1678.229739][ T4824] ? netlink_attachskb+0x880/0x880 [ 1678.234842][ T4824] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1678.241080][ T4824] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1678.247316][ T4824] ? __phys_addr_symbol+0x2c/0x70 [ 1678.252340][ T4824] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1678.258056][ T4824] ? __check_object_size+0x16e/0x3f0 [ 1678.263343][ T4824] netlink_sendmsg+0x86d/0xda0 [ 1678.268192][ T4824] ? netlink_unicast+0x7d0/0x7d0 [ 1678.273125][ T4824] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1678.279360][ T4824] ? netlink_unicast+0x7d0/0x7d0 [ 1678.284288][ T4824] sock_sendmsg+0xcf/0x120 [ 1678.288701][ T4824] ____sys_sendmsg+0x6e8/0x810 [ 1678.293458][ T4824] ? kernel_sendmsg+0x50/0x50 [ 1678.298121][ T4824] ? do_recvmmsg+0x6d0/0x6d0 [ 1678.302705][ T4824] ? lock_chain_count+0x20/0x20 [ 1678.307550][ T4824] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1678.313528][ T4824] ___sys_sendmsg+0xf3/0x170 [ 1678.318114][ T4824] ? sendmsg_copy_msghdr+0x160/0x160 [ 1678.323394][ T4824] ? __fget_files+0x21b/0x3e0 [ 1678.328062][ T4824] ? lock_downgrade+0x6e0/0x6e0 [ 1678.332915][ T4824] ? __fget_files+0x23d/0x3e0 [ 1678.337973][ T4824] ? __fget_light+0xea/0x280 [ 1678.342555][ T4824] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1678.348794][ T4824] __sys_sendmsg+0xe5/0x1b0 [ 1678.353375][ T4824] ? __sys_sendmsg_sock+0x30/0x30 [ 1678.358399][ T4824] ? syscall_enter_from_user_mode+0x21/0x70 [ 1678.364291][ T4824] do_syscall_64+0x35/0xb0 [ 1678.368705][ T4824] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1678.374604][ T4824] RIP: 0033:0x7f238b7b8ae9 [ 1678.379185][ T4824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1678.398784][ T4824] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.407184][ T4824] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1678.415150][ T4824] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1678.423110][ T4824] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1678.431068][ T4824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1678.439024][ T4824] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1678.446993][ T4824] [ 1678.454364][T30977] usb 5-1: Using ep0 maxpacket: 8 [ 1678.462508][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1678.471729][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1678.472818][ T4824] block (null): Could not allocate knbd recv work queue. [ 1678.479802][T20209] usb 2-1: SerialNumber: syz [ 1678.492028][ T4824] nbd: failed to add new device [ 1678.500603][ T4779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.507502][ T4779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.515701][ T4786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.522700][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1678.523609][ T4793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.531756][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1678.546470][ T9168] usb 3-1: SerialNumber: syz [ 1678.562685][ T4786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.575631][ T4793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.603217][T20209] hub 2-1:250.228: bad descriptor, ignoring hub [ 1678.610203][T20209] hub: probe of 2-1:250.228 failed with error -5 [ 1678.617357][T30977] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1678.625823][T30977] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1678.634852][T30977] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1678.644126][T30977] usb 5-1: config 250 has no interface number 0 07:57:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 49) [ 1678.650455][T30977] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1678.661999][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1678.672518][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1678.683083][T30977] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1678.696670][T30977] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1678.725271][ T4843] FAULT_INJECTION: forcing a failure. [ 1678.725271][ T4843] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.738424][ T4843] CPU: 0 PID: 4843 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1678.746756][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.756812][ T4843] Call Trace: [ 1678.760096][ T4843] [ 1678.763027][ T4843] dump_stack_lvl+0xcd/0x134 [ 1678.767629][ T4843] should_fail.cold+0x5/0xa [ 1678.772144][ T4843] ? alloc_workqueue_attrs+0x38/0x80 [ 1678.777432][ T4843] should_failslab+0x5/0x10 [ 1678.781942][ T4843] kmem_cache_alloc_trace+0x55/0x2c0 [ 1678.787241][ T4843] alloc_workqueue_attrs+0x38/0x80 [ 1678.791235][ T4779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.792364][ T4843] apply_wqattrs_prepare+0xbc/0x890 [ 1678.804306][ T4843] apply_workqueue_attrs_locked+0xc1/0x140 [ 1678.809977][ T4779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1678.810120][ T4843] alloc_workqueue+0xb30/0xf00 [ 1678.821600][ T4843] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1678.827072][ T4843] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1678.832546][ T4843] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1678.838279][ T4843] ? __alloc_disk_node+0x379/0x5c0 [ 1678.843396][ T4843] ? __alloc_disk_node+0x3d1/0x5c0 [ 1678.848722][ T4843] ? nbd_dev_add+0x3c4/0xcd0 [ 1678.853308][ T4843] nbd_dev_add+0x43a/0xcd0 [ 1678.857716][ T4843] nbd_genl_connect+0x11f3/0x1930 [ 1678.862736][ T4843] ? nbd_start_device+0xd10/0xd10 [ 1678.867751][ T4843] ? __nla_parse+0x3d/0x50 [ 1678.872162][ T4843] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1678.878399][ T4843] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1678.885761][ T4843] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1678.893041][ T4843] genl_family_rcv_msg_doit+0x228/0x320 [ 1678.898596][ T4843] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1678.905967][ T4843] ? mutex_lock_io_nested+0x1150/0x1150 [ 1678.911503][ T4843] ? genl_op_from_small+0x23/0x3c0 [ 1678.916604][ T4843] ? genl_get_cmd+0x3cf/0x480 [ 1678.921282][ T4843] genl_rcv_msg+0x328/0x580 [ 1678.925774][ T4843] ? genl_get_cmd+0x480/0x480 [ 1678.930436][ T4843] ? nbd_start_device+0xd10/0xd10 [ 1678.935710][ T4843] ? lock_release+0x720/0x720 [ 1678.940379][ T4843] netlink_rcv_skb+0x153/0x420 [ 1678.945339][ T4843] ? genl_get_cmd+0x480/0x480 [ 1678.950020][ T4843] ? netlink_ack+0xa60/0xa60 [ 1678.954606][ T4843] ? netlink_deliver_tap+0x1b1/0xc30 [ 1678.959897][ T4843] ? _copy_from_iter+0x12b/0x1320 [ 1678.964910][ T4843] genl_rcv+0x24/0x40 [ 1678.968880][ T4843] netlink_unicast+0x533/0x7d0 [ 1678.973642][ T4843] ? netlink_attachskb+0x880/0x880 [ 1678.978755][ T4843] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1678.984991][ T4843] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1678.991228][ T4843] ? __phys_addr_symbol+0x2c/0x70 [ 1678.996264][ T4843] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1679.001996][ T4843] ? __check_object_size+0x16e/0x3f0 [ 1679.007297][ T4843] netlink_sendmsg+0x86d/0xda0 [ 1679.012310][ T4843] ? netlink_unicast+0x7d0/0x7d0 [ 1679.017431][ T4843] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1679.023667][ T4843] ? netlink_unicast+0x7d0/0x7d0 [ 1679.028596][ T4843] sock_sendmsg+0xcf/0x120 [ 1679.029826][ T4762] UDC core: couldn't find an available UDC or it's busy: -16 [ 1679.033022][ T4843] ____sys_sendmsg+0x6e8/0x810 [ 1679.040437][ T4762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1679.045133][ T4843] ? kernel_sendmsg+0x50/0x50 [ 1679.057398][ T4843] ? do_recvmmsg+0x6d0/0x6d0 [ 1679.062007][ T4843] ? lock_chain_count+0x20/0x20 [ 1679.066871][ T4843] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1679.072876][ T4843] ___sys_sendmsg+0xf3/0x170 [ 1679.077489][ T4843] ? sendmsg_copy_msghdr+0x160/0x160 [ 1679.078588][ T9168] usb 3-1: USB disconnect, device number 96 [ 1679.082788][ T4843] ? __fget_files+0x21b/0x3e0 [ 1679.082827][ T4843] ? lock_downgrade+0x6e0/0x6e0 [ 1679.082867][ T4843] ? __fget_files+0x23d/0x3e0 [ 1679.103083][ T4843] ? __fget_light+0xea/0x280 [ 1679.107694][ T4843] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1679.113958][ T4843] __sys_sendmsg+0xe5/0x1b0 [ 1679.118481][ T4843] ? __sys_sendmsg_sock+0x30/0x30 [ 1679.123530][ T4843] ? syscall_enter_from_user_mode+0x21/0x70 [ 1679.129444][ T4843] do_syscall_64+0x35/0xb0 [ 1679.133877][ T4843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1679.139784][ T4843] RIP: 0033:0x7f238b7b8ae9 [ 1679.144194][ T4843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.163969][ T4843] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.172395][ T4843] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1679.180375][ T4843] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1679.188336][ T4843] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.196311][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1679.204273][ T4843] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1679.212245][ T4843] [ 1679.235011][T20209] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 76 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1679.251873][ T4843] block (null): Could not allocate knbd recv work queue. [ 1679.253278][ T9172] usb 6-1: USB disconnect, device number 51 [ 1679.259488][ T4843] nbd: failed to add new device 07:57:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 50) [ 1679.286908][ T9172] usblp1: removed [ 1679.289446][T30977] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1679.299667][T30977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1679.307665][T30977] usb 5-1: SerialNumber: syz [ 1679.359230][ T4826] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.366538][ T4826] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.377564][ T4870] FAULT_INJECTION: forcing a failure. [ 1679.377564][ T4870] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.379605][T30977] hub 5-1:250.228: bad descriptor, ignoring hub [ 1679.390422][ T4870] CPU: 1 PID: 4870 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1679.390449][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.390464][ T4870] Call Trace: [ 1679.390470][ T4870] [ 1679.390479][ T4870] dump_stack_lvl+0xcd/0x134 [ 1679.390511][ T4870] should_fail.cold+0x5/0xa [ 1679.390539][ T4870] should_failslab+0x5/0x10 [ 1679.390563][ T4870] kmem_cache_alloc_node+0x65/0x3f0 [ 1679.390587][ T4870] ? alloc_unbound_pwq+0x4a5/0xce0 [ 1679.390616][ T4870] alloc_unbound_pwq+0x4a5/0xce0 [ 1679.396861][T30977] hub: probe of 5-1:250.228 failed with error -5 [ 1679.405158][ T4870] apply_wqattrs_prepare+0x2b6/0x890 [ 1679.405195][ T4870] apply_workqueue_attrs_locked+0xc1/0x140 [ 1679.405221][ T4870] alloc_workqueue+0xb30/0xf00 [ 1679.405241][ T4870] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1679.405266][ T4870] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1679.405293][ T4870] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1679.405329][ T4870] ? __alloc_disk_node+0x379/0x5c0 [ 1679.419034][T27219] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 1679.421531][ T4870] ? __alloc_disk_node+0x3d1/0x5c0 [ 1679.421576][ T4870] ? nbd_dev_add+0x3c4/0xcd0 [ 1679.511471][ T4870] nbd_dev_add+0x43a/0xcd0 [ 1679.515921][ T4870] nbd_genl_connect+0x11f3/0x1930 [ 1679.520970][ T4870] ? nbd_start_device+0xd10/0xd10 [ 1679.526008][ T4870] ? __nla_parse+0x3d/0x50 [ 1679.530436][ T4870] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1679.536684][ T4870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1679.544046][ T4870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1679.551351][ T4870] genl_family_rcv_msg_doit+0x228/0x320 [ 1679.556907][ T4870] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1679.564285][ T4870] ? mutex_lock_io_nested+0x1150/0x1150 [ 1679.568707][ C0] usblp0: nonzero read bulk status received: -71 [ 1679.569868][ T4870] ? genl_op_from_small+0x23/0x3c0 [ 1679.581269][ T4870] ? genl_get_cmd+0x3cf/0x480 [ 1679.585966][ T4870] genl_rcv_msg+0x328/0x580 [ 1679.590478][ T4870] ? genl_get_cmd+0x480/0x480 [ 1679.595142][ T4870] ? nbd_start_device+0xd10/0xd10 [ 1679.600164][ T4870] ? lock_release+0x720/0x720 [ 1679.604852][ T4870] netlink_rcv_skb+0x153/0x420 [ 1679.609311][T20209] usb 2-1: USB disconnect, device number 76 [ 1679.609619][ T4870] ? genl_get_cmd+0x480/0x480 [ 1679.620143][ T4870] ? netlink_ack+0xa60/0xa60 [ 1679.624747][ T4870] ? netlink_deliver_tap+0x1b1/0xc30 [ 1679.630044][ T4870] ? _copy_from_iter+0x12b/0x1320 [ 1679.635077][ T4870] genl_rcv+0x24/0x40 [ 1679.639063][ T4870] netlink_unicast+0x533/0x7d0 [ 1679.643840][ T4870] ? netlink_attachskb+0x880/0x880 [ 1679.648954][ T4870] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1679.655206][ T4870] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1679.661459][ T4870] ? __phys_addr_symbol+0x2c/0x70 [ 1679.666491][ T4870] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1679.672233][ T4870] ? __check_object_size+0x16e/0x3f0 [ 1679.677541][ T4870] netlink_sendmsg+0x86d/0xda0 [ 1679.680419][T30977] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1679.682313][ T4870] ? netlink_unicast+0x7d0/0x7d0 [ 1679.698588][ T4870] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1679.704844][ T4870] ? netlink_unicast+0x7d0/0x7d0 [ 1679.708753][T27219] usb 1-1: Using ep0 maxpacket: 8 [ 1679.709784][ T4870] sock_sendmsg+0xcf/0x120 [ 1679.719386][ T4870] ____sys_sendmsg+0x6e8/0x810 [ 1679.724163][ T4870] ? kernel_sendmsg+0x50/0x50 [ 1679.728844][ T4870] ? do_recvmmsg+0x6d0/0x6d0 [ 1679.733444][ T4870] ? lock_chain_count+0x20/0x20 [ 1679.738303][ T4870] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1679.744302][ T4870] ___sys_sendmsg+0xf3/0x170 [ 1679.748891][ T4870] ? sendmsg_copy_msghdr+0x160/0x160 [ 1679.754191][ T4870] ? __fget_files+0x21b/0x3e0 [ 1679.758877][ T4870] ? lock_downgrade+0x6e0/0x6e0 [ 1679.763744][ T4870] ? __fget_files+0x23d/0x3e0 [ 1679.768428][ T4870] ? __fget_light+0xea/0x280 [ 1679.773097][ T4870] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1679.779470][ T4870] __sys_sendmsg+0xe5/0x1b0 [ 1679.784007][ T4870] ? __sys_sendmsg_sock+0x30/0x30 [ 1679.789060][ T4870] ? syscall_enter_from_user_mode+0x21/0x70 [ 1679.794969][ T4870] do_syscall_64+0x35/0xb0 [ 1679.799375][ T4870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1679.805257][ T4870] RIP: 0033:0x7f238b7b8ae9 [ 1679.809657][ T4870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.829266][ T4870] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.837714][ T4870] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1679.845694][ T4870] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1679.850552][ T4786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.853664][ T4870] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.868366][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1679.869943][ T4786] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1679.876338][ T4870] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1679.891039][ T4870] 07:57:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 51) [ 1679.945846][ T4870] block (null): Could not allocate knbd recv work queue. [ 1679.949118][T30977] usb 5-1: USB disconnect, device number 38 [ 1679.953666][ T4870] nbd: failed to add new device [ 1679.970188][T30977] usblp1: removed [ 1680.029078][T27219] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1680.045996][T27219] usb 1-1: USB disconnect, device number 35 [ 1680.059213][T27219] usblp2: removed [ 1680.076769][ T4907] FAULT_INJECTION: forcing a failure. [ 1680.076769][ T4907] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.089976][ T4907] CPU: 1 PID: 4907 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1680.098306][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.108370][ T4907] Call Trace: [ 1680.111648][ T4907] [ 1680.114581][ T4907] dump_stack_lvl+0xcd/0x134 [ 1680.119187][ T4907] should_fail.cold+0x5/0xa [ 1680.123704][ T4907] ? alloc_worker+0x43/0x1c0 [ 1680.128303][ T4907] should_failslab+0x5/0x10 [ 1680.132825][ T4907] kmem_cache_alloc_node_trace+0x59/0x310 [ 1680.138560][ T4907] alloc_worker+0x43/0x1c0 [ 1680.142985][ T4907] init_rescuer+0x6d/0x1d0 [ 1680.147410][ T4907] alloc_workqueue+0xbf4/0xf00 [ 1680.152179][ T4907] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1680.157646][ T4907] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1680.163121][ T4907] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1680.169198][ T4907] ? __alloc_disk_node+0x379/0x5c0 [ 1680.174318][ T4907] ? __alloc_disk_node+0x3d1/0x5c0 [ 1680.179455][ T4907] ? nbd_dev_add+0x3c4/0xcd0 [ 1680.184060][ T4907] nbd_dev_add+0x43a/0xcd0 [ 1680.188479][ T4907] nbd_genl_connect+0x11f3/0x1930 [ 1680.193504][ T4907] ? nbd_start_device+0xd10/0xd10 [ 1680.198528][ T4907] ? __nla_parse+0x3d/0x50 [ 1680.202942][ T4907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1680.209273][ T4907] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1680.216735][ T4907] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1680.224017][ T4907] genl_family_rcv_msg_doit+0x228/0x320 [ 1680.229557][ T4907] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1680.236919][ T4907] ? mutex_lock_io_nested+0x1150/0x1150 [ 1680.242548][ T4907] ? genl_op_from_small+0x23/0x3c0 [ 1680.247652][ T4907] ? genl_get_cmd+0x3cf/0x480 [ 1680.252321][ T4907] genl_rcv_msg+0x328/0x580 [ 1680.256823][ T4907] ? genl_get_cmd+0x480/0x480 [ 1680.261487][ T4907] ? nbd_start_device+0xd10/0xd10 [ 1680.266509][ T4907] ? lock_release+0x720/0x720 [ 1680.271268][ T4907] netlink_rcv_skb+0x153/0x420 [ 1680.276021][ T4907] ? genl_get_cmd+0x480/0x480 [ 1680.280689][ T4907] ? netlink_ack+0xa60/0xa60 [ 1680.285359][ T4907] ? netlink_deliver_tap+0x1b1/0xc30 [ 1680.290637][ T4907] ? _copy_from_iter+0x12b/0x1320 [ 1680.295655][ T4907] genl_rcv+0x24/0x40 [ 1680.299628][ T4907] netlink_unicast+0x533/0x7d0 [ 1680.304411][ T4907] ? netlink_attachskb+0x880/0x880 [ 1680.309594][ T4907] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1680.315829][ T4907] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1680.322408][ T4907] ? __phys_addr_symbol+0x2c/0x70 [ 1680.327423][ T4907] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1680.333140][ T4907] ? __check_object_size+0x16e/0x3f0 [ 1680.338420][ T4907] netlink_sendmsg+0x86d/0xda0 [ 1680.343177][ T4907] ? netlink_unicast+0x7d0/0x7d0 [ 1680.348108][ T4907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1680.354432][ T4907] ? netlink_unicast+0x7d0/0x7d0 [ 1680.359358][ T4907] sock_sendmsg+0xcf/0x120 [ 1680.363765][ T4907] ____sys_sendmsg+0x6e8/0x810 [ 1680.368520][ T4907] ? kernel_sendmsg+0x50/0x50 [ 1680.373182][ T4907] ? do_recvmmsg+0x6d0/0x6d0 [ 1680.377766][ T4907] ? lock_chain_count+0x20/0x20 [ 1680.382611][ T4907] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1680.388590][ T4907] ___sys_sendmsg+0xf3/0x170 [ 1680.393262][ T4907] ? sendmsg_copy_msghdr+0x160/0x160 [ 1680.398541][ T4907] ? __fget_files+0x21b/0x3e0 [ 1680.403208][ T4907] ? lock_downgrade+0x6e0/0x6e0 [ 1680.408061][ T4907] ? __fget_files+0x23d/0x3e0 [ 1680.412730][ T4907] ? __fget_light+0xea/0x280 [ 1680.417313][ T4907] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1680.423552][ T4907] __sys_sendmsg+0xe5/0x1b0 [ 1680.428049][ T4907] ? __sys_sendmsg_sock+0x30/0x30 [ 1680.433074][ T4907] ? syscall_enter_from_user_mode+0x21/0x70 [ 1680.438963][ T4907] do_syscall_64+0x35/0xb0 [ 1680.443367][ T4907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1680.449256][ T4907] RIP: 0033:0x7f238b7b8ae9 [ 1680.453660][ T4907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.473253][ T4907] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.481655][ T4907] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1680.489616][ T4907] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1680.497577][ T4907] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.505531][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1680.513490][ T4907] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1680.521464][ T4907] [ 1680.526141][T20209] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1680.526355][ T4907] block (null): Could not allocate knbd recv work queue. [ 1680.541429][ T4907] nbd: failed to add new device 07:57:52 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x18, &(0x7f0000000040)={0x0, 0x0, 0xf, {0xf, 0x0, "afe1b580dc8b0421b49222ffb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1680.609490][T30977] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1680.788749][T20209] usb 2-1: Using ep0 maxpacket: 8 07:57:52 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1680.828806][ T9172] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1680.847126][ T4793] usblp0: removed [ 1680.859216][T30977] usb 5-1: Using ep0 maxpacket: 8 07:57:52 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x2b69, &(0x7f0000000240)={0x0, 0xba17, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000080), 0x6e, &(0x7f0000001640)}, 0x40012101) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:57:52 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6944ac63944ec6ad55772d6a43e4f04fd82e772a8a94ce2dff63c259cb8cf345b9568eb2128892712d0976f485415f179dcdf2451c181c45a9a227a62f65419acdc1d00abb5eea260db34e795313656fe2f84aafa206d2525c480aca06d"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 07:57:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 52) [ 1680.909042][T20209] usb 2-1: device descriptor read/all, error -71 [ 1680.989450][T30977] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1680.998043][T30977] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1681.006970][T30977] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1681.016317][T30977] usb 5-1: config 250 has no interface number 0 [ 1681.022644][T30977] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1681.034158][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1681.044670][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1681.055278][T30977] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1681.068916][T30977] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1681.078292][ T4936] FAULT_INJECTION: forcing a failure. [ 1681.078292][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.079136][ T9168] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1681.091119][ T4936] CPU: 0 PID: 4936 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1681.106792][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.116864][ T4936] Call Trace: [ 1681.120149][ T4936] [ 1681.123074][ T4936] dump_stack_lvl+0xcd/0x134 [ 1681.127665][ T4936] should_fail.cold+0x5/0xa [ 1681.132160][ T4936] ? __kthread_create_on_node+0xd2/0x3f0 [ 1681.137784][ T4936] should_failslab+0x5/0x10 [ 1681.142286][ T4936] kmem_cache_alloc_trace+0x55/0x2c0 [ 1681.147565][ T4936] ? worker_thread+0x11f0/0x11f0 [ 1681.152491][ T4936] __kthread_create_on_node+0xd2/0x3f0 [ 1681.157938][ T4936] ? genl_rcv_msg+0x328/0x580 [ 1681.162604][ T4936] ? genl_rcv+0x24/0x40 [ 1681.167283][ T4936] ? __kthread_parkme+0x220/0x220 [ 1681.172307][ T4936] ? ____sys_sendmsg+0x6e8/0x810 [ 1681.177252][ T4936] ? alloc_worker+0x43/0x1c0 [ 1681.181841][ T4936] ? worker_thread+0x11f0/0x11f0 [ 1681.186851][ T4936] kthread_create_on_node+0xbb/0xf0 [ 1681.192038][ T4936] ? __kthread_create_on_node+0x3f0/0x3f0 [ 1681.197752][ T4936] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1681.203288][ T4936] ? trace_kmalloc_node+0x32/0x100 [ 1681.208400][ T4936] init_rescuer+0xc9/0x1d0 [ 1681.212812][ T4936] alloc_workqueue+0xbf4/0xf00 [ 1681.217564][ T4936] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1681.223015][ T4936] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1681.228470][ T4936] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1681.234185][ T4936] ? __alloc_disk_node+0x379/0x5c0 [ 1681.239290][ T4936] ? __alloc_disk_node+0x3d1/0x5c0 [ 1681.244404][ T4936] ? nbd_dev_add+0x3c4/0xcd0 [ 1681.248989][ T4936] nbd_dev_add+0x43a/0xcd0 [ 1681.253401][ T4936] nbd_genl_connect+0x11f3/0x1930 [ 1681.258423][ T4936] ? nbd_start_device+0xd10/0xd10 [ 1681.263439][ T4936] ? __nla_parse+0x3d/0x50 [ 1681.267934][ T4936] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1681.274165][ T4936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1681.281526][ T4936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1681.288805][ T4936] genl_family_rcv_msg_doit+0x228/0x320 [ 1681.294343][ T4936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1681.301703][ T4936] ? mutex_lock_io_nested+0x1150/0x1150 [ 1681.307249][ T4936] ? genl_op_from_small+0x23/0x3c0 [ 1681.312348][ T4936] ? genl_get_cmd+0x3cf/0x480 [ 1681.317016][ T4936] genl_rcv_msg+0x328/0x580 [ 1681.321512][ T4936] ? genl_get_cmd+0x480/0x480 [ 1681.326176][ T4936] ? nbd_start_device+0xd10/0xd10 [ 1681.331197][ T4936] ? lock_release+0x720/0x720 [ 1681.335870][ T4936] netlink_rcv_skb+0x153/0x420 [ 1681.340623][ T4936] ? genl_get_cmd+0x480/0x480 [ 1681.345290][ T4936] ? netlink_ack+0xa60/0xa60 [ 1681.349873][ T4936] ? netlink_deliver_tap+0x1b1/0xc30 [ 1681.355149][ T4936] ? _copy_from_iter+0x12b/0x1320 [ 1681.360165][ T4936] genl_rcv+0x24/0x40 [ 1681.364134][ T4936] netlink_unicast+0x533/0x7d0 [ 1681.368887][ T4936] ? netlink_attachskb+0x880/0x880 [ 1681.373986][ T4936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1681.380219][ T4936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1681.386450][ T4936] ? __phys_addr_symbol+0x2c/0x70 [ 1681.391465][ T4936] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1681.397173][ T4936] ? __check_object_size+0x16e/0x3f0 [ 1681.402450][ T4936] netlink_sendmsg+0x86d/0xda0 [ 1681.407205][ T4936] ? netlink_unicast+0x7d0/0x7d0 [ 1681.412136][ T4936] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1681.418371][ T4936] ? netlink_unicast+0x7d0/0x7d0 [ 1681.423295][ T4936] sock_sendmsg+0xcf/0x120 [ 1681.427705][ T4936] ____sys_sendmsg+0x6e8/0x810 [ 1681.432458][ T4936] ? kernel_sendmsg+0x50/0x50 [ 1681.437123][ T4936] ? do_recvmmsg+0x6d0/0x6d0 [ 1681.441705][ T4936] ? lock_chain_count+0x20/0x20 [ 1681.446546][ T4936] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1681.452522][ T4936] ___sys_sendmsg+0xf3/0x170 [ 1681.457104][ T4936] ? sendmsg_copy_msghdr+0x160/0x160 [ 1681.462382][ T4936] ? __fget_files+0x21b/0x3e0 [ 1681.467048][ T4936] ? lock_downgrade+0x6e0/0x6e0 [ 1681.471895][ T4936] ? __fget_files+0x23d/0x3e0 [ 1681.476569][ T4936] ? __fget_light+0xea/0x280 [ 1681.481150][ T4936] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1681.487388][ T4936] __sys_sendmsg+0xe5/0x1b0 [ 1681.491881][ T4936] ? __sys_sendmsg_sock+0x30/0x30 [ 1681.496906][ T4936] ? syscall_enter_from_user_mode+0x21/0x70 [ 1681.502795][ T4936] do_syscall_64+0x35/0xb0 [ 1681.507200][ T4936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1681.513087][ T4936] RIP: 0033:0x7f238b7b8ae9 [ 1681.517490][ T4936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.537085][ T4936] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1681.545488][ T4936] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1681.553465][ T4936] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1681.561436][ T4936] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.569393][ T4936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1681.577348][ T4936] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1681.585326][ T4936] [ 1681.589717][ T4936] block (null): Could not allocate knbd recv work queue. [ 1681.597144][ T4936] nbd: failed to add new device 07:57:53 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x18) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 07:57:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 53) [ 1681.678852][T30977] usb 5-1: string descriptor 0 read error: -71 [ 1681.685262][T30977] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1681.694380][T30977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1681.728735][ T9172] usb 6-1: Using ep0 maxpacket: 8 [ 1681.749001][T30559] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1681.771955][ T4950] FAULT_INJECTION: forcing a failure. [ 1681.771955][ T4950] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.784870][ T4950] CPU: 0 PID: 4950 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1681.793290][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.803352][ T4950] Call Trace: [ 1681.806628][ T4950] [ 1681.809556][ T4950] dump_stack_lvl+0xcd/0x134 [ 1681.814158][ T4950] should_fail.cold+0x5/0xa [ 1681.818673][ T4950] ? blk_mq_init_tags+0x6a/0x170 [ 1681.823619][ T4950] should_failslab+0x5/0x10 [ 1681.828130][ T4950] kmem_cache_alloc_node_trace+0x59/0x310 [ 1681.833945][ T4950] ? call_srcu+0xc0/0xc0 [ 1681.838200][ T4950] blk_mq_init_tags+0x6a/0x170 [ 1681.842977][ T4950] blk_mq_alloc_rq_map+0x81/0x200 [ 1681.848017][ T4950] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1681.853498][ T4950] blk_mq_init_sched+0x29d/0x740 [ 1681.858645][ T4950] elevator_init_mq+0x2a9/0x4e0 [ 1681.863692][ T4950] device_add_disk+0x76/0xef0 [ 1681.868384][ T4950] nbd_dev_add+0x8d9/0xcd0 [ 1681.872794][ T4950] nbd_genl_connect+0x11f3/0x1930 [ 1681.877813][ T4950] ? nbd_start_device+0xd10/0xd10 [ 1681.882831][ T4950] ? __nla_parse+0x3d/0x50 [ 1681.887246][ T4950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1681.893482][ T4950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1681.900839][ T4950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1681.908118][ T4950] genl_family_rcv_msg_doit+0x228/0x320 [ 1681.913675][ T4950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1681.921230][ T4950] ? mutex_lock_io_nested+0x1150/0x1150 [ 1681.926782][ T4950] ? genl_op_from_small+0x23/0x3c0 [ 1681.932090][ T4950] ? genl_get_cmd+0x3cf/0x480 [ 1681.937049][ T4950] genl_rcv_msg+0x328/0x580 [ 1681.941560][ T4950] ? genl_get_cmd+0x480/0x480 [ 1681.946327][ T4950] ? nbd_start_device+0xd10/0xd10 [ 1681.951345][ T4950] ? lock_release+0x720/0x720 [ 1681.956108][ T4950] netlink_rcv_skb+0x153/0x420 [ 1681.960870][ T4950] ? genl_get_cmd+0x480/0x480 [ 1681.965632][ T4950] ? netlink_ack+0xa60/0xa60 [ 1681.970210][ T4950] ? netlink_deliver_tap+0x1b1/0xc30 [ 1681.975482][ T4950] ? _copy_from_iter+0x12b/0x1320 [ 1681.980728][ T4950] genl_rcv+0x24/0x40 [ 1681.984707][ T4950] netlink_unicast+0x533/0x7d0 [ 1681.989461][ T4950] ? netlink_attachskb+0x880/0x880 [ 1681.994658][ T4950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.000884][ T4950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.007109][ T4950] ? __phys_addr_symbol+0x2c/0x70 [ 1682.012334][ T4950] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1682.018235][ T4950] ? __check_object_size+0x16e/0x3f0 [ 1682.023719][ T4950] netlink_sendmsg+0x86d/0xda0 [ 1682.028478][ T4950] ? netlink_unicast+0x7d0/0x7d0 [ 1682.033594][ T4950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1682.039835][ T4950] ? netlink_unicast+0x7d0/0x7d0 [ 1682.044767][ T4950] sock_sendmsg+0xcf/0x120 [ 1682.049170][ T4950] ____sys_sendmsg+0x6e8/0x810 [ 1682.053919][ T4950] ? kernel_sendmsg+0x50/0x50 [ 1682.058584][ T4950] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.063181][ T4950] ? lock_chain_count+0x20/0x20 [ 1682.068123][ T4950] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1682.074353][ T4950] ___sys_sendmsg+0xf3/0x170 [ 1682.078966][ T4950] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.084253][ T4950] ? __fget_files+0x21b/0x3e0 [ 1682.088938][ T4950] ? lock_downgrade+0x6e0/0x6e0 [ 1682.093800][ T4950] ? __fget_files+0x23d/0x3e0 [ 1682.098470][ T4950] ? __fget_light+0xea/0x280 [ 1682.103048][ T4950] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.109283][ T4950] __sys_sendmsg+0xe5/0x1b0 [ 1682.113779][ T4950] ? __sys_sendmsg_sock+0x30/0x30 [ 1682.118811][ T4950] ? syscall_enter_from_user_mode+0x21/0x70 [ 1682.124709][ T4950] do_syscall_64+0x35/0xb0 [ 1682.129129][ T4950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.135030][ T4950] RIP: 0033:0x7f238b7b8ae9 [ 1682.139428][ T4950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.159019][ T4950] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.167415][ T4950] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1682.175373][ T4950] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1682.183432][ T4950] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.191386][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.199345][ T4950] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1682.207320][ T4950] [ 1682.210419][ T4950] "mq-deadline" elevator initialization failed, falling back to "none" [ 1682.219220][T30977] usb 5-1: can't set config #250, error -71 [ 1682.227872][T30977] usb 5-1: USB disconnect, device number 39 07:57:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 54) [ 1682.251907][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 1682.289263][T20209] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1682.289639][ T9172] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1682.305518][ T9172] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1682.314734][ T9172] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1682.324085][ T9172] usb 6-1: config 250 has no interface number 0 [ 1682.330656][ T9172] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1682.342306][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1682.352821][ T9172] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1682.363349][ T9172] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1682.376889][ T9172] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1682.387541][ T4967] FAULT_INJECTION: forcing a failure. [ 1682.387541][ T4967] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.400279][ T4967] CPU: 0 PID: 4967 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1682.408614][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.418683][ T4967] Call Trace: [ 1682.421966][ T4967] [ 1682.424897][ T4967] dump_stack_lvl+0xcd/0x134 [ 1682.429503][ T4967] should_fail.cold+0x5/0xa [ 1682.434103][ T4967] ? sbitmap_init_node+0x1c3/0x6f0 [ 1682.439225][ T4967] should_failslab+0x5/0x10 [ 1682.443735][ T4967] __kmalloc_node+0x75/0x390 [ 1682.448316][ T4967] sbitmap_init_node+0x1c3/0x6f0 [ 1682.453252][ T4967] sbitmap_queue_init_node+0x3e/0x460 [ 1682.458631][ T4967] ? lockdep_init_map_type+0x2c3/0x7b0 [ 1682.464094][ T4967] blk_mq_init_bitmaps+0x57/0x180 [ 1682.469114][ T4967] blk_mq_init_tags+0x10b/0x170 [ 1682.473962][ T4967] blk_mq_alloc_rq_map+0x81/0x200 [ 1682.478981][ T4967] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1682.484442][ T4967] blk_mq_init_sched+0x29d/0x740 [ 1682.489390][ T4967] elevator_init_mq+0x2a9/0x4e0 [ 1682.494343][ T4967] device_add_disk+0x76/0xef0 [ 1682.499014][ T4967] nbd_dev_add+0x8d9/0xcd0 [ 1682.503427][ T4967] nbd_genl_connect+0x11f3/0x1930 [ 1682.508443][ T4967] ? nbd_start_device+0xd10/0xd10 [ 1682.513630][ T4967] ? __nla_parse+0x3d/0x50 [ 1682.518034][ T4967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1682.524261][ T4967] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1682.531624][ T4967] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1682.538915][ T4967] genl_family_rcv_msg_doit+0x228/0x320 [ 1682.544449][ T4967] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1682.551909][ T4967] ? mutex_lock_io_nested+0x1150/0x1150 [ 1682.557470][ T4967] ? genl_op_from_small+0x23/0x3c0 [ 1682.562600][ T4967] ? genl_get_cmd+0x3cf/0x480 [ 1682.567262][ T4967] genl_rcv_msg+0x328/0x580 [ 1682.571752][ T4967] ? genl_get_cmd+0x480/0x480 [ 1682.576415][ T4967] ? nbd_start_device+0xd10/0xd10 [ 1682.581443][ T4967] ? lock_release+0x720/0x720 [ 1682.586177][ T4967] netlink_rcv_skb+0x153/0x420 [ 1682.590934][ T4967] ? genl_get_cmd+0x480/0x480 [ 1682.595610][ T4967] ? netlink_ack+0xa60/0xa60 [ 1682.600187][ T4967] ? netlink_deliver_tap+0x1b1/0xc30 [ 1682.605462][ T4967] ? _copy_from_iter+0x12b/0x1320 [ 1682.610478][ T4967] genl_rcv+0x24/0x40 [ 1682.614447][ T4967] netlink_unicast+0x533/0x7d0 [ 1682.619198][ T4967] ? netlink_attachskb+0x880/0x880 [ 1682.624294][ T4967] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.630539][ T4967] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.636769][ T4967] ? __phys_addr_symbol+0x2c/0x70 [ 1682.641873][ T4967] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1682.647668][ T4967] ? __check_object_size+0x16e/0x3f0 [ 1682.652954][ T4967] netlink_sendmsg+0x86d/0xda0 [ 1682.657708][ T4967] ? netlink_unicast+0x7d0/0x7d0 [ 1682.662634][ T4967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1682.668867][ T4967] ? netlink_unicast+0x7d0/0x7d0 [ 1682.673877][ T4967] sock_sendmsg+0xcf/0x120 [ 1682.678289][ T4967] ____sys_sendmsg+0x6e8/0x810 [ 1682.683043][ T4967] ? kernel_sendmsg+0x50/0x50 [ 1682.687706][ T4967] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.692284][ T4967] ? lock_chain_count+0x20/0x20 [ 1682.697121][ T4967] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1682.703097][ T4967] ___sys_sendmsg+0xf3/0x170 [ 1682.707692][ T4967] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.712968][ T4967] ? __fget_files+0x21b/0x3e0 [ 1682.717635][ T4967] ? lock_downgrade+0x6e0/0x6e0 [ 1682.722494][ T4967] ? __fget_files+0x23d/0x3e0 [ 1682.727167][ T4967] ? __fget_light+0xea/0x280 [ 1682.731757][ T4967] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.737985][ T4967] __sys_sendmsg+0xe5/0x1b0 [ 1682.742475][ T4967] ? __sys_sendmsg_sock+0x30/0x30 [ 1682.747514][ T4967] ? syscall_enter_from_user_mode+0x21/0x70 [ 1682.753407][ T4967] do_syscall_64+0x35/0xb0 [ 1682.757818][ T4967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.763717][ T4967] RIP: 0033:0x7f238b7b8ae9 [ 1682.768119][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.787758][ T4967] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.796174][ T4967] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1682.804137][ T4967] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1682.812091][ T4967] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.820045][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.828012][ T4967] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1682.835984][ T4967] 07:57:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 55) [ 1682.839995][ T4967] "mq-deadline" elevator initialization failed, falling back to "none" [ 1682.909194][ T9168] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1682.917677][ T9168] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1682.926604][ T9168] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.936894][ T9168] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1682.946290][T30559] usb 1-1: Using ep0 maxpacket: 8 [ 1682.955261][ T9172] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1682.958334][ T4977] FAULT_INJECTION: forcing a failure. [ 1682.958334][ T4977] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.964551][ T9172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1682.964579][ T9172] usb 6-1: SerialNumber: syz [ 1682.989903][ T4977] CPU: 0 PID: 4977 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1682.998239][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.008296][ T4977] Call Trace: [ 1683.011574][ T4977] [ 1683.014504][ T4977] dump_stack_lvl+0xcd/0x134 [ 1683.019106][ T4977] should_fail.cold+0x5/0xa [ 1683.023694][ T4977] ? sbitmap_queue_init_node+0x1d8/0x460 [ 1683.029319][ T4977] should_failslab+0x5/0x10 [ 1683.033900][ T4977] kmem_cache_alloc_node_trace+0x59/0x310 [ 1683.039615][ T4977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.045853][ T4977] sbitmap_queue_init_node+0x1d8/0x460 [ 1683.051483][ T4977] blk_mq_init_bitmaps+0x57/0x180 [ 1683.056502][ T4977] blk_mq_init_tags+0x10b/0x170 [ 1683.061346][ T4977] blk_mq_alloc_rq_map+0x81/0x200 [ 1683.066360][ T4977] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1683.071815][ T4977] blk_mq_init_sched+0x29d/0x740 [ 1683.076759][ T4977] elevator_init_mq+0x2a9/0x4e0 [ 1683.081605][ T4977] device_add_disk+0x76/0xef0 [ 1683.086288][ T4977] nbd_dev_add+0x8d9/0xcd0 [ 1683.090707][ T4977] nbd_genl_connect+0x11f3/0x1930 [ 1683.095732][ T4977] ? nbd_start_device+0xd10/0xd10 [ 1683.100748][ T4977] ? __nla_parse+0x3d/0x50 [ 1683.105155][ T4977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.111388][ T4977] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1683.118747][ T4977] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1683.126024][ T4977] genl_family_rcv_msg_doit+0x228/0x320 [ 1683.131558][ T4977] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1683.138921][ T4977] ? mutex_lock_io_nested+0x1150/0x1150 [ 1683.144461][ T4977] ? genl_op_from_small+0x23/0x3c0 [ 1683.149559][ T4977] ? genl_get_cmd+0x3cf/0x480 [ 1683.154227][ T4977] genl_rcv_msg+0x328/0x580 [ 1683.158719][ T4977] ? genl_get_cmd+0x480/0x480 [ 1683.163384][ T4977] ? nbd_start_device+0xd10/0xd10 [ 1683.168404][ T4977] ? lock_release+0x720/0x720 [ 1683.173075][ T4977] netlink_rcv_skb+0x153/0x420 [ 1683.177831][ T4977] ? genl_get_cmd+0x480/0x480 [ 1683.182494][ T4977] ? netlink_ack+0xa60/0xa60 [ 1683.187074][ T4977] ? netlink_deliver_tap+0x1b1/0xc30 [ 1683.192347][ T4977] ? _copy_from_iter+0x12b/0x1320 [ 1683.197369][ T4977] genl_rcv+0x24/0x40 [ 1683.201336][ T4977] netlink_unicast+0x533/0x7d0 [ 1683.206090][ T4977] ? netlink_attachskb+0x880/0x880 [ 1683.211183][ T4977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1683.217416][ T4977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1683.223647][ T4977] ? __phys_addr_symbol+0x2c/0x70 [ 1683.228663][ T4977] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1683.234371][ T4977] ? __check_object_size+0x16e/0x3f0 [ 1683.239647][ T4977] netlink_sendmsg+0x86d/0xda0 [ 1683.244403][ T4977] ? netlink_unicast+0x7d0/0x7d0 [ 1683.249329][ T4977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.255561][ T4977] ? netlink_unicast+0x7d0/0x7d0 [ 1683.260484][ T4977] sock_sendmsg+0xcf/0x120 [ 1683.264888][ T4977] ____sys_sendmsg+0x6e8/0x810 [ 1683.269642][ T4977] ? kernel_sendmsg+0x50/0x50 [ 1683.274304][ T4977] ? do_recvmmsg+0x6d0/0x6d0 [ 1683.278885][ T4977] ? lock_chain_count+0x20/0x20 [ 1683.283725][ T4977] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1683.289700][ T4977] ___sys_sendmsg+0xf3/0x170 [ 1683.294281][ T4977] ? sendmsg_copy_msghdr+0x160/0x160 [ 1683.299646][ T4977] ? __fget_files+0x21b/0x3e0 [ 1683.304311][ T4977] ? lock_downgrade+0x6e0/0x6e0 [ 1683.309158][ T4977] ? __fget_files+0x23d/0x3e0 [ 1683.313831][ T4977] ? __fget_light+0xea/0x280 [ 1683.318408][ T4977] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1683.324643][ T4977] __sys_sendmsg+0xe5/0x1b0 [ 1683.329134][ T4977] ? __sys_sendmsg_sock+0x30/0x30 [ 1683.334157][ T4977] ? syscall_enter_from_user_mode+0x21/0x70 [ 1683.340046][ T4977] do_syscall_64+0x35/0xb0 [ 1683.344452][ T4977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.350337][ T4977] RIP: 0033:0x7f238b7b8ae9 [ 1683.354738][ T4977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.374340][ T4977] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1683.382748][ T4977] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1683.390795][ T4977] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1683.398757][ T4977] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.406713][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1683.414846][ T4977] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1683.422821][ T4977] [ 1683.425969][ T4977] "mq-deadline" elevator initialization failed, falling back to "none" [ 1683.439993][ T4940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1683.446920][ T4940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1683.453867][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1683.469406][ T9168] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1683.478753][ T9168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1683.486911][ T9168] usb 3-1: SerialNumber: syz [ 1683.492827][ T9172] hub 6-1:250.228: bad descriptor, ignoring hub [ 1683.499152][ T9172] hub: probe of 6-1:250.228 failed with error -5 [ 1683.529011][T30977] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1683.549093][T30559] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1683.557738][T30559] usb 1-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1683.566806][T30559] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 255 07:57:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 56) [ 1683.576072][T30559] usb 1-1: config 250 has no interface number 0 [ 1683.582385][T30559] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1683.584744][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1683.593919][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1683.593955][T30559] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 1190, setting to 1024 [ 1683.602569][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1683.612980][T30559] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1683.613008][T30559] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1683.613037][T30559] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1683.646314][ T4990] FAULT_INJECTION: forcing a failure. [ 1683.646314][ T4990] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.657989][T20209] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1683.658024][T20209] usb 2-1: config 250 has no interface number 0 [ 1683.658073][T20209] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1683.658102][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1683.658127][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1683.665080][ T4990] CPU: 1 PID: 4990 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1683.665106][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.677723][T20209] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1683.686834][ T4990] Call Trace: [ 1683.686845][ T4990] [ 1683.686854][ T4990] dump_stack_lvl+0xcd/0x134 [ 1683.686884][ T4990] should_fail.cold+0x5/0xa [ 1683.693149][T20209] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1683.704537][ T4990] ? blk_mq_alloc_rq_map+0xc3/0x200 [ 1683.704563][ T4990] should_failslab+0x5/0x10 [ 1683.788936][ T4990] __kmalloc_node+0x75/0x390 [ 1683.793539][ T4990] blk_mq_alloc_rq_map+0xc3/0x200 [ 1683.798558][ T4990] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1683.804009][ T4990] blk_mq_init_sched+0x29d/0x740 [ 1683.808945][ T4990] elevator_init_mq+0x2a9/0x4e0 [ 1683.813791][ T4990] device_add_disk+0x76/0xef0 [ 1683.818462][ T4990] nbd_dev_add+0x8d9/0xcd0 [ 1683.822877][ T4990] nbd_genl_connect+0x11f3/0x1930 [ 1683.827900][ T4990] ? nbd_start_device+0xd10/0xd10 [ 1683.832922][ T4990] ? __nla_parse+0x3d/0x50 [ 1683.837341][ T4990] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.843576][ T4990] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1683.850940][ T4990] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1683.858219][ T4990] genl_family_rcv_msg_doit+0x228/0x320 [ 1683.863755][ T4990] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1683.871115][ T4990] ? mutex_lock_io_nested+0x1150/0x1150 [ 1683.876660][ T4990] ? genl_op_from_small+0x23/0x3c0 [ 1683.881761][ T4990] ? genl_get_cmd+0x3cf/0x480 [ 1683.886427][ T4990] genl_rcv_msg+0x328/0x580 [ 1683.890921][ T4990] ? genl_get_cmd+0x480/0x480 [ 1683.895591][ T4990] ? nbd_start_device+0xd10/0xd10 [ 1683.900613][ T4990] ? lock_release+0x720/0x720 [ 1683.905287][ T4990] netlink_rcv_skb+0x153/0x420 [ 1683.910044][ T4990] ? genl_get_cmd+0x480/0x480 [ 1683.914710][ T4990] ? netlink_ack+0xa60/0xa60 [ 1683.919289][ T4990] ? netlink_deliver_tap+0x1b1/0xc30 [ 1683.924570][ T4990] ? _copy_from_iter+0x12b/0x1320 [ 1683.929587][ T4990] genl_rcv+0x24/0x40 [ 1683.933557][ T4990] netlink_unicast+0x533/0x7d0 [ 1683.938311][ T4990] ? netlink_attachskb+0x880/0x880 [ 1683.943413][ T4990] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1683.949735][ T4990] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1683.955967][ T4990] ? __phys_addr_symbol+0x2c/0x70 [ 1683.960980][ T4990] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1683.966777][ T4990] ? __check_object_size+0x16e/0x3f0 [ 1683.972144][ T4990] netlink_sendmsg+0x86d/0xda0 [ 1683.976903][ T4990] ? netlink_unicast+0x7d0/0x7d0 [ 1683.982259][ T4990] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.988503][ T4990] ? netlink_unicast+0x7d0/0x7d0 [ 1683.993431][ T4990] sock_sendmsg+0xcf/0x120 [ 1683.997838][ T4990] ____sys_sendmsg+0x6e8/0x810 [ 1684.002593][ T4990] ? kernel_sendmsg+0x50/0x50 [ 1684.007257][ T4990] ? do_recvmmsg+0x6d0/0x6d0 [ 1684.012011][ T4990] ? lock_chain_count+0x20/0x20 [ 1684.016855][ T4990] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1684.022830][ T4990] ___sys_sendmsg+0xf3/0x170 [ 1684.027411][ T4990] ? sendmsg_copy_msghdr+0x160/0x160 [ 1684.032692][ T4990] ? __fget_files+0x21b/0x3e0 [ 1684.037622][ T4990] ? lock_downgrade+0x6e0/0x6e0 [ 1684.042469][ T4990] ? __fget_files+0x23d/0x3e0 [ 1684.047141][ T4990] ? __fget_light+0xea/0x280 [ 1684.051724][ T4990] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.057961][ T4990] __sys_sendmsg+0xe5/0x1b0 [ 1684.062465][ T4990] ? __sys_sendmsg_sock+0x30/0x30 [ 1684.067504][ T4990] ? syscall_enter_from_user_mode+0x21/0x70 [ 1684.073398][ T4990] do_syscall_64+0x35/0xb0 [ 1684.077808][ T4990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.083693][ T4990] RIP: 0033:0x7f238b7b8ae9 [ 1684.088095][ T4990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.107688][ T4990] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.116090][ T4990] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1684.124051][ T4990] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1684.132182][ T4990] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.140140][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.148099][ T4990] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1684.156069][ T4990] [ 1684.159842][ T4990] "mq-deadline" elevator initialization failed, falling back to "none" 07:57:55 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1684.190518][ T9172] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 52 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1684.213366][T30977] usb 5-1: Using ep0 maxpacket: 8 07:57:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 57) [ 1684.258901][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1684.268170][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1684.295666][ T9172] usb 6-1: USB disconnect, device number 52 [ 1684.299130][T20209] usb 2-1: can't set config #250, error -71 [ 1684.303029][T30559] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1684.316751][T30559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1684.317693][T20209] usb 2-1: USB disconnect, device number 78 [ 1684.324797][T30559] usb 1-1: SerialNumber: syz [ 1684.344973][ T9172] usblp0: removed [ 1684.348936][T30977] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1684.357368][T30977] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1684.362814][ T5013] FAULT_INJECTION: forcing a failure. [ 1684.362814][ T5013] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.366296][T30977] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1684.379041][ T5013] CPU: 1 PID: 5013 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1684.388126][T30977] usb 5-1: config 250 has no interface number 0 [ 1684.396419][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1684.396433][ T5013] Call Trace: [ 1684.396441][ T5013] [ 1684.396449][ T5013] dump_stack_lvl+0xcd/0x134 [ 1684.396479][ T5013] should_fail.cold+0x5/0xa [ 1684.402768][T30977] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1684.412737][ T5013] ? blk_mq_alloc_rq_map+0xc3/0x200 [ 1684.412763][ T5013] should_failslab+0x5/0x10 [ 1684.416037][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1684.418946][ T5013] __kmalloc_node+0x75/0x390 [ 1684.418976][ T5013] blk_mq_alloc_rq_map+0xc3/0x200 [ 1684.423543][T30977] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1684.428015][ T5013] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1684.439485][T30977] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1684.444601][ T5013] blk_mq_init_sched+0x29d/0x740 [ 1684.449102][T30977] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1684.459455][ T5013] elevator_init_mq+0x2a9/0x4e0 [ 1684.459486][ T5013] device_add_disk+0x76/0xef0 [ 1684.519595][ T5013] nbd_dev_add+0x8d9/0xcd0 [ 1684.520925][ T4937] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1684.524029][ T5013] nbd_genl_connect+0x11f3/0x1930 [ 1684.535779][ T5013] ? nbd_start_device+0xd10/0xd10 [ 1684.540813][ T5013] ? __nla_parse+0x3d/0x50 [ 1684.545242][ T5013] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1684.551497][ T5013] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1684.558878][ T5013] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1684.566176][ T5013] genl_family_rcv_msg_doit+0x228/0x320 [ 1684.571735][ T5013] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1684.573769][ T4937] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1684.579118][ T5013] ? mutex_lock_io_nested+0x1150/0x1150 [ 1684.591403][ T5013] ? genl_op_from_small+0x23/0x3c0 [ 1684.596537][ T5013] ? genl_get_cmd+0x3cf/0x480 [ 1684.601246][ T5013] genl_rcv_msg+0x328/0x580 [ 1684.605775][ T5013] ? genl_get_cmd+0x480/0x480 [ 1684.610469][ T5013] ? nbd_start_device+0xd10/0xd10 [ 1684.615517][ T5013] ? lock_release+0x720/0x720 [ 1684.620215][ T5013] netlink_rcv_skb+0x153/0x420 [ 1684.624992][ T5013] ? genl_get_cmd+0x480/0x480 [ 1684.629680][ T5013] ? netlink_ack+0xa60/0xa60 [ 1684.634281][ T5013] ? netlink_deliver_tap+0x1b1/0xc30 [ 1684.639583][ T5013] ? _copy_from_iter+0x12b/0x1320 [ 1684.644694][ T5013] genl_rcv+0x24/0x40 [ 1684.648664][ T5013] netlink_unicast+0x533/0x7d0 [ 1684.653425][ T5013] ? netlink_attachskb+0x880/0x880 [ 1684.658527][ T5013] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.664938][ T5013] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.671174][ T5013] ? __phys_addr_symbol+0x2c/0x70 [ 1684.676193][ T5013] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1684.681904][ T5013] ? __check_object_size+0x16e/0x3f0 [ 1684.687185][ T5013] netlink_sendmsg+0x86d/0xda0 [ 1684.691946][ T5013] ? netlink_unicast+0x7d0/0x7d0 [ 1684.696878][ T5013] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1684.703115][ T5013] ? netlink_unicast+0x7d0/0x7d0 [ 1684.708047][ T5013] sock_sendmsg+0xcf/0x120 [ 1684.712460][ T5013] ____sys_sendmsg+0x6e8/0x810 [ 1684.717217][ T5013] ? kernel_sendmsg+0x50/0x50 [ 1684.721879][ T5013] ? do_recvmmsg+0x6d0/0x6d0 [ 1684.726462][ T5013] ? lock_chain_count+0x20/0x20 [ 1684.731304][ T5013] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1684.737287][ T5013] ___sys_sendmsg+0xf3/0x170 [ 1684.742152][ T5013] ? sendmsg_copy_msghdr+0x160/0x160 [ 1684.747435][ T5013] ? __fget_files+0x21b/0x3e0 [ 1684.752103][ T5013] ? lock_downgrade+0x6e0/0x6e0 [ 1684.756957][ T5013] ? __fget_files+0x23d/0x3e0 [ 1684.761630][ T5013] ? __fget_light+0xea/0x280 [ 1684.766210][ T5013] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1684.772532][ T5013] __sys_sendmsg+0xe5/0x1b0 [ 1684.777032][ T5013] ? __sys_sendmsg_sock+0x30/0x30 [ 1684.782231][ T5013] ? syscall_enter_from_user_mode+0x21/0x70 [ 1684.788123][ T5013] do_syscall_64+0x35/0xb0 [ 1684.792532][ T5013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1684.798422][ T5013] RIP: 0033:0x7f238b7b8ae9 [ 1684.802825][ T5013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.822689][ T5013] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.831102][ T5013] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1684.839064][ T5013] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1684.847021][ T5013] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.854977][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.862935][ T5013] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1684.870906][ T5013] [ 1684.874721][ T5013] "mq-deadline" elevator initialization failed, falling back to "none" [ 1684.881651][ T4992] UDC core: couldn't find an available UDC or it's busy: -16 [ 1684.890644][ T4992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1684.891726][T30559] hub 1-1:250.228: bad descriptor, ignoring hub [ 1684.904520][T30559] hub: probe of 1-1:250.228 failed with error -5 [ 1684.938009][ T5016] UDC core: couldn't find an available UDC or it's busy: -16 [ 1684.945764][ T5016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1684.969146][T30977] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1684.978372][T30977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1685.039105][T30977] usb 5-1: can't set config #250, error -71 [ 1685.046091][T30977] usb 5-1: USB disconnect, device number 40 [ 1685.110707][T30559] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1685.149678][T30559] usb 1-1: USB disconnect, device number 36 [ 1685.159042][T20209] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1685.199010][ T5016] UDC core: couldn't find an available UDC or it's busy: -16 [ 1685.206420][ T5016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1685.219463][T30559] usblp0: removed [ 1685.378752][T27219] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1685.398979][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1685.518861][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1685.527721][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1685.536782][T20209] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1685.546043][T20209] usb 2-1: config 250 has no interface number 0 [ 1685.552370][T20209] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1685.563885][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1685.574450][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1685.584943][T20209] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1685.598505][T20209] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1685.648784][T27219] usb 6-1: Using ep0 maxpacket: 8 07:57:57 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0xf8, 0x1, 0x7, 0x1, 0x3, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x0, 0x1f, 0x20, 0x5}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x7b408894b0e2c9e4, 0xa, 0x0, 0xaeaa}]}, 0x4, [{0x24, &(0x7f0000000100)=@string={0x24, 0x3, "bc43c732cac87092d9884c41276e0522620e38ff580051415a977cbd3061e1d43376"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x401}}, {0x9e, &(0x7f00000002c0)=@string={0x9e, 0x3, "9463e37bc6ba9b631930f9933cd2f7da5cc661c754bb2d173d713efb4b287fc20478c0af2bba61713d566d0b9e9c51fcd6873478399d7a7e538976958a664acc79234818631ab9c3e648fc993a07816a96eaff24c9a88b45ecd310bc2141c1645d761edc3f1bbb95b9bc792d4f814ebadd5cf9e6d69b776cc0cdbd13d6d697e34dcfbcff923cbf5022d8cc5839013cffa9a256bd1cfd9cdb807b4235"}}, {0x2a, &(0x7f0000000180)=@string={0x2a, 0x3, "2e3be78aa33dd960df883d532e7a21d3e243d12cca4f1394b508b0c40acbd0aa92529fdd027a11c8"}}]}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x9}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:57:57 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1685.689959][T20208] usb 3-1: USB disconnect, device number 97 [ 1685.706186][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1685.715616][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1685.723673][T20209] usb 2-1: SerialNumber: syz [ 1685.750351][ T5011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1685.757849][ T5011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1685.789706][T20209] hub 2-1:250.228: bad descriptor, ignoring hub [ 1685.792629][ T4937] UDC core: couldn't find an available UDC or it's busy: -16 [ 1685.796346][T20209] hub: probe of 2-1:250.228 failed with error -5 [ 1685.803797][ T4937] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1685.819349][T27219] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1685.827743][T27219] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1685.837129][T27219] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1685.846510][T27219] usb 6-1: config 250 has no interface number 0 [ 1685.852841][T27219] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1685.859005][T30559] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1685.864356][T27219] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1685.882344][T27219] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1685.892830][T27219] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1685.906362][T27219] usb 6-1: config 250 interface 228 has no altsetting 0 07:57:57 executing program 5: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0014f9f5070009090002000000000000000000", 0x1a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x18, &(0x7f0000000040)={0x0, 0x0, 0xf, {0xf, 0x0, "afe1b580dc8b0421b49222ffb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000002c0)={0x0, 0x36, 0x98, {0x98, 0xe, "cccb8e0879542b0652cb71f7c8350f8b61378f8b013af8cb3f5ff30169292cb0166d1010f4f3432b971c9f204cc31a702dfa2fef8b1705eb9ac7eb97678b8ee13d825d42b407875e74cc40e2fb9d5fc1eb169a4671fce1edf35cc8b69a8c60e9fc91754e1afe77014b7e588cc6ac9e0920a382870dcbdd673e3cce4d1659a2cecb6cb89c51d89f6ae83cdf08b2324b4f8adea9166d81"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000080)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xb, "074e5cf7"}, @local=@item_012={0x0, 0x2, 0x2}, @local, @global=@item_4={0x3, 0x1, 0x7, "c2936be6"}, @local=@item_012={0x1, 0x2, 0x9, "ad"}, @global=@item_012={0x1, 0x1, 0xa, "a4"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd7, 0x1, {0x22, 0x7fc}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x0, 0x15, 0x74, "117a70fc1a9efba31ea1d897eb25ec58c5dddadfb3f1ad81309c6ced570304f4a88f96cc323b3df7817c4d52c6d7a54cf0d1ab811d57fafd1e3e354268844a9f9d15a03d99183db74a19704f7beeb1c92224a562459cc577cf7643b75d1a91cfe868d70f36c8503f9e8d3547f219c228e38d16a7"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x1, 0x3e, "5792894fff45dcddc5b5372e98cb726dfeae786bb68ecabb20eccd32943a880aab366b2dd009b813f023f1b57d0f9defa9acd30b1c242ddb56ec7c151951"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 07:57:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 58) 07:57:57 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1686.029025][T27219] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1686.038422][T27219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1686.049144][T20209] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 79 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1686.074267][ T9172] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1686.082950][ T5086] FAULT_INJECTION: forcing a failure. [ 1686.082950][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.089241][T27219] usb 6-1: can't set config #250, error -71 [ 1686.095796][ T5086] CPU: 1 PID: 5086 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1686.103189][T20209] usb 2-1: USB disconnect, device number 79 [ 1686.109855][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.109873][ T5086] Call Trace: [ 1686.109880][ T5086] [ 1686.109888][ T5086] dump_stack_lvl+0xcd/0x134 [ 1686.109919][ T5086] should_fail.cold+0x5/0xa [ 1686.109942][ T5086] ? blk_mq_alloc_rq_map+0x104/0x200 [ 1686.109963][ T5086] should_failslab+0x5/0x10 [ 1686.109984][ T5086] __kmalloc_node+0x75/0x390 [ 1686.110010][ T5086] blk_mq_alloc_rq_map+0x104/0x200 [ 1686.110034][ T5086] blk_mq_alloc_map_and_rqs+0x4b/0x180 [ 1686.110057][ T5086] blk_mq_init_sched+0x29d/0x740 [ 1686.110090][ T5086] elevator_init_mq+0x2a9/0x4e0 [ 1686.110120][ T5086] device_add_disk+0x76/0xef0 [ 1686.110152][ T5086] nbd_dev_add+0x8d9/0xcd0 [ 1686.110181][ T5086] nbd_genl_connect+0x11f3/0x1930 [ 1686.110214][ T5086] ? nbd_start_device+0xd10/0xd10 [ 1686.131189][T27219] usb 6-1: USB disconnect, device number 53 [ 1686.132450][ T5086] ? __nla_parse+0x3d/0x50 [ 1686.132485][ T5086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1686.132514][ T5086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1686.140793][T20209] usblp0: removed [ 1686.141678][ T5086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1686.230091][ T5086] genl_family_rcv_msg_doit+0x228/0x320 [ 1686.235672][ T5086] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1686.243065][ T5086] ? mutex_lock_io_nested+0x1150/0x1150 [ 1686.248632][ T5086] ? genl_op_from_small+0x23/0x3c0 [ 1686.253750][ T5086] ? genl_get_cmd+0x3cf/0x480 [ 1686.258525][ T5086] genl_rcv_msg+0x328/0x580 [ 1686.263038][ T5086] ? genl_get_cmd+0x480/0x480 [ 1686.265071][T20208] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1686.267716][ T5086] ? nbd_start_device+0xd10/0xd10 [ 1686.280256][ T5086] ? lock_release+0x720/0x720 [ 1686.285040][ T5086] netlink_rcv_skb+0x153/0x420 [ 1686.289821][ T5086] ? genl_get_cmd+0x480/0x480 [ 1686.294507][ T5086] ? netlink_ack+0xa60/0xa60 [ 1686.299112][ T5086] ? netlink_deliver_tap+0x1b1/0xc30 [ 1686.304411][ T5086] ? _copy_from_iter+0x12b/0x1320 [ 1686.309448][ T5086] genl_rcv+0x24/0x40 [ 1686.313437][ T5086] netlink_unicast+0x533/0x7d0 [ 1686.318213][ T5086] ? netlink_attachskb+0x880/0x880 [ 1686.323327][ T5086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.329588][ T5086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.335820][ T5086] ? __phys_addr_symbol+0x2c/0x70 [ 1686.340920][ T5086] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1686.346628][ T5086] ? __check_object_size+0x16e/0x3f0 [ 1686.351904][ T5086] netlink_sendmsg+0x86d/0xda0 [ 1686.356676][ T5086] ? netlink_unicast+0x7d0/0x7d0 [ 1686.361631][ T5086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1686.367889][ T5086] ? netlink_unicast+0x7d0/0x7d0 [ 1686.372839][ T5086] sock_sendmsg+0xcf/0x120 [ 1686.377272][ T5086] ____sys_sendmsg+0x6e8/0x810 [ 1686.382047][ T5086] ? kernel_sendmsg+0x50/0x50 [ 1686.386727][ T5086] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.391311][ T5086] ? lock_chain_count+0x20/0x20 [ 1686.396159][ T5086] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1686.402137][ T5086] ___sys_sendmsg+0xf3/0x170 [ 1686.406739][ T5086] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.412017][ T5086] ? __fget_files+0x21b/0x3e0 [ 1686.416701][ T5086] ? lock_downgrade+0x6e0/0x6e0 [ 1686.421576][ T5086] ? __fget_files+0x23d/0x3e0 [ 1686.426272][ T5086] ? __fget_light+0xea/0x280 [ 1686.430884][ T5086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.437139][ T5086] __sys_sendmsg+0xe5/0x1b0 [ 1686.441636][ T5086] ? __sys_sendmsg_sock+0x30/0x30 [ 1686.446663][ T5086] ? syscall_enter_from_user_mode+0x21/0x70 [ 1686.452565][ T5086] do_syscall_64+0x35/0xb0 [ 1686.456971][ T5086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1686.462855][ T5086] RIP: 0033:0x7f238b7b8ae9 [ 1686.467274][ T5086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.486883][ T5086] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.495282][ T5086] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1686.503239][ T5086] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1686.508709][T20208] usb 3-1: Using ep0 maxpacket: 8 [ 1686.511192][ T5086] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 07:57:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 59) [ 1686.511211][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1686.511225][ T5086] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1686.511257][ T5086] [ 1686.512073][ T5086] "mq-deadline" elevator initialization failed, falling back to "none" [ 1686.543865][T27219] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1686.639313][T20208] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1686.647793][T20208] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1686.657047][T20208] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.667461][T20208] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1686.688993][ T5118] FAULT_INJECTION: forcing a failure. [ 1686.688993][ T5118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1686.702559][ T5118] CPU: 1 PID: 5118 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1686.710899][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.720958][ T5118] Call Trace: [ 1686.724239][ T5118] [ 1686.727167][ T5118] dump_stack_lvl+0xcd/0x134 [ 1686.731761][ T5118] should_fail.cold+0x5/0xa [ 1686.736365][ T5118] prepare_alloc_pages+0x17b/0x570 [ 1686.738730][T20209] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1686.741498][ T5118] ? sock_sendmsg+0xcf/0x120 [ 1686.741535][ T5118] ? ____sys_sendmsg+0x6e8/0x810 [ 1686.741555][ T5118] ? ___sys_sendmsg+0xf3/0x170 [ 1686.741582][ T5118] __alloc_pages+0x12f/0x500 [ 1686.741606][ T5118] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1686.741642][ T5118] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.749524][T20208] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1686.753770][ T5118] ? __cpu_to_node+0x82/0xb0 [ 1686.753804][ T5118] ? blk_mq_hw_queue_to_node+0xe8/0x140 [ 1686.753833][ T5118] blk_mq_alloc_rqs+0x258/0x7a0 [ 1686.753861][ T5118] ? blk_mq_alloc_rq_map+0x8e/0x200 [ 1686.753887][ T5118] blk_mq_alloc_map_and_rqs+0x69/0x180 [ 1686.753914][ T5118] blk_mq_init_sched+0x29d/0x740 [ 1686.753947][ T5118] elevator_init_mq+0x2a9/0x4e0 [ 1686.753978][ T5118] device_add_disk+0x76/0xef0 [ 1686.754011][ T5118] nbd_dev_add+0x8d9/0xcd0 [ 1686.754041][ T5118] nbd_genl_connect+0x11f3/0x1930 [ 1686.754074][ T5118] ? nbd_start_device+0xd10/0xd10 [ 1686.754100][ T5118] ? __nla_parse+0x3d/0x50 [ 1686.754122][ T5118] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1686.754149][ T5118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1686.754176][ T5118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1686.754208][ T5118] genl_family_rcv_msg_doit+0x228/0x320 [ 1686.759243][T20208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1686.763869][ T5118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1686.768435][T20208] usb 3-1: SerialNumber: syz [ 1686.775163][ T5118] ? mutex_lock_io_nested+0x1150/0x1150 [ 1686.775197][ T5118] ? genl_op_from_small+0x23/0x3c0 [ 1686.775220][ T5118] ? genl_get_cmd+0x3cf/0x480 [ 1686.828725][T27219] usb 6-1: Using ep0 maxpacket: 8 [ 1686.830617][ T5118] genl_rcv_msg+0x328/0x580 [ 1686.830655][ T5118] ? genl_get_cmd+0x480/0x480 [ 1686.830678][ T5118] ? nbd_start_device+0xd10/0xd10 [ 1686.830711][ T5118] ? lock_release+0x720/0x720 [ 1686.935190][ T5118] netlink_rcv_skb+0x153/0x420 [ 1686.939976][ T5118] ? genl_get_cmd+0x480/0x480 [ 1686.944657][ T5118] ? netlink_ack+0xa60/0xa60 [ 1686.949255][ T5118] ? netlink_deliver_tap+0x1b1/0xc30 [ 1686.954749][ T5118] ? _copy_from_iter+0x12b/0x1320 [ 1686.959762][ T5118] genl_rcv+0x24/0x40 [ 1686.963910][ T5118] netlink_unicast+0x533/0x7d0 [ 1686.968684][ T5118] ? netlink_attachskb+0x880/0x880 [ 1686.973880][ T5118] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.980130][ T5118] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1686.986361][ T5118] ? __phys_addr_symbol+0x2c/0x70 [ 1686.991672][ T5118] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1686.997482][ T5118] ? __check_object_size+0x16e/0x3f0 [ 1686.998740][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1687.002773][ T5118] netlink_sendmsg+0x86d/0xda0 [ 1687.002807][ T5118] ? netlink_unicast+0x7d0/0x7d0 [ 1687.002841][ T5118] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1687.002871][ T5118] ? netlink_unicast+0x7d0/0x7d0 [ 1687.009463][T27219] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1687.012608][ T5118] sock_sendmsg+0xcf/0x120 [ 1687.017526][T27219] usb 6-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1687.023735][ T5118] ____sys_sendmsg+0x6e8/0x810 [ 1687.023763][ T5118] ? kernel_sendmsg+0x50/0x50 [ 1687.023785][ T5118] ? do_recvmmsg+0x6d0/0x6d0 [ 1687.023811][ T5118] ? lock_chain_count+0x20/0x20 [ 1687.023842][ T5118] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1687.023875][ T5118] ___sys_sendmsg+0xf3/0x170 [ 1687.028815][T27219] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1687.037082][ T5118] ? sendmsg_copy_msghdr+0x160/0x160 [ 1687.041527][T27219] usb 6-1: config 250 has no interface number 0 [ 1687.050292][ T5118] ? __fget_files+0x21b/0x3e0 [ 1687.050322][ T5118] ? lock_downgrade+0x6e0/0x6e0 [ 1687.050355][ T5118] ? __fget_files+0x23d/0x3e0 [ 1687.055266][T27219] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1687.059903][ T5118] ? __fget_light+0xea/0x280 [ 1687.059932][ T5118] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1687.059963][ T5118] __sys_sendmsg+0xe5/0x1b0 [ 1687.059988][ T5118] ? __sys_sendmsg_sock+0x30/0x30 [ 1687.064800][T27219] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1687.069401][ T5118] ? syscall_enter_from_user_mode+0x21/0x70 [ 1687.069436][ T5118] do_syscall_64+0x35/0xb0 [ 1687.069457][ T5118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1687.069485][ T5118] RIP: 0033:0x7f238b7b8ae9 [ 1687.069503][ T5118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.075460][T27219] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1687.080019][ T5118] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.080043][ T5118] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1687.080059][ T5118] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1687.089279][T27219] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1687.094488][ T5118] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.100740][T27219] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1687.105351][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1687.115285][ T5071] UDC core: couldn't find an available UDC or it's busy: -16 [ 1687.126258][ T5118] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1687.126290][ T5118] [ 1687.198713][ T9172] usb 5-1: Using ep0 maxpacket: 8 [ 1687.208206][ T5071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1687.230739][T20208] usb 3-1: USB disconnect, device number 98 [ 1687.239540][T30559] usb 1-1: device descriptor read/64, error -71 [ 1687.288833][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1687.321033][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1687.329944][T20209] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 07:57:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 60) [ 1687.339200][T20209] usb 2-1: config 250 has no interface number 0 [ 1687.345552][T20209] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1687.357070][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1687.367559][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1687.378047][T20209] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1687.391584][T20209] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1687.400292][ T9172] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 1687.408696][ T9172] usb 5-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1687.417552][ T9172] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1687.426827][ T9172] usb 5-1: config 250 has no interface number 0 [ 1687.433148][ T9172] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1687.444762][ T9172] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1687.455257][ T9172] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1687.465505][ T5137] FAULT_INJECTION: forcing a failure. [ 1687.465505][ T5137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1687.465865][ T9172] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 07:57:59 executing program 1: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1687.479288][ T5137] CPU: 0 PID: 5137 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1687.492496][ T9172] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1687.500765][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.500780][ T5137] Call Trace: [ 1687.500788][ T5137] [ 1687.500796][ T5137] dump_stack_lvl+0xcd/0x134 [ 1687.528489][ T5137] should_fail.cold+0x5/0xa [ 1687.533006][ T5137] prepare_alloc_pages+0x17b/0x570 [ 1687.538140][ T5137] __alloc_pages+0x12f/0x500 [ 1687.542739][ T5137] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1687.549523][ T5137] ? __raw_spin_lock_init+0x36/0x110 [ 1687.554824][ T5137] ? debug_mutex_init+0x33/0x60 [ 1687.559684][ T5137] blk_mq_alloc_rqs+0x258/0x7a0 [ 1687.564558][ T5137] blk_mq_alloc_map_and_rqs+0x69/0x180 [ 1687.570206][ T5137] blk_mq_init_sched+0x29d/0x740 [ 1687.575168][ T5137] elevator_init_mq+0x2a9/0x4e0 [ 1687.580033][ T5137] device_add_disk+0x76/0xef0 [ 1687.584726][ T5137] nbd_dev_add+0x8d9/0xcd0 [ 1687.589158][ T5137] nbd_genl_connect+0x11f3/0x1930 [ 1687.594199][ T5137] ? nbd_start_device+0xd10/0xd10 [ 1687.599233][ T5137] ? __nla_parse+0x3d/0x50 [ 1687.603662][ T5137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1687.609915][ T5137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1687.617295][ T5137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1687.624813][ T5137] genl_family_rcv_msg_doit+0x228/0x320 [ 1687.630365][ T5137] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1687.637738][ T5137] ? mutex_lock_io_nested+0x1150/0x1150 [ 1687.643297][ T5137] ? genl_op_from_small+0x23/0x3c0 [ 1687.648419][ T5137] ? genl_get_cmd+0x3cf/0x480 [ 1687.653106][ T5137] genl_rcv_msg+0x328/0x580 [ 1687.657616][ T5137] ? genl_get_cmd+0x480/0x480 [ 1687.662296][ T5137] ? nbd_start_device+0xd10/0xd10 [ 1687.667346][ T5137] ? lock_release+0x720/0x720 [ 1687.672036][ T5137] netlink_rcv_skb+0x153/0x420 [ 1687.676800][ T5137] ? genl_get_cmd+0x480/0x480 [ 1687.681479][ T5137] ? netlink_ack+0xa60/0xa60 [ 1687.686057][ T5137] ? netlink_deliver_tap+0x1b1/0xc30 [ 1687.691335][ T5137] ? _copy_from_iter+0x12b/0x1320 [ 1687.696352][ T5137] genl_rcv+0x24/0x40 [ 1687.700484][ T5137] netlink_unicast+0x533/0x7d0 [ 1687.705270][ T5137] ? netlink_attachskb+0x880/0x880 [ 1687.710393][ T5137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1687.716641][ T5137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1687.722867][ T5137] ? __phys_addr_symbol+0x2c/0x70 [ 1687.727882][ T5137] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1687.733606][ T5137] ? __check_object_size+0x16e/0x3f0 [ 1687.738895][ T5137] netlink_sendmsg+0x86d/0xda0 [ 1687.743759][ T5137] ? netlink_unicast+0x7d0/0x7d0 [ 1687.748779][ T5137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1687.755007][ T5137] ? netlink_unicast+0x7d0/0x7d0 [ 1687.760162][ T5137] sock_sendmsg+0xcf/0x120 [ 1687.764565][ T5137] ____sys_sendmsg+0x6e8/0x810 [ 1687.769321][ T5137] ? kernel_sendmsg+0x50/0x50 [ 1687.773986][ T5137] ? do_recvmmsg+0x6d0/0x6d0 [ 1687.778565][ T5137] ? lock_chain_count+0x20/0x20 [ 1687.783405][ T5137] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1687.789379][ T5137] ___sys_sendmsg+0xf3/0x170 [ 1687.794217][ T5137] ? sendmsg_copy_msghdr+0x160/0x160 [ 1687.799680][ T5137] ? __fget_files+0x21b/0x3e0 [ 1687.804702][ T5137] ? lock_downgrade+0x6e0/0x6e0 [ 1687.809638][ T5137] ? __fget_files+0x23d/0x3e0 [ 1687.814497][ T5137] ? __fget_light+0xea/0x280 [ 1687.819073][ T5137] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1687.825629][ T5137] __sys_sendmsg+0xe5/0x1b0 [ 1687.830118][ T5137] ? __sys_sendmsg_sock+0x30/0x30 [ 1687.835143][ T5137] ? syscall_enter_from_user_mode+0x21/0x70 [ 1687.841035][ T5137] do_syscall_64+0x35/0xb0 [ 1687.845438][ T5137] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1687.851321][ T5137] RIP: 0033:0x7f238b7b8ae9 [ 1687.855720][ T5137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.875510][ T5137] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.883907][ T5137] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1687.891864][ T5137] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1687.899821][ T5137] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.907794][ T5137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1687.915748][ T5137] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1687.923720][ T5137] [ 1687.931386][T27219] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1687.940609][T27219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1687.948707][T27219] usb 6-1: SerialNumber: syz [ 1687.969082][T20209] usb 2-1: string descriptor 0 read error: -71 [ 1687.975404][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1687.984859][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 07:57:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 61) [ 1687.994134][ T5088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1688.009294][T30559] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1688.009460][ T5088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1688.069806][T27219] hub 6-1:250.228: bad descriptor, ignoring hub [ 1688.076301][T27219] hub: probe of 6-1:250.228 failed with error -5 [ 1688.086782][ T5158] FAULT_INJECTION: forcing a failure. [ 1688.086782][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.099244][T20209] usb 2-1: can't set config #250, error -71 [ 1688.099794][ T5158] CPU: 1 PID: 5158 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1688.113905][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.124311][ T5158] Call Trace: [ 1688.125941][T20209] usb 2-1: USB disconnect, device number 80 [ 1688.127657][ T5158] [ 1688.136465][ T5158] dump_stack_lvl+0xcd/0x134 [ 1688.141080][ T5158] should_fail.cold+0x5/0xa [ 1688.145574][ T5158] ? elevator_alloc+0x78/0x170 [ 1688.150332][ T5158] should_failslab+0x5/0x10 [ 1688.154844][ T5158] kmem_cache_alloc_node_trace+0x59/0x310 [ 1688.160581][ T5158] elevator_alloc+0x78/0x170 [ 1688.165186][ T5158] dd_init_sched+0x24/0x530 [ 1688.169702][ T5158] blk_mq_init_sched+0x35a/0x740 [ 1688.174949][ T5158] elevator_init_mq+0x2a9/0x4e0 [ 1688.179989][ T5158] device_add_disk+0x76/0xef0 [ 1688.184688][ T5158] nbd_dev_add+0x8d9/0xcd0 [ 1688.189119][ T5158] nbd_genl_connect+0x11f3/0x1930 [ 1688.194161][ T5158] ? nbd_start_device+0xd10/0xd10 [ 1688.199201][ T5158] ? __nla_parse+0x3d/0x50 [ 1688.203628][ T5158] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1688.209882][ T5158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1688.217259][ T5158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1688.224556][ T5158] genl_family_rcv_msg_doit+0x228/0x320 [ 1688.230110][ T5158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1688.237490][ T5158] ? mutex_lock_io_nested+0x1150/0x1150 [ 1688.243054][ T5158] ? genl_op_from_small+0x23/0x3c0 [ 1688.248172][ T5158] ? genl_get_cmd+0x3cf/0x480 [ 1688.248766][T20208] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1688.252841][ T5158] genl_rcv_msg+0x328/0x580 [ 1688.264851][ T5158] ? genl_get_cmd+0x480/0x480 [ 1688.269519][ T5158] ? nbd_start_device+0xd10/0xd10 [ 1688.274562][ T5158] ? lock_release+0x720/0x720 [ 1688.279252][ T5158] netlink_rcv_skb+0x153/0x420 [ 1688.284005][ T5158] ? genl_get_cmd+0x480/0x480 [ 1688.288677][ T5158] ? netlink_ack+0xa60/0xa60 [ 1688.293267][ T5158] ? netlink_deliver_tap+0x1b1/0xc30 [ 1688.298545][ T5158] ? _copy_from_iter+0x12b/0x1320 [ 1688.300528][T27219] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1688.303562][ T5158] genl_rcv+0x24/0x40 [ 1688.303588][ T5158] netlink_unicast+0x533/0x7d0 [ 1688.323656][ T5158] ? netlink_attachskb+0x880/0x880 [ 1688.328771][ T5158] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1688.335024][ T5158] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1688.341275][ T5158] ? __phys_addr_symbol+0x2c/0x70 [ 1688.346315][ T5158] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1688.352054][ T5158] ? __check_object_size+0x16e/0x3f0 [ 1688.357354][ T5158] netlink_sendmsg+0x86d/0xda0 [ 1688.362130][ T5158] ? netlink_unicast+0x7d0/0x7d0 [ 1688.367076][ T5158] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1688.373334][ T5158] ? netlink_unicast+0x7d0/0x7d0 [ 1688.378278][ T5158] sock_sendmsg+0xcf/0x120 [ 1688.382689][ T5158] ____sys_sendmsg+0x6e8/0x810 [ 1688.387443][ T5158] ? kernel_sendmsg+0x50/0x50 [ 1688.392108][ T5158] ? do_recvmmsg+0x6d0/0x6d0 [ 1688.396708][ T5158] ? lock_chain_count+0x20/0x20 [ 1688.401562][ T5158] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1688.407540][ T5158] ___sys_sendmsg+0xf3/0x170 [ 1688.412121][ T5158] ? sendmsg_copy_msghdr+0x160/0x160 [ 1688.417399][ T5158] ? __fget_files+0x21b/0x3e0 [ 1688.422082][ T5158] ? lock_downgrade+0x6e0/0x6e0 [ 1688.426927][ T5158] ? __fget_files+0x23d/0x3e0 [ 1688.431596][ T5158] ? __fget_light+0xea/0x280 [ 1688.436177][ T5158] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1688.442410][ T5158] __sys_sendmsg+0xe5/0x1b0 [ 1688.446903][ T5158] ? __sys_sendmsg_sock+0x30/0x30 [ 1688.451923][ T5158] ? syscall_enter_from_user_mode+0x21/0x70 [ 1688.457813][ T5158] do_syscall_64+0x35/0xb0 [ 1688.462238][ T5158] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1688.468140][ T5158] RIP: 0033:0x7f238b7b8ae9 [ 1688.472544][ T5158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.479418][T20209] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1688.492547][ T5158] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.492576][ T5158] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1688.492591][ T5158] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1688.492604][ T5158] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.492619][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1688.492631][ T5158] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1688.492659][ T5158] [ 1688.548759][T20208] usb 3-1: Using ep0 maxpacket: 8 [ 1688.551617][ T5158] "mq-deadline" elevator initialization failed, falling back to "none" [ 1688.565259][ T9172] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1688.574357][ T9172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1688.582403][ T9172] usb 5-1: SerialNumber: syz 07:58:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 62) [ 1688.630423][ T5069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1688.638121][ T5069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1688.669102][T20208] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1688.669679][ T9172] hub 5-1:250.228: bad descriptor, ignoring hub [ 1688.677624][T20208] usb 3-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1688.683828][ T9172] hub: probe of 5-1:250.228 failed with error -5 [ 1688.699162][T20208] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.709474][T20208] usb 3-1: config 250 has 0 interfaces, different from the descriptor's value: 255 [ 1688.729159][T30559] usb 1-1: Using ep0 maxpacket: 8 [ 1688.735700][ T5183] FAULT_INJECTION: forcing a failure. [ 1688.735700][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.748430][ T5183] CPU: 0 PID: 5183 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1688.756852][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.766998][ T5183] Call Trace: [ 1688.770276][ T5183] [ 1688.773210][ T5183] dump_stack_lvl+0xcd/0x134 [ 1688.777906][ T5183] should_fail.cold+0x5/0xa [ 1688.782422][ T5183] ? dd_init_sched+0x99/0x530 [ 1688.787107][ T5183] should_failslab+0x5/0x10 [ 1688.791619][ T5183] kmem_cache_alloc_node_trace+0x59/0x310 [ 1688.797355][ T5183] dd_init_sched+0x99/0x530 [ 1688.801872][ T5183] blk_mq_init_sched+0x35a/0x740 [ 1688.807004][ T5183] elevator_init_mq+0x2a9/0x4e0 [ 1688.811874][ T5183] device_add_disk+0x76/0xef0 [ 1688.816565][ T5183] nbd_dev_add+0x8d9/0xcd0 [ 1688.820996][ T5183] nbd_genl_connect+0x11f3/0x1930 [ 1688.826037][ T5183] ? nbd_start_device+0xd10/0xd10 07:58:00 executing program 4: syz_io_uring_setup(0x2b69, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) socket(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x600) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1688.831079][ T5183] ? __nla_parse+0x3d/0x50 [ 1688.835507][ T5183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1688.841759][ T5183] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1688.849144][ T5183] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1688.856443][ T5183] genl_family_rcv_msg_doit+0x228/0x320 [ 1688.862002][ T5183] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1688.869381][ T5183] ? mutex_lock_io_nested+0x1150/0x1150 [ 1688.874945][ T5183] ? genl_op_from_small+0x23/0x3c0 [ 1688.880064][ T5183] ? genl_get_cmd+0x3cf/0x480 [ 1688.884846][ T5183] genl_rcv_msg+0x328/0x580 [ 1688.889360][ T5183] ? genl_get_cmd+0x480/0x480 [ 1688.894046][ T5183] ? nbd_start_device+0xd10/0xd10 [ 1688.899697][ T5183] ? lock_release+0x720/0x720 [ 1688.904394][ T5183] netlink_rcv_skb+0x153/0x420 [ 1688.909163][ T5183] ? genl_get_cmd+0x480/0x480 [ 1688.913852][ T5183] ? netlink_ack+0xa60/0xa60 [ 1688.918542][ T5183] ? netlink_deliver_tap+0x1b1/0xc30 [ 1688.923850][ T5183] ? _copy_from_iter+0x12b/0x1320 07:58:00 executing program 2: readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) syz_io_uring_setup(0x498c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa00"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x498, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x32, 0xb0, 0x3d, 0x40, 0x19d2, 0xffc9, 0xb22a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x486, 0x1, 0x5, 0x2, 0xd0, 0xb2, [{{0x9, 0x4, 0x37, 0x7, 0xf, 0xff, 0xff, 0xff, 0xcc, [@hid_hid={0x9, 0x21, 0x4, 0x20, 0x1, {0x22, 0x70e}}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x1, 0x4, 0x3f}, @as_header={0x7, 0x24, 0x1, 0x9, 0x73}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x2}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3e7, 0x80, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @generic={0x24, 0x7, "47f9d4e3dedd782d3f7a6191198e4ac0c8a27daa0b1c4cfce2e959446c1e0668dc95"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x1f, 0x1, 0xb7, [@generic={0x3f, 0x6, "13352caead3c40f526e88ae7f01299c3af9f01a723ce311746b8ab141d82f7a67ca51c9edb9e5a859a14c897337a8c71719ff45375a9c2b786f103d3e7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x2d, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9b, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x3, 0x40, 0x6, [@generic={0x77, 0x1, "e9600c594ccb58b4ee5feedd2ed4d4f0fabe4c67a648c098f828c463ce356c0968e523729a2cb9bda301c2c2089e4dd5c78cdca032d61fde871a83fc975f2df40ec603fe7c59284b6e7b37ca74fd81457fe6f01ae946db704d51f20c0816b75642f1ae2f2c9d9d42370cb7c25c663f6bc3adf7de76"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x7, 0x0, [@generic={0x96, 0xe, "288a6fbf2356f0562ee37bc1ae857ce6bae701e1a6afeeced42843ea85c49cab0a4d60c6b4767edfbf227fa7af289ff9be81d1da70c52425b08634cf2831ad019416e662b3581ddd63a3578110af36c4c61adb4dc37715b9197230c7078c44fa4707ceaceb97c48aefeb97c7185756e886cdc154773d10339c5b3c2593d2d81094fc07b54df994b718a014ce4d3fdfdf66019505"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x27, 0xee}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x3, 0x20, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0x3}]}}, {{0x9, 0x5, 0x8, 0x1, 0x28, 0x4b, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xc570}]}}, {{0x9, 0x5, 0x7, 0xa, 0x3ff, 0x2, 0x0, 0x3a, [@generic={0x24, 0xe, "d5c2fa017ef5db964a4b8d5e4e56d935e8b4ae6de7d98abe1235fd1aefcde53d0947"}, @generic={0xc7, 0xc, "9383be9f0b660ee22b14f5745c12c1d69761181c2d67beadb199c3a6ae7ad0a9145acac58c00d04b4d5fa488a68bcd2d378f563345f5a0b9c9a25f97e67f9e655209f02d38f5a0d6d9461bfc043e58ed81d8700a4c98c4b9be38426421e4ff4d6059cfff2d17c26daf26b4e01350300bc498d00bbc8ab79db6d27f57abdaa2e1336d4c5813ebda52de76fbf12b0d87f6c1e1c5e3fea41da713a067157c94ce446554e92cb8a3857489465b372b56def532ab4103e6bc70b4b38c3b3ef1a8a5acdb4bf5e563"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x7, 0x52, [@generic={0x82, 0x2, "a675c32d7b587d04328e3ff405c803bdddf1576d9e27691c825ee0a343631dc9694b23dd8dcd3a60c9645e2e64308cbf695fe31ea5091456ed7ec4cb754a442150091ad455e53f96c4f0a78e3da1bae9bd7d26ac14ea851535063b42ca0a8090a4616a78ee3c672533145d676b48283d32156baecfdc4fedea898ebd03e14fdc"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x30, 0x8f3}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x4, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x401}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x80, 0x7, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3e, 0x7f, 0x4}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf8, 0x80, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x5, 0x6, 0x65, [@generic={0x8d, 0x11, "1e6fc1ff20e71e244a0d3f23cffef66a9f30cdf4124681c326566857a557b16a2720832f24d32180d4514c0cd2c698b99084faa8f1b469ce792b53512789c7c191b3e64e02a5bc25c28f01761d78b60a74aad8c019bbebc84b12b242d6c588b273eb0a61594c4610d0565b072f054267b0d33a50e46773e4368e597e27cc252bd7ae5b4977e79dc7999b30"}]}}, {{0x9, 0x5, 0xba343c6e14e006df, 0x0, 0x0, 0x5, 0x7f, 0x51, [@generic={0x2c, 0x3, "ae9431f9290875353bda26cda4bec9fa33a48c515bc705bf7794b5f9d7b98baf70b90129215680a84bf2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8a, 0xc, 0x2, 0x20, 0x81}, 0x66, &(0x7f0000000080)={0x5, 0xf, 0x66, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "a4635c33064c4ac6e3345aae12f5d8d3"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3894b335462fd1d5e7a06513cd1a066a"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "c868a7f88d8235cf306982da73388820"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "a8f37fced5064fae4cd3bb0c73c06fe9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x8, 0x7ff}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0xa3, &(0x7f0000000780)=@string={0xa3, 0x3, "0e98b0a4f5896b34189e2cb573e7f6ef913d8ad5a5ab69a28a9ce832d3bfe1537c86950ba0a5a148530f3af18e354de0dba119a11f8cf4423fa0d1f9ebd6f3f1696ea9303d1ae78c79931b1300e8c53880659629efbe719a0dcffa4af038176f9fcde22501f68ba66d3c25e688bee226d36a4e97d8dde30fd305c75b932f585f381d8634b27df0117e81e29cc7d5f3a03c3231bbb1f68aa8d981f18d0e50a71618"}}, {0x17, &(0x7f0000000140)=@string={0x17, 0x3, "c04c31f26514a907b009885b6ecc17ff800fea6a1e"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000980)={0x24, &(0x7f0000000840)={0x20, 0x22, 0x6c, {0x6c, 0xb, "6dcd830a618404c97ef803181b4ce75fc5e8f8b1982cb661139b8a945aad0e17ec127c5108a82624f3bf6fd54c672561a02efcd5d23fa33f9ee487b3be88563c40d4c6ec754883df466dd3a7fdd4bb0ff10fc214bc153831ef22513f51358362672d71cf0452ecc92b62"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, &(0x7f0000000900)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x0, "217ba48d"}, @local=@item_012={0x2, 0x2, 0x9, '>a'}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x8dd}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x20, 0x0, 0x59, "4e3e9b262b18e127158717ee818949c217b71611745966a92f75f620edb5bb556acec36cdcad23a4492a23946268ab889bb25a4944e8ffb68119b9ff6fd5d384a3d10ca2755037f49ac7b4c85eeeac83d74213307433875c34"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000ac0)={0x20, 0x1, 0x90, "b98a5d769d7dd7705475522985181bb276857b13fa2e28836d1457c62768a49bc491ee227e034bed53b395ed5c666763cf9cf59109b0d6490ac8c4503b809f044fe951f9b27cba6b441e8a2ef5baa66309487b7edbe65e1737dad115c7573dbe68ab7866032ba54b5185917d15e65da74ae9ba20454c3e9471492efef6d033a36eae4b0ee30c12e4cb12c7cd6b5d8e2e"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x81}}) [ 1688.928887][ T5183] genl_rcv+0x24/0x40 [ 1688.932874][ T5183] netlink_unicast+0x533/0x7d0 [ 1688.937647][ T5183] ? netlink_attachskb+0x880/0x880 [ 1688.942759][ T5183] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1688.949011][ T5183] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1688.955262][ T5183] ? __phys_addr_symbol+0x2c/0x70 [ 1688.960294][ T5183] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1688.966026][ T5183] ? __check_object_size+0x16e/0x3f0 [ 1688.971332][ T5183] netlink_sendmsg+0x86d/0xda0 [ 1688.976110][ T5183] ? netlink_unicast+0x7d0/0x7d0 [ 1688.981059][ T5183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1688.987312][ T5183] ? netlink_unicast+0x7d0/0x7d0 [ 1688.992253][ T5183] sock_sendmsg+0xcf/0x120 [ 1688.996679][ T5183] ____sys_sendmsg+0x6e8/0x810 [ 1689.001450][ T5183] ? kernel_sendmsg+0x50/0x50 [ 1689.006145][ T5183] ? do_recvmmsg+0x6d0/0x6d0 [ 1689.010754][ T5183] ? lock_chain_count+0x20/0x20 [ 1689.015618][ T5183] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1689.021619][ T5183] ___sys_sendmsg+0xf3/0x170 [ 1689.026313][ T5183] ? sendmsg_copy_msghdr+0x160/0x160 [ 1689.031606][ T5183] ? __fget_files+0x21b/0x3e0 [ 1689.036292][ T5183] ? lock_downgrade+0x6e0/0x6e0 [ 1689.041250][ T5183] ? __fget_files+0x23d/0x3e0 [ 1689.045944][ T5183] ? __fget_light+0xea/0x280 [ 1689.050543][ T5183] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1689.056798][ T5183] __sys_sendmsg+0xe5/0x1b0 [ 1689.061319][ T5183] ? __sys_sendmsg_sock+0x30/0x30 [ 1689.066371][ T5183] ? syscall_enter_from_user_mode+0x21/0x70 [ 1689.072285][ T5183] do_syscall_64+0x35/0xb0 [ 1689.076707][ T5183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1689.082615][ T5183] RIP: 0033:0x7f238b7b8ae9 [ 1689.087035][ T5183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.106658][ T5183] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1689.115090][ T5183] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1689.123157][ T5183] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 07:58:00 executing program 0: syz_io_uring_setup(0x2b69, &(0x7f0000000240)={0x0, 0x800000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_usb_connect(0x4, 0x559, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x95, 0xb1, 0x3c, 0x10, 0x4ca, 0x3014, 0x8790, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x547, 0x2, 0x6, 0x81, 0x90, 0xce, [{{0x9, 0x4, 0x87, 0x3b, 0x2, 0xc1, 0x7e, 0x46, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "5d810253f2b0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x20, 0x4, 0x3f}, {0x6, 0x24, 0x1a, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x5b8, 0x84}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0xdf3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x8, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x40}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x300, 0x3, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x1, 0x2}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x7f}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x8}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x800, 0x3, "3908de875b"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4, 0x6, 0x9f}}]}}, {{0x9, 0x4, 0xa7, 0x3, 0xf, 0x2, 0x2, 0xff, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f4bb62"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6000, 0xffff, 0x1f}, {0x6, 0x24, 0x1a, 0x8, 0x11}}], [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x3, 0xde}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xb9, 0x3, 0x20}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x4, 0x1, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x60, 0x3, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3bad}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x80, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xfe00}, @generic={0x65, 0x22, "2fbefd62c78229a5a232d571a6766271c0dcf5d44c08f3cb9f380127eeeb45675c481b7c9efc0706bf930c02c4f48cbffc868dc6ffecc11050e40d49e76aeff3754afd7de08d4f4335298cc5aeea8c324b4b88148f3598014bb0cfc4e8b9db7a9f0c6e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x6, 0x9, 0x20}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x0, 0x5, 0x2, [@generic={0xa9, 0xe, "49ee9ac9fd098e7f13413b37cd59ab1f878956d1162bdef70f5c18fc47175ea93133bfda609f2be518a545cf2b2c083b3326493ab2ec9b92972e839138097884875663a203ddfb652d8148bc5695df96ebebf693f8dfdd7a3a064d01905c0823d47ab3d7f3119e791639e6b397d026c7cfb2a9c4376ba60a8561fb860bf01f5f165cf5f024cb6d80af327bd4b3b0a0a174caf72d1e11ddd3170219586b5e85e3a63b82a44213f5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x420, 0x11, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x1, 0x9, 0x81, [@generic={0xe9, 0x21, "ae84153c2143592df3bda11b9ae832fd54feb548beb5836b8969f06fce64c88b0197f4a8dbcf61090f5e559967505ae6b6f94724905e086f16ce15f8c50582d53158a797c376edd911bcfb20c7aca1416f5fd97330bdf44b869cebca2883b69ec9d6d715e9969a32d00e885e7da03093302f13a5353d3061e095c626332d0120b06aaa276c67358b963463c31ddeab5de347e571ab36a057a11e6adc5c8e886e36195faf3e5e797ba7436a4f3b44c84d29c6a6e8c98b7cd568dd58ff7c3a23a6c8d6b08aae5bbe505f1453f242b90d40b951259a507a5b82e5141836d748a635bec8c5410187db"}]}}, {{0x9, 0x5, 0x84, 0x0, 0x40, 0x7f, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x7f, 0xae, 0x40}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x7, 0xa2, [@generic={0x22, 0x23, "48579695d570c67568d313d82d529b5509c8517dae01c197cdb0983d269a9f48"}, @generic={0xbd, 0x9, "d0e9c5b8b44084dfc072f1eb89156c02c53cc54452af0425f509ef4abf8e2a274b25a7c25d92f8c726bd1fe8bbd92f5eedccec831539b41b86fa5b01e9797d3f9d331d66276ba06ff5c2e6a3a3dd477e7ece51657bded516b52701c7e6f485aaaf2726dfeb37391f93f00f1c4fddfe8054bc9273d0d6591eea52cbc280ab4eefe35b792b34898e2cbcd27b4afb2d8ba628e0293a5744442a6172d3d842db2f85773a1523d1b40d0c952e8ac2e2658eb8c8052023d9b862cb15049f"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0xfd, 0x1, 0x5, [@generic={0xc6, 0x3, "ad0d82fbe3a832d66426cb0d355eab47dc5efe6d45a93bdbf9d2a9f8e5aede1466cd0ae1fa1ebb60c57c2b0b224c89d7fb32371e514ee9a347fc9f1e4ecfd1faddaefcdc1de6711ae08284915d81d8eed965a99e226aa0fd47036b856d12827f18277948c2ebf291b498c01d02c9c02a08eef9f26dc53cbe93b1aed0275cf502e2cff829d34b90f60beefecd3786afbac7ab36021496a068f5207ecf54e858057d546c573aaa99c8d405f8d83a2c725e8498e043dee25491e30aa74b21e26e9a5abec3c3"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x4, 0x81, 0x5, [@generic={0x2b, 0xf, "d76550fa57467ece8868dfeaa2fb47601a5610c9b3e415f7e4f55144fd206fde1bb25bb4faa7050b0c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x7ec0}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x81, 0x2, 0x0, 0x20, 0x3}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x6a, &(0x7f0000000840)=@string={0x6a, 0x3, "f6061055e9336ed3194dc9c0b66e5c8b3b8fbe9a5c3c2f9e86faf2b4b1a6ae491b7f06a39a5a3cc9f8c81f953d7c834fb6ec14dd488dc5b0d605ec52f960a78f688fb23f668a2d18b6f24941ef6c735fb44fcf61fac1b3aab2fbb8b5466b4983c486a6f14beffe2a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x421}}, {0xd8, &(0x7f00000008c0)=@string={0xd8, 0x3, "8c3d79bc9722729f6c0f2354c7cf0261cc0f0f03aafdeae37f775bbbea7fc1b71bbdd7f1cdbd6cc35816d685d68dd7298b13af12a19d0cd57a7e5465b3097c242e8d3d82349184b455e89afb0f528fceb0208e415e286283bb9da27fb6a6fe94dde4edddf18a27ab310fe8a4473c8328b9e6156d2eb6359240f3c40ca8a3d50f3ad2cc665cb6bb41e128c8a6dee6962e444e79121525ad541abf2b0850ffc8b0083a9711833ae757aabad529bc50b7bbc9bda8c60799b9321105008f5290171e24f2692b36a7a6c5fcb224ed9d2f3871a63bca66b38a"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 1689.131128][ T5183] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.139101][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.147075][ T5183] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1689.155065][ T5183] [ 1689.160123][ T5183] "mq-deadline" elevator initialization failed, falling back to "none" [ 1689.198903][T20209] usb 2-1: Using ep0 maxpacket: 8 [ 1689.209320][T30559] usb 1-1: device descriptor read/all, error -71 [ 1689.222983][T30559] usb usb1-port1: attempt power cycle [ 1689.238957][T20208] usb 3-1: string descriptor 0 read error: -71 [ 1689.245346][T20208] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1689.254453][T20208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 07:58:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, 0x0, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r2, 0x19250ce1ea6179, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x30}}, 0x0) (fail_nth: 63) [ 1689.318948][T20208] usb 3-1: can't set config #250, error -71 [ 1689.326397][T20208] usb 3-1: USB disconnect, device number 99 [ 1689.352447][T20209] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1689.360921][T20209] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32 [ 1689.370012][T20209] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255 [ 1689.379242][ T5088] usb 6-1: reset high-speed USB device number 54 using dummy_hcd [ 1689.379271][T20209] usb 2-1: config 250 has no interface number 0 [ 1689.393274][T20209] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1689.393966][ T5223] FAULT_INJECTION: forcing a failure. [ 1689.393966][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.404785][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1689.417502][ T5223] CPU: 1 PID: 5223 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1689.427952][T20209] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166 [ 1689.436214][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.436230][ T5223] Call Trace: [ 1689.436237][ T5223] [ 1689.436245][ T5223] dump_stack_lvl+0xcd/0x134 [ 1689.446666][T20209] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1689.456672][ T5223] should_fail.cold+0x5/0xa [ 1689.456702][ T5223] should_failslab+0x5/0x10 [ 1689.459996][T20209] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1689.462883][ T5223] __kmalloc_track_caller+0x79/0x320 [ 1689.502012][ T5223] ? kstrdup_const+0x53/0x80 [ 1689.506621][ T5223] kstrdup+0x36/0x70 [ 1689.510696][ T5223] kstrdup_const+0x53/0x80 [ 1689.515109][ T5223] kvasprintf_const+0x108/0x190 [ 1689.519963][ T5223] kobject_set_name_vargs+0x56/0x150 [ 1689.525337][ T5223] dev_set_name+0xbb/0xf0 [ 1689.529660][ T5223] ? device_initialize+0x560/0x560 [ 1689.534775][ T5223] device_add_disk+0x1de/0xef0 [ 1689.539541][ T5223] nbd_dev_add+0x8d9/0xcd0 [ 1689.543958][ T5223] nbd_genl_connect+0x11f3/0x1930 [ 1689.549112][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1689.554133][ T5223] ? __nla_parse+0x3d/0x50 [ 1689.558542][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1689.565124][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1689.572532][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1689.579811][ T5223] genl_family_rcv_msg_doit+0x228/0x320 [ 1689.585352][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1689.592711][ T5223] ? mutex_lock_io_nested+0x1150/0x1150 [ 1689.598277][ T5223] ? genl_op_from_small+0x23/0x3c0 [ 1689.603381][ T5223] ? genl_get_cmd+0x3cf/0x480 [ 1689.608052][ T5223] genl_rcv_msg+0x328/0x580 [ 1689.612637][ T5223] ? genl_get_cmd+0x480/0x480 [ 1689.617479][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1689.622500][ T5223] ? lock_release+0x720/0x720 [ 1689.627174][ T5223] netlink_rcv_skb+0x153/0x420 [ 1689.631927][ T5223] ? genl_get_cmd+0x480/0x480 [ 1689.636596][ T5223] ? netlink_ack+0xa60/0xa60 [ 1689.641183][ T5223] ? netlink_deliver_tap+0x1b1/0xc30 [ 1689.646465][ T5223] ? _copy_from_iter+0x12b/0x1320 [ 1689.651675][ T5223] genl_rcv+0x24/0x40 [ 1689.655648][ T5223] netlink_unicast+0x533/0x7d0 [ 1689.660405][ T5223] ? netlink_attachskb+0x880/0x880 [ 1689.665506][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1689.671741][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1689.677976][ T5223] ? __phys_addr_symbol+0x2c/0x70 [ 1689.682991][ T5223] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1689.688703][ T5223] ? __check_object_size+0x16e/0x3f0 [ 1689.693990][ T5223] netlink_sendmsg+0x86d/0xda0 [ 1689.698931][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1689.703867][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1689.710110][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1689.715041][ T5223] sock_sendmsg+0xcf/0x120 [ 1689.719455][ T5223] ____sys_sendmsg+0x6e8/0x810 [ 1689.724385][ T5223] ? kernel_sendmsg+0x50/0x50 [ 1689.729051][ T5223] ? do_recvmmsg+0x6d0/0x6d0 [ 1689.733635][ T5223] ? lock_chain_count+0x20/0x20 [ 1689.738477][ T5223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1689.744544][ T5223] ___sys_sendmsg+0xf3/0x170 [ 1689.749131][ T5223] ? sendmsg_copy_msghdr+0x160/0x160 [ 1689.754411][ T5223] ? __fget_files+0x21b/0x3e0 [ 1689.759082][ T5223] ? lock_downgrade+0x6e0/0x6e0 [ 1689.763934][ T5223] ? __fget_files+0x23d/0x3e0 [ 1689.768606][ T5223] ? __fget_light+0xea/0x280 [ 1689.773189][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1689.779428][ T5223] __sys_sendmsg+0xe5/0x1b0 [ 1689.783925][ T5223] ? __sys_sendmsg_sock+0x30/0x30 [ 1689.788950][ T5223] ? syscall_enter_from_user_mode+0x21/0x70 [ 1689.794841][ T5223] do_syscall_64+0x35/0xb0 [ 1689.799248][ T5223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1689.805138][ T5223] RIP: 0033:0x7f238b7b8ae9 [ 1689.809632][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.829489][ T5223] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1689.838067][ T5223] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1689.846026][ T5223] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1689.853984][ T5223] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.861945][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.870077][ T5223] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1689.878051][ T5223] [ 1689.882053][ T5223] ------------[ cut here ]------------ [ 1689.887515][ T5223] WARNING: CPU: 1 PID: 5223 at block/genhd.c:547 device_add_disk+0x338/0xef0 [ 1689.896700][ T5223] Modules linked in: [ 1689.900644][ T5223] CPU: 1 PID: 5223 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1689.904647][T20209] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1689.909020][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.909039][ T5223] RIP: 0010:device_add_disk+0x338/0xef0 [ 1689.909074][ T5223] Code: 74 08 3c 03 0f 8e 93 09 00 00 8b 5d 00 bf 03 01 00 00 89 de e8 39 ee ae fd 81 fb 03 01 00 00 0f 84 16 02 00 00 e8 08 ec ae fd <0f> 0b 41 bc 01 00 00 00 e8 fb eb ae fd 44 89 e0 48 83 c4 38 5b 5d [ 1689.909096][ T5223] RSP: 0018:ffffc90019027460 EFLAGS: 00010246 [ 1689.918115][T20209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1689.928300][ T5223] RAX: 0000000000040000 RBX: 000000000000002b RCX: ffffc9000fb72000 [ 1689.928317][ T5223] RDX: 0000000000040000 RSI: ffffffff83c8d798 RDI: 0000000000000003 [ 1689.928339][ T5223] RBP: ffff88807652f000 R08: 0000000000000103 R09: ffff888016beea43 [ 1689.928355][ T5223] R10: ffffffff83c8d787 R11: 0000000000000000 R12: 00000000ffffffea [ 1689.928371][ T5223] R13: ffff88807652f080 R14: ffff88807652f008 R15: ffff888016beea08 [ 1689.928391][ T5223] FS: 00007f2388d2e700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1689.928496][ T5223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1689.928515][ T5223] CR2: 0000001b2bc23000 CR3: 0000000034919000 CR4: 0000000000350ee0 [ 1689.928530][ T5223] Call Trace: [ 1689.928537][ T5223] [ 1689.928553][ T5223] nbd_dev_add+0x8d9/0xcd0 [ 1689.928584][ T5223] nbd_genl_connect+0x11f3/0x1930 [ 1689.928619][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1689.928690][ T5223] ? __nla_parse+0x3d/0x50 [ 1689.934217][T20209] usb 2-1: SerialNumber: syz [ 1689.954069][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1689.954108][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1689.954133][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1689.954163][ T5223] genl_family_rcv_msg_doit+0x228/0x320 [ 1689.954187][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1689.954212][ T5223] ? mutex_lock_io_nested+0x1150/0x1150 [ 1689.954246][ T5223] ? genl_op_from_small+0x23/0x3c0 [ 1689.954269][ T5223] ? genl_get_cmd+0x3cf/0x480 [ 1689.954294][ T5223] genl_rcv_msg+0x328/0x580 [ 1689.954318][ T5223] ? genl_get_cmd+0x480/0x480 [ 1689.954354][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1689.954384][ T5223] ? lock_release+0x720/0x720 [ 1689.954411][ T5223] netlink_rcv_skb+0x153/0x420 [ 1689.954432][ T5223] ? genl_get_cmd+0x480/0x480 [ 1689.954453][ T5223] ? netlink_ack+0xa60/0xa60 [ 1689.983338][ T5144] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1689.984693][ T5223] ? netlink_deliver_tap+0x1b1/0xc30 [ 1690.000214][ T5144] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1690.000723][ T5223] ? _copy_from_iter+0x12b/0x1320 [ 1690.019688][T20209] hub 2-1:250.228: bad descriptor, ignoring hub [ 1690.024174][ T5223] genl_rcv+0x24/0x40 [ 1690.032590][T20209] hub: probe of 2-1:250.228 failed with error -5 [ 1690.035563][ T5223] netlink_unicast+0x533/0x7d0 [ 1690.112166][ T5088] usb 6-1: Using ep0 maxpacket: 8 [ 1690.115668][ T5223] ? netlink_attachskb+0x880/0x880 [ 1690.115699][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.115731][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.212051][ T5223] ? __phys_addr_symbol+0x2c/0x70 [ 1690.212142][T20208] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1690.217091][ T5223] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1690.230666][ T5223] ? __check_object_size+0x16e/0x3f0 [ 1690.235961][ T5223] netlink_sendmsg+0x86d/0xda0 [ 1690.240791][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1690.245734][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1690.252016][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1690.256957][ T5223] sock_sendmsg+0xcf/0x120 [ 1690.261416][ T5223] ____sys_sendmsg+0x6e8/0x810 [ 1690.266185][ T5223] ? kernel_sendmsg+0x50/0x50 [ 1690.270894][ T5223] ? do_recvmmsg+0x6d0/0x6d0 [ 1690.275491][ T5223] ? lock_chain_count+0x20/0x20 [ 1690.280380][ T5223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1690.286512][ T5223] ___sys_sendmsg+0xf3/0x170 [ 1690.291425][ T5223] ? sendmsg_copy_msghdr+0x160/0x160 [ 1690.296819][ T5223] ? __fget_files+0x21b/0x3e0 [ 1690.301831][ T5223] ? lock_downgrade+0x6e0/0x6e0 [ 1690.306708][ T5223] ? __fget_files+0x23d/0x3e0 [ 1690.311471][ T5223] ? __fget_light+0xea/0x280 [ 1690.316074][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.322383][ T5223] __sys_sendmsg+0xe5/0x1b0 [ 1690.326925][ T5223] ? __sys_sendmsg_sock+0x30/0x30 [ 1690.332101][ T5223] ? syscall_enter_from_user_mode+0x21/0x70 [ 1690.338035][ T5223] do_syscall_64+0x35/0xb0 [ 1690.342533][ T5223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1690.348447][ T5223] RIP: 0033:0x7f238b7b8ae9 [ 1690.352915][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.372571][ T5223] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.381159][ T5223] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1690.389174][ T5223] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1690.397142][ T5223] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.405333][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.413766][ T5223] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1690.421791][ T5223] [ 1690.424803][ T5223] Kernel panic - not syncing: panic_on_warn set ... [ 1690.431562][ T5223] CPU: 1 PID: 5223 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1690.439886][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.449933][ T5223] Call Trace: [ 1690.453204][ T5223] [ 1690.456118][ T5223] dump_stack_lvl+0xcd/0x134 [ 1690.460707][ T5223] panic+0x2b0/0x6dd [ 1690.464595][ T5223] ? __warn_printk+0xf3/0xf3 [ 1690.469183][ T5223] ? __warn.cold+0x1a/0x44 [ 1690.473599][ T5223] ? device_add_disk+0x338/0xef0 [ 1690.478539][ T5223] __warn.cold+0x35/0x44 [ 1690.482781][ T5223] ? device_add_disk+0x338/0xef0 [ 1690.487718][ T5223] report_bug+0x1bd/0x210 [ 1690.492038][ T5223] handle_bug+0x3c/0x60 [ 1690.496194][ T5223] exc_invalid_op+0x14/0x40 [ 1690.500692][ T5223] asm_exc_invalid_op+0x12/0x20 [ 1690.505532][ T5223] RIP: 0010:device_add_disk+0x338/0xef0 [ 1690.511071][ T5223] Code: 74 08 3c 03 0f 8e 93 09 00 00 8b 5d 00 bf 03 01 00 00 89 de e8 39 ee ae fd 81 fb 03 01 00 00 0f 84 16 02 00 00 e8 08 ec ae fd <0f> 0b 41 bc 01 00 00 00 e8 fb eb ae fd 44 89 e0 48 83 c4 38 5b 5d [ 1690.530669][ T5223] RSP: 0018:ffffc90019027460 EFLAGS: 00010246 [ 1690.536726][ T5223] RAX: 0000000000040000 RBX: 000000000000002b RCX: ffffc9000fb72000 [ 1690.544683][ T5223] RDX: 0000000000040000 RSI: ffffffff83c8d798 RDI: 0000000000000003 [ 1690.552644][ T5223] RBP: ffff88807652f000 R08: 0000000000000103 R09: ffff888016beea43 [ 1690.560602][ T5223] R10: ffffffff83c8d787 R11: 0000000000000000 R12: 00000000ffffffea [ 1690.568559][ T5223] R13: ffff88807652f080 R14: ffff88807652f008 R15: ffff888016beea08 [ 1690.576522][ T5223] ? device_add_disk+0x327/0xef0 [ 1690.581458][ T5223] ? device_add_disk+0x338/0xef0 [ 1690.586404][ T5223] nbd_dev_add+0x8d9/0xcd0 [ 1690.590816][ T5223] nbd_genl_connect+0x11f3/0x1930 [ 1690.595837][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1690.600852][ T5223] ? __nla_parse+0x3d/0x50 [ 1690.605258][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1690.611491][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1690.618854][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1690.626333][ T5223] genl_family_rcv_msg_doit+0x228/0x320 [ 1690.631870][ T5223] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1690.639228][ T5223] ? mutex_lock_io_nested+0x1150/0x1150 [ 1690.644774][ T5223] ? genl_op_from_small+0x23/0x3c0 [ 1690.649872][ T5223] ? genl_get_cmd+0x3cf/0x480 [ 1690.654538][ T5223] genl_rcv_msg+0x328/0x580 [ 1690.659032][ T5223] ? genl_get_cmd+0x480/0x480 [ 1690.663698][ T5223] ? nbd_start_device+0xd10/0xd10 [ 1690.668717][ T5223] ? lock_release+0x720/0x720 [ 1690.673390][ T5223] netlink_rcv_skb+0x153/0x420 [ 1690.678139][ T5223] ? genl_get_cmd+0x480/0x480 [ 1690.682804][ T5223] ? netlink_ack+0xa60/0xa60 [ 1690.687383][ T5223] ? netlink_deliver_tap+0x1b1/0xc30 [ 1690.692662][ T5223] ? _copy_from_iter+0x12b/0x1320 [ 1690.697678][ T5223] genl_rcv+0x24/0x40 [ 1690.701648][ T5223] netlink_unicast+0x533/0x7d0 [ 1690.706403][ T5223] ? netlink_attachskb+0x880/0x880 [ 1690.711500][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.717734][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.723965][ T5223] ? __phys_addr_symbol+0x2c/0x70 [ 1690.729066][ T5223] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1690.734775][ T5223] ? __check_object_size+0x16e/0x3f0 [ 1690.740051][ T5223] netlink_sendmsg+0x86d/0xda0 [ 1690.744808][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1690.749736][ T5223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1690.755972][ T5223] ? netlink_unicast+0x7d0/0x7d0 [ 1690.760894][ T5223] sock_sendmsg+0xcf/0x120 [ 1690.765301][ T5223] ____sys_sendmsg+0x6e8/0x810 [ 1690.770059][ T5223] ? kernel_sendmsg+0x50/0x50 [ 1690.774723][ T5223] ? do_recvmmsg+0x6d0/0x6d0 [ 1690.779303][ T5223] ? lock_chain_count+0x20/0x20 [ 1690.784235][ T5223] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1690.790211][ T5223] ___sys_sendmsg+0xf3/0x170 [ 1690.794795][ T5223] ? sendmsg_copy_msghdr+0x160/0x160 [ 1690.800073][ T5223] ? __fget_files+0x21b/0x3e0 [ 1690.804744][ T5223] ? lock_downgrade+0x6e0/0x6e0 [ 1690.809679][ T5223] ? __fget_files+0x23d/0x3e0 [ 1690.814353][ T5223] ? __fget_light+0xea/0x280 [ 1690.818933][ T5223] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1690.825169][ T5223] __sys_sendmsg+0xe5/0x1b0 [ 1690.829664][ T5223] ? __sys_sendmsg_sock+0x30/0x30 [ 1690.834950][ T5223] ? syscall_enter_from_user_mode+0x21/0x70 [ 1690.840840][ T5223] do_syscall_64+0x35/0xb0 [ 1690.845248][ T5223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1690.851137][ T5223] RIP: 0033:0x7f238b7b8ae9 [ 1690.855542][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.875141][ T5223] RSP: 002b:00007f2388d2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.883546][ T5223] RAX: ffffffffffffffda RBX: 00007f238b8cbf60 RCX: 00007f238b7b8ae9 [ 1690.891506][ T5223] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 1690.899463][ T5223] RBP: 00007f2388d2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.907417][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.915373][ T5223] R13: 00007ffcef734a5f R14: 00007f2388d2e300 R15: 0000000000022000 [ 1690.923516][ T5223] [ 1690.927571][ T5223] Kernel Offset: disabled [ 1690.932359][ T5223] Rebooting in 86400 seconds..