(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188120f80ecdb4cb9cca7480cf43b000000e3bd6efb440e09000e000a00100000000280f0001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="97801cfb77aae10942bf6f0abd851d277c11b40524481a97d7d113a5f28dc00242aa6426bb9dd17e18463e24ac935831d38219a37928ab8dcfe4d9ec52156a0fb8483d13d11e94b1786b0c8fcbc60d67b86d0d898e9ec1b8474e13cfa1c31d3c74377ed25923c2c0126bdef7a5dea281846916114d84f495ea35998e8086bc97c040f03df31014d8e7fc377c39bf70cab51335c79e989af4f0b59abc74edd55a91204016d6745726", 0xa8}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000088000000960000007000e2a2a74fea34fc9166fa49ff03000000000000000000000000821a2c37897a5fea7df0d2c9a0dbdb0cb4d73ebc71a77e2d8404231fc178e7d547848a6b12a6d0d055be7787fc1effd274f5a03a4fe83a708a571624d77e0fbe047cf393b905cc4f8bea448acc557c90fc8ad17bae24b4e74d072ddbdcc8c400680000000000000010010000810000006eb8a1634957151f50d3dcdac7fb616d99e021800f7f23eb951fee56bf03e8ac2b37ba40019fe71c3f4c1102df281f4bf24b52182e251c1c6daf77e523a646ebc47b9f15dcd7ca99dbe9f90986f725a22a132668"], 0x1a8}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x2280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x9, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x210, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x0, 0x100000001, 0x0, 0x2, 0x6, 0x101, 0x400}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x20d7c99fcced72a3) 00:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:42:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000300)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 00:42:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000580)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c, 0x0}, 0x26008405) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) [ 1161.073272][ T3153] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1161.112309][ T3153] team0: Device ipvlan0 failed to register rx_handler 00:42:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100), 0x4) 00:42:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 00:42:03 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$fuseblk(&(0x7f0000001280)='/dev/loop0\x00', &(0x7f00000013c0)='./file0\x00', 0x0, 0x21000, 0x0) lsetxattr$security_capability(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='security.capability\x00', &(0x7f00000016c0)=@v2, 0x14, 0x1) 00:42:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 00:42:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 00:42:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 1161.663442][ T3157] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1161.694885][ T3157] team0: Device ipvlan0 failed to register rx_handler 00:42:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') read$char_usb(r0, 0x0, 0x0) 00:42:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:42:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x288, 0x288, 0x288, 0x98, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0xb69293fd3b94e127}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000880)=0x2, 0x4) connect$inet(r1, &(0x7f0000000840)={0x2, 0x4e22, @empty}, 0x10) r2 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x00\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) ftruncate(r2, 0x40001) sendfile(r1, r2, 0x0, 0xffe4) 00:42:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)=""/205, &(0x7f0000000140)=0xcd) [ 1164.219149][ T3186] x_tables: duplicate underflow at hook 1 [ 1164.253416][ T3186] x_tables: duplicate underflow at hook 1 00:42:06 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000200)) 00:42:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 00:42:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0xb9, 0x0) 00:42:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:42:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x334, [0x20000480, 0x0, 0x0, 0x20000754, 0x20000784], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x3ac) 00:42:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') read$char_usb(r0, 0x0, 0x0) 00:42:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:09 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000480)={@random="03366dadf711", @random="060000007723", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e0a246", 0x0, "739aac"}}}}}}, 0x0) 00:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:42:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 00:42:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, &(0x7f0000000100)) [ 1167.309266][ T3219] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 00:42:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000052010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000002800020000fafffff0"], 0x58}}, 0x0) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="050346003c003e0000000200c52c", 0xe, 0x0, 0x0, 0x0) 00:42:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) 00:42:10 executing program 5: r0 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ff}) ftruncate(r0, 0x1000000) 00:42:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) poll(&(0x7f0000000440)=[{r0, 0xa028}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x8413}, {0xffffffffffffffff, 0x6211}, {0xffffffffffffffff, 0x402}, {0xffffffffffffffff, 0x40}], 0x6, 0x7) [ 1167.452612][ T3226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1167.482257][ T3226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1167.525864][ T3234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:10 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) 00:42:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) 00:42:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000002300)) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000002340)) 00:42:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@setlink={0x20, 0x13, 0x0, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) 00:42:12 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c09, 0x0) 00:42:12 executing program 2: syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) 00:42:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x127e, &(0x7f0000000680)) 00:42:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c08, 0x0) 00:42:13 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x75, 0x281) ioctl$USBDEVFS_SUBMITURB(r0, 0x5514, 0x0) 00:42:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x1000673) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 00:42:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:15 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300)='/dev/input/event#\x00', 0xe83, 0x183140) ioctl$EVIOCGPROP(r0, 0x5452, &(0x7f0000000040)=""/125) 00:42:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x75, 0x281) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, 0x0) 00:42:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000080)) 00:42:16 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000023c0)='net/stat\x00') fork() 00:42:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600210f"], 0x14}}, 0x0) 00:42:16 executing program 2: socketpair(0x2, 0x3, 0x6, 0x0) 00:42:16 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:16 executing program 2: sync() fork() 00:42:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) 00:42:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:19 executing program 5: lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:19 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="0301"], 0x0) 00:42:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x0, &(0x7f0000000180)="5e909092fd979b17ce33362ea582594143e3d4f099396897b27a17d9039fb4457b287ba0142f2e7ad55862e9d9ea9845a2b656eedec158db1646e48ddb57ef368dffd259b3c40219f40fbb78e022a9c01fdafa884537e37d8e6d95a8b2d0ac1e6b04d2547446758f5bc05effcecdd4d46b6c52bd3d19259cb4964353e37d5e4b4ad3aa7936f9dee0d0525e6cdf0e5a60dbfbe8725620a8d01f31eac7bf60d2d11749680d59aedb3ce09afc733afed7e2c053be1877b6111fbdb61e802a53745913abd806deb49d6b7214f09de10060dc726516c7e8f42a706a451b77bd0d5ea2e9", 0xe1) 00:42:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000140)) 00:42:19 executing program 5: lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:19 executing program 2: syslog(0x4, &(0x7f0000000000)=""/202, 0xca) 00:42:19 executing program 0: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x0, @empty=0x10}, @l2tp={0x2, 0x0, @remote}, @isdn, 0x7f}) 00:42:19 executing program 5: lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:19 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) 00:42:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1176.794738][ T2898] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1176.999179][ T2898] usb 4-1: device descriptor read/64, error 18 [ 1177.269088][ T2898] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1177.463952][ T2898] usb 4-1: device descriptor read/64, error 18 [ 1177.590821][ T2898] usb usb4-port1: attempt power cycle [ 1178.349214][ T2898] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1178.459777][ T2898] usb 4-1: Invalid ep0 maxpacket: 0 [ 1178.619118][ T2898] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1178.713433][ T2898] usb 4-1: Invalid ep0 maxpacket: 0 [ 1178.718861][ T2898] usb usb4-port1: unable to enumerate USB device 00:42:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:22 executing program 5: lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:22 executing program 2: mknod(&(0x7f0000000080)='./file0/file1\x00', 0x1000, 0x0) 00:42:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x2c}}, 0x0) 00:42:22 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000002100)) 00:42:22 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 00:42:22 executing program 5: lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000001180)=@rc={0x1f, @none}, 0x80) 00:42:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0xffffffffffffffff, &(0x7f0000000000)) [ 1179.775676][ T3367] QAT: failed to copy from user cfg_data. 00:42:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x20084a44dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 00:42:22 executing program 2: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) [ 1179.947472][ T3375] new mount options do not match the existing superblock, will be ignored 00:42:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:25 executing program 5: lsetxattr$security_capability(0x0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 00:42:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x20084a44dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 00:42:25 executing program 2: shmctl$IPC_SET(0x0, 0xd, &(0x7f00000020c0)={{0x3, 0xee00}}) 00:42:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x29, 0x0) 00:42:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)) [ 1182.749215][ T3389] new mount options do not match the existing superblock, will be ignored 00:42:25 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x20084a44dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 00:42:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@loopback}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) 00:42:25 executing program 0: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x2]}, @processing_unit={0x8, 0x24, 0x7, 0x0, 0x0, 0x0, "19"}, @mixer_unit={0x9, 0x24, 0x4, 0x0, 0x0, "e97f1829"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1f, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1182.985531][ T3401] new mount options do not match the existing superblock, will be ignored [ 1183.319176][ T9773] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1183.578970][ T9773] usb 1-1: Using ep0 maxpacket: 16 [ 1183.711538][ T9773] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1183.722548][ T9773] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1183.742960][ T9773] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1183.760015][ T9773] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1183.775035][ T9773] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1183.969619][ T9773] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.978730][ T9773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.995989][ T9773] usb 1-1: Product: syz [ 1184.004670][ T9773] usb 1-1: Manufacturer: syz [ 1184.015034][ T9773] usb 1-1: SerialNumber: syz [ 1184.381416][ T9773] usb 1-1: USB disconnect, device number 22 [ 1185.079106][ T34] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1185.329992][ T34] usb 1-1: Using ep0 maxpacket: 16 [ 1185.459807][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1185.470952][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1185.490283][ T34] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1185.502119][ T34] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1185.515644][ T34] usb 1-1: config 1 interface 1 has no altsetting 0 00:42:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:28 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x20084a44dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0, 0x0) 00:42:28 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1185.729276][ T34] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1185.738694][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.747003][ T34] usb 1-1: Product: syz [ 1185.751289][ T34] usb 1-1: Manufacturer: syz [ 1185.757207][ T34] usb 1-1: SerialNumber: syz [ 1185.870682][ T3449] new mount options do not match the existing superblock, will be ignored 00:42:28 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:28 executing program 3: syz_usb_connect$uac1(0x0, 0xc4, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x8, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x3, 0x2, [0xa, 0x0]}, @processing_unit={0x8, 0x24, 0x7, 0x0, 0x1, 0x0, "19"}, @mixer_unit={0x9, 0x24, 0x4, 0x0, 0x0, "e97f1829"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xffff}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "d30e9a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x2, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x80, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x0, 0x7f, "", "92"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x0, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x1f}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, 'uM'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0xfa, 0x0, 0xef, 0x0, 0x40}, 0x99, 0x0}) 00:42:28 executing program 0: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}, @processing_unit={0x8, 0x24, 0x7, 0x0, 0x0, 0x0, "19"}, @mixer_unit={0x9, 0x24, 0x4, 0x0, 0x0, "e97f1829"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x99, 0x0}) 00:42:28 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) [ 1186.199209][ T34] usb 1-1: USB disconnect, device number 23 [ 1186.229361][ T8551] usb 3-1: new high-speed USB device number 21 using dummy_hcd 00:42:28 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 00:42:29 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000003240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) [ 1186.449709][ T3001] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1186.470099][ T8551] usb 3-1: Using ep0 maxpacket: 8 00:42:29 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(0x0, 0x0, 0x0) [ 1186.619677][ T8551] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1186.628112][ T8551] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1186.639798][ T34] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1186.659687][ T8551] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1186.668777][ T8551] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1186.692339][ T8551] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1186.707855][ T8551] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1186.719998][ T8551] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1186.734500][ T3001] usb 4-1: Using ep0 maxpacket: 16 [ 1186.853489][ T8551] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1186.863269][ T8551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1186.875836][ T8551] usb 3-1: SerialNumber: syz [ 1186.889806][ T3001] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1186.907244][ T3001] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1186.920337][ T3458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1186.928174][ T3458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1186.935285][ T34] usb 1-1: Using ep0 maxpacket: 16 [ 1186.959617][ T3001] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1186.973196][ T8551] hub 3-1:5.0: bad descriptor, ignoring hub [ 1186.982810][ T8551] hub: probe of 3-1:5.0 failed with error -5 [ 1187.079411][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1187.091531][ T34] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1187.104987][ T34] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1187.118161][ T34] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1187.130252][ T3001] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1187.139565][ T34] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1187.146745][ T3001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.157016][ T3001] usb 4-1: Product: syz [ 1187.162896][ T3001] usb 4-1: Manufacturer: syz [ 1187.168049][ T3001] usb 4-1: SerialNumber: syz [ 1187.202694][ T8551] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1187.309941][ T34] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1187.319563][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.327586][ T34] usb 1-1: Product: syz [ 1187.332713][ T34] usb 1-1: Manufacturer: syz [ 1187.337340][ T34] usb 1-1: SerialNumber: syz [ 1187.728646][ T34] usb 1-1: USB disconnect, device number 24 [ 1187.873086][ T3001] usb 4-1: USB disconnect, device number 117 [ 1187.989674][ T3450] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 1188.229149][ T3450] usb 3-1: Using ep0 maxpacket: 8 [ 1188.359993][ T3001] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1188.369047][ T2898] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1188.401716][ T3458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1188.409948][ T3458] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1188.458959][ C1] usblp0: nonzero read bulk status received: -71 [ 1188.619117][ T2898] usb 1-1: Using ep0 maxpacket: 16 [ 1188.628412][ T8551] usb 3-1: USB disconnect, device number 21 [ 1188.642744][ T8551] usblp0: removed [ 1188.649129][ T3001] usb 4-1: Using ep0 maxpacket: 16 [ 1188.739919][ T2898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1188.752704][ T2898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1188.765638][ T2898] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1188.779412][ T3001] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1188.782689][ T2898] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1188.797383][ T3001] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 31, changing to 7 [ 1188.799927][ T2898] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1188.836143][ T3001] usb 4-1: config 1 interface 1 has no altsetting 0 00:42:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:31 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(0x0, 0x0, 0x0) 00:42:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1188.979737][ T2898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1188.998187][ T2898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.037047][ T2898] usb 1-1: Product: syz [ 1189.045108][ T2898] usb 1-1: Manufacturer: syz [ 1189.049134][ T3001] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1189.059627][ T2898] usb 1-1: SerialNumber: syz [ 1189.071182][ T3001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.088668][ T3001] usb 4-1: Product: syz [ 1189.096503][ T3001] usb 4-1: Manufacturer: syz [ 1189.107975][ T3001] usb 4-1: SerialNumber: syz [ 1189.199347][ T3001] usb 4-1: can't set config #1, error -71 [ 1189.206683][ T3001] usb 4-1: USB disconnect, device number 118 [ 1189.378509][ T2898] usb 1-1: USB disconnect, device number 25 [ 1189.509128][T24121] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1189.759041][T24121] usb 3-1: Using ep0 maxpacket: 8 00:42:32 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:32 executing program 5: lsetxattr$security_capability(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2, 0x14, 0x0) lchown(0x0, 0x0, 0x0) 00:42:32 executing program 3: syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x200, 0x41) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x8001, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:32 executing program 0: syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x200, 0x41) r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x600) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1189.838804][T24121] usb 3-1: device descriptor read/all, error -71 00:42:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:32 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1190.239114][ T2898] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1190.269230][T24121] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1190.281799][ T3215] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1190.449041][ T9773] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1190.490109][ T2898] usb 1-1: Using ep0 maxpacket: 8 [ 1190.539083][ T3215] usb 4-1: Using ep0 maxpacket: 8 [ 1190.539254][T24121] usb 3-1: Using ep0 maxpacket: 8 [ 1190.611493][ T2898] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 1190.626277][ T2898] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1190.638398][ T2898] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1190.656859][ T2898] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1190.669757][ T3215] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1190.686095][ T2898] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1190.701106][T24121] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1190.707593][ T3215] usb 4-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1190.716134][T24121] usb 3-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1190.718461][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1190.732921][ T3215] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1190.738872][T24121] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1190.748997][ T2898] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1190.765933][T24121] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1190.769465][ T3215] usb 4-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1190.789229][T24121] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1190.796734][ T2898] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1190.811609][T24121] usb 3-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1190.821349][ T3215] usb 4-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1190.834737][ T3215] usb 4-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1190.839298][T24121] usb 3-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1190.844742][ T3215] usb 4-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1190.910959][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1190.929888][ T2898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1190.939210][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1190.947916][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1190.957177][ T2898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1190.965551][ T3215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1190.979933][T24121] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1190.980243][ T3215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1190.994926][T24121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1191.011571][T24121] usb 3-1: SerialNumber: syz [ 1191.015324][ T2898] usb 1-1: SerialNumber: syz [ 1191.025330][ T3215] usb 4-1: SerialNumber: syz [ 1191.041133][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.044802][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1191.048515][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.080780][ T3651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.088064][ T3651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.103641][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1191.120277][T24121] hub 3-1:5.0: bad descriptor, ignoring hub [ 1191.120338][ T2898] hub 1-1:5.0: bad descriptor, ignoring hub [ 1191.126337][T24121] hub: probe of 3-1:5.0 failed with error -5 [ 1191.150787][ T3656] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.168000][ T3656] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.182597][ T2898] hub: probe of 1-1:5.0 failed with error -5 [ 1191.210299][ T3215] hub 4-1:5.0: bad descriptor, ignoring hub [ 1191.216480][ T3215] hub: probe of 4-1:5.0 failed with error -5 [ 1191.223963][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1191.248385][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1191.349894][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1191.374836][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1191.384409][T24121] usblp 3-1:5.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1191.390103][ T2898] usblp 1-1:5.0: usblp1: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1191.420254][ T3215] usblp 4-1:5.0: usblp2: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1191.445230][ T9773] usb 6-1: SerialNumber: syz [ 1191.511783][ T3672] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.535709][ T3672] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1191.600062][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1191.606127][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1191.789896][ T2898] usb 1-1: USB disconnect, device number 26 [ 1191.799786][ T3001] usb 4-1: USB disconnect, device number 119 [ 1192.059766][ T3644] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 1192.319111][ T3644] usb 3-1: Using ep0 maxpacket: 8 [ 1192.461087][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1192.468401][ T3649] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1192.531047][ T2898] usblp1: removed [ 1192.534799][ T3001] usblp2: removed [ 1192.537553][ T9773] usblp 6-1:5.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1192.559108][ C1] usblp0: nonzero read bulk status received: -71 [ 1192.730617][T24121] usb 3-1: USB disconnect, device number 23 [ 1192.782541][ T9773] usb 6-1: reset high-speed USB device number 2 using dummy_hcd 00:42:35 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1192.905556][ T3651] usblp0: removed [ 1192.922366][ T2898] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1192.969292][ T3001] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1193.029124][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1193.171042][ T3672] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1193.178296][ T3672] raw-gadget gadget: fail, usb_ep_enable returned -22 00:42:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000380)='FROZEN\x00', 0x2001016f) 00:42:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000633a77fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 00:42:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:42:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffc7b, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x22280, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x10000, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x9) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280)='FROZEN\x00', 0x7) socket$kcm(0x2b, 0x1, 0x0) 00:42:35 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:35 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 00:42:36 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) [ 1193.489989][ T34] usb 6-1: USB disconnect, device number 2 [ 1193.520621][ T34] usblp1: removed 00:42:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 00:42:36 executing program 2: msgsnd(0x0, 0x0, 0x80, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) 00:42:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x148, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'team_slave_0\x00', 'bridge_slave_0\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3faf3a62f3c62106a2a9d457d084c6eadbdd951def3232f2d892868b7bdb4b6171ae8b5f72e3c9527691fc2b589fb24b38c0bf3f00c29b1fe0d07091cef577db"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 00:42:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 00:42:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) [ 1193.869780][ T3817] x_tables: duplicate underflow at hook 2 00:42:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 1193.929096][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1194.189077][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1194.329262][ T34] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1194.337791][ T34] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1194.349246][ T34] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1194.359784][ T34] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1194.371706][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1194.384978][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1194.397590][ T34] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1194.509217][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1194.518590][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1194.530601][ T34] usb 6-1: SerialNumber: syz [ 1194.570685][ T3790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1194.578040][ T3790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1194.610476][ T34] hub 6-1:5.0: bad descriptor, ignoring hub [ 1194.616541][ T34] hub: probe of 6-1:5.0 failed with error -5 [ 1194.866984][ T34] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1195.529765][ T3781] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 1195.779056][ T3781] usb 6-1: Using ep0 maxpacket: 8 [ 1195.931384][ T3790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1195.938692][ T3790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1196.038963][ C1] usblp0: nonzero read bulk status received: -71 [ 1196.198305][ T9773] usb 6-1: USB disconnect, device number 3 [ 1196.207463][ T9773] usblp0: removed 00:42:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000000c0)='Z', 0x1}], 0x1}}], 0x1, 0x0) 00:42:39 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 00:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 00:42:39 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/meminfo\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x2f0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 00:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 00:42:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x20) 00:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 00:42:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001e00)={0x6, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 00:42:39 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000480)='./file0\x00') [ 1197.169407][T24282] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1197.429217][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1197.549127][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1197.558339][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1197.579400][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1197.588574][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1197.603634][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1197.615723][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1197.632776][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1197.729106][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1197.738250][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1197.757372][T24282] usb 6-1: SerialNumber: syz [ 1197.790976][ T3876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1197.798326][ T3876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1197.830337][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1197.836380][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1198.080516][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1198.759810][ T3874] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 1199.029222][ T3874] usb 6-1: Using ep0 maxpacket: 8 [ 1199.193716][ T3876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1199.201550][ T3876] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1199.289011][ C1] usblp0: nonzero read bulk status received: -71 00:42:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000680)) [ 1199.477958][ T2898] usb 6-1: USB disconnect, device number 4 [ 1199.505265][ T2898] usblp0: removed 00:42:42 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) 00:42:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 00:42:42 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/1421], 0x1) unshare(0x6c060000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000a40)=""/235, 0xeb}], 0x2, &(0x7f0000000b40)=""/191, 0xbf}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0)=0xbb1, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20004851) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003280)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0xf9ea}, 0x100) 00:42:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'sit0\x00', 0x0}) 00:42:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)='\v', 0x1, 0x24000884, 0x0, 0x0) [ 1200.155844][ T3956] IPVS: ftp: loaded support on port[0] = 21 00:42:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:42:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 00:42:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1200.489195][ T2898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1200.729086][ T2898] usb 6-1: Using ep0 maxpacket: 8 [ 1200.849663][ T2898] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1200.858104][ T2898] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1200.878076][ T2898] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1200.895656][ T2898] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1200.907020][ T2898] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1200.929886][ T2898] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1200.952644][ T2898] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1200.972550][ T4008] IPVS: ftp: loaded support on port[0] = 21 [ 1201.049885][ T2898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1201.068237][ T2898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1201.087702][ T2898] usb 6-1: SerialNumber: syz [ 1201.120809][ T3961] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.148051][ T3961] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.161012][ T2898] hub 6-1:5.0: bad descriptor, ignoring hub [ 1201.167358][ T2898] hub: probe of 6-1:5.0 failed with error -5 [ 1201.405683][ T2898] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1202.572988][ T3001] usb 6-1: USB disconnect, device number 5 [ 1202.608943][ T3001] usblp0: removed 00:42:45 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) 00:42:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:42:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:42:45 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x0, 0x9, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x81}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xf8, &(0x7f00000000c0)=""/248, 0x40e00, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xb, 0x1, 0x4}, 0x10}, 0x78) 00:42:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)) 00:42:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x20, r2, 0x505, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 00:42:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:42:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:42:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)) 00:42:45 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/full\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 00:42:45 executing program 0: r0 = perf_event_open(&(0x7f00000015c0)={0x2, 0x70, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042409, 0xffffffffffffffff) 00:42:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1203.568993][ T9773] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1203.808992][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1203.933428][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1203.951297][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1203.972612][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1203.993068][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1204.017138][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1204.038800][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1204.059000][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1204.159191][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1204.168436][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1204.188487][ T9773] usb 6-1: SerialNumber: syz [ 1204.232196][ T4073] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1204.263002][ T4073] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1204.296247][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1204.319934][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1204.506036][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:42:51 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_disconnect(r1) 00:42:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:51 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)) 00:42:51 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:42:51 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0), 0x0, 0x0, 0x2}, 0x48) [ 1209.099422][ T3001] usb 6-1: USB disconnect, device number 6 [ 1209.160797][ T3001] usblp0: removed 00:42:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 00:42:51 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:42:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x6, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x400401, 0x8b}) 00:42:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:52 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188120f80ecdb4cb9cca7480cf43b000000e3bd6efb440e09000e000a00100000000280f0001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='b', 0x1}], 0x1}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="97801cfb77aae10942bf6f0abd851d277c11b40524481a97d7d113a5f28dc00242aa6426bb9dd17e18463e24ac935831d38219a37928ab8dcfe4d9ec52156a0fb8483d13d11e94b1786b0c8fcbc60d67b86d0d898e9ec1b8474e13cfa1c31d3c74377ed25923c2c0126bdef7a5dea281846916114d84f495ea35998e8086bc97c040f03df31014d8e7fc377c39bf70cab51335c79e989af4f0b59abc74edd55a91204016d6", 0xa5}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="100000000000000088000000960000007000e2a2a74fea34fc9166fa49ff03000000000000000000000000821a2c37897a5fea7df0d2c9a0dbdb0cb4d73ebc71a77e2d8404231fc178e7d547848a6b12a6d0d055be7787fc1effd274f5a03a4fe83a708a571624d77e0fbe047cf393b905cc4f8bea448acc557c90fc8ad17bae24b4e74d072ddbdcc8"], 0x1a8}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x2280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r4}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x210, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff8}, 0x0, 0x100000001, 0x0, 0x2, 0x6, 0x101, 0x400}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x20d7c99fcced72a3) [ 1209.626406][ T4151] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1209.634992][ T4151] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 1209.652669][ T4151] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1209.675748][ T4151] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 1209.685021][ T3001] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1209.959067][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1210.095385][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1210.107299][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1210.129691][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1210.146988][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1210.168937][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1210.189488][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1210.201187][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1210.309919][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1210.319093][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1210.327129][ T3001] usb 6-1: SerialNumber: syz [ 1210.370827][ T4134] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1210.378178][ T4134] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1210.440429][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1210.446491][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1210.675404][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:42:57 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:42:57 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:57 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:42:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:42:57 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000003) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='{([\x00') [ 1215.253446][ T3001] usb 6-1: USB disconnect, device number 7 [ 1215.284221][ T3001] usblp0: removed 00:42:57 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:57 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) [ 1215.408018][ T4197] ptrace attach of "/root/syz-executor.4"[4191] was attempted by "/root/syz-executor.4"[4197] 00:42:58 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') ioctl$TUNSETSTEERINGEBPF(r0, 0xb704, 0x0) 00:42:58 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:42:58 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000080)='ip6tnl0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1215.588099][ T4220] ptrace attach of "/root/syz-executor.1"[4217] was attempted by "/root/syz-executor.1"[4220] 00:42:58 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1215.629432][ T4223] ptrace attach of "/root/syz-executor.4"[4222] was attempted by "/root/syz-executor.4"[4223] [ 1215.730401][ T4233] ptrace attach of "/root/syz-executor.1"[4231] was attempted by "/root/syz-executor.1"[4233] [ 1215.899139][ T3001] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1216.169127][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1216.290342][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1216.299186][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1216.307943][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1216.328713][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1216.344945][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1216.359769][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1216.375194][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1216.489253][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1216.498624][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1216.510729][ T3001] usb 6-1: SerialNumber: syz [ 1216.550698][ T4206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.558405][ T4206] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1216.600625][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1216.606667][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1216.820832][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1217.078100][ T4206] udc-core: couldn't find an available UDC or it's busy [ 1217.085777][ T4206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.141512][ T34] usb 6-1: USB disconnect, device number 8 [ 1217.169405][ T34] usblp0: removed 00:43:00 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:00 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 00:43:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 00:43:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x4f}}) 00:43:00 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1217.722307][ T4268] ptrace attach of "/root/syz-executor.4"[4266] was attempted by "/root/syz-executor.4"[4268] 00:43:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 00:43:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1217.776722][ T4272] ptrace attach of "/root/syz-executor.1"[4269] was attempted by "/root/syz-executor.1"[4272] 00:43:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) 00:43:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000022c0)=""/4070, &(0x7f00000010c0)=0xfe6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 00:43:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) [ 1218.149299][ T9773] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1218.389002][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1218.509133][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1218.519058][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1218.527885][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1218.546889][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1218.569709][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1218.584193][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1218.598580][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1218.690151][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1218.699765][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1218.708032][ T9773] usb 6-1: SerialNumber: syz [ 1218.740707][ T4282] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1218.748509][ T4282] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1218.780364][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1218.786395][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1218.994751][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1219.246261][ T4282] udc-core: couldn't find an available UDC or it's busy [ 1219.253433][ T4282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1219.304968][ T9773] usb 6-1: USB disconnect, device number 9 [ 1219.331557][ T9773] usblp0: removed 00:43:02 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x1}, 0x8) 00:43:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:02 executing program 0: chown(&(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 00:43:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 00:43:02 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40087602, 0x0) 00:43:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newnexthop={0x18, 0x26, 0x1}, 0x18}}, 0x0) [ 1220.289088][ T9773] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1220.549064][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1220.669299][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1220.677696][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1220.693330][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1220.709232][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1220.724045][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1220.737787][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1220.753318][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1220.849123][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1220.860074][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1220.868168][ T9773] usb 6-1: SerialNumber: syz [ 1220.901275][ T4343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1220.908642][ T4343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1220.940283][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1220.946343][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1221.161860][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1221.419092][ T4343] udc-core: couldn't find an available UDC or it's busy [ 1221.426113][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1221.485822][ T8551] usb 6-1: USB disconnect, device number 10 [ 1221.520232][ T8551] usblp0: removed 00:43:04 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:04 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x222000, 0x0) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0) 00:43:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cbbd2", 0x30, 0x3c, 0x0, @mcast2, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bac791", 0x0, 0x0, 0x0, @dev, @remote}}}}}}}, 0x0) 00:43:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200)='nl80211\x00') sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001240)={0x20, r1, 0x619, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:43:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ppoll(&(0x7f0000000ac0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1222.499019][ T8551] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1222.738983][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1222.859819][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1222.868317][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1222.884151][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1222.898975][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1222.913882][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1222.928426][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1222.944091][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1223.039884][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1223.050044][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1223.058452][ T8551] usb 6-1: SerialNumber: syz [ 1223.090635][ T4422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.105693][ T4422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1223.130792][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1223.138156][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1223.352840][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1223.969918][ T4416] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1224.218997][ T4416] usb 6-1: Using ep0 maxpacket: 8 [ 1224.381979][ T4422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1224.398403][ T4422] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1224.469031][ C0] usblp0: nonzero read bulk status received: -71 [ 1224.620624][ T9773] usb 6-1: USB disconnect, device number 11 [ 1224.635279][ T9773] usblp0: removed 00:43:07 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:07 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:43:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="0587c89e3ece479d441f07123f0eb6eca50beceb86c0e1468c4b1dd9e1d537fe99e48e70fd93a71959d62cb277b7cd3f5100b2887176aa9053bbc1e3369214e6294be1e38ded53571a0f65919ce15562d9218f8e90fe2c32b5a76031004956a10bc35cc0c438d4095aec9b96e8dc356f90caece316300093b1d00f5793d25cec75073fa1b21ded8f9caa8fca7e1b65064a809291f97402d9acd425d0a4d84a7d3a0bee22a95c8dde62dd1364d84289279dfc8ccaa568a54d8c6ecd9449e7c5c719f147c01cc4405b1145f0d32207cdcc9768b733f9a0f21f1c0233813575b7aa166fbf756157dcf0433b0442ec5949fe0d72affa587de570f4bb94bf883460b0e9fcd6fe0813b9f9118c95dafdb61e025e427fe55e2bab4516a3c8bf207e6004388abfa5f74d5e83f6302050f208cb23d39bc085e0af9e700e1375b38b3c3f9821263c1ce41136ad76e09650989ed24ca5342205648a4670b4c6c6491c19b833d23ebef0fc2e2598ba439fa738d263d211", 0x171}], 0x1}, 0x0) shutdown(r0, 0x0) 00:43:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="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", 0x171}], 0x1}, 0x0) shutdown(r0, 0x0) 00:43:07 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)) 00:43:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)) 00:43:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="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", 0x171}], 0x1}, 0x0) shutdown(r0, 0x0) 00:43:08 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1225.599035][ T8551] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1225.859006][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1225.999178][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1226.007710][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1226.027102][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1226.039889][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1226.053781][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1226.064332][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1226.075696][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1226.179150][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1226.189643][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1226.197784][ T8551] usb 6-1: SerialNumber: syz [ 1226.243658][ T4493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1226.266200][ T4493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1226.290994][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1226.299631][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1226.515387][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1227.171731][ T4487] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 1227.439116][ T4487] usb 6-1: Using ep0 maxpacket: 8 [ 1227.591099][ T4493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.598251][ T4493] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.669003][ C0] usblp0: nonzero read bulk status received: -71 [ 1227.834180][ T8551] usb 6-1: USB disconnect, device number 12 [ 1227.845436][ T8551] usblp0: removed 00:43:10 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 00:43:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="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", 0x171}], 0x1}, 0x0) shutdown(r0, 0x0) 00:43:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @local}}) 00:43:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:11 executing program 0: setreuid(0x0, 0xee01) msgget(0x2, 0x310) 00:43:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0x4010aefd, 0x0) 00:43:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 00:43:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8007ff3, 0xe2002) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x43, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0xbb8) 00:43:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}) 00:43:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) [ 1228.829163][ T8551] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1229.079088][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1229.211191][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1229.219704][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1229.228449][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1229.249628][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1229.261656][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1229.271755][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1229.281688][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1229.369636][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1229.378711][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1229.395626][ T8551] usb 6-1: SerialNumber: syz [ 1229.426523][ T4557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1229.446952][ T4557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1229.460408][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1229.466433][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1229.686286][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1230.349752][ T4555] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 1230.617586][ T4555] usb 6-1: Using ep0 maxpacket: 8 [ 1230.791757][ T4557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1230.801107][ T4557] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1230.869051][ C1] usblp0: nonzero read bulk status received: -71 [ 1231.032425][ T9773] usb 6-1: USB disconnect, device number 13 [ 1231.055817][ T9773] usblp0: removed 00:43:14 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:14 executing program 0: madvise(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000003000/0x3000)=nil) 00:43:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, 0x0) 00:43:14 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="0f0836660f3a633ea466bad004ec2ef30f08f00fb18500000000670f01cb660f388054fe04660f3a0aef07cf66ba4100c166ed", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:43:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4004ae86, &(0x7f0000000400)={"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"}) [ 1231.762274][ T4635] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 00:43:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, 0x0) 00:43:14 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:14 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:43:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, 0x0) [ 1232.009002][ T9773] usb 6-1: new high-speed USB device number 14 using dummy_hcd 00:43:14 executing program 0: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000006c0)='{\\\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$kcm(0x2b, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8940, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@ethernet, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/237, 0xed}, {&(0x7f00000002c0)=""/71, 0x47}], 0x2, &(0x7f0000000640)=""/124, 0x7c}, 0x300) r2 = gettid() perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x22280, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x10000, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x0) [ 1232.262549][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1232.379184][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1232.388656][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1232.403110][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1232.413833][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1232.426452][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1232.437237][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1232.448479][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1232.539229][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1232.548554][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1232.566853][ T9773] usb 6-1: SerialNumber: syz [ 1232.605193][ T4637] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1232.622639][ T4637] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1232.644482][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1232.654191][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1232.853164][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1233.470172][ T4636] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 1233.719034][ T4636] usb 6-1: Using ep0 maxpacket: 8 [ 1233.871377][ T4637] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1233.878768][ T4637] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1233.948965][ C1] usblp0: nonzero read bulk status received: -71 [ 1234.117353][ T3001] usb 6-1: USB disconnect, device number 14 [ 1234.145543][ T3001] usblp0: removed 00:43:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000900)=""/209, 0x1a, 0xd1, 0x1}, 0x20) 00:43:17 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:43:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000a80)="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", 0x1000}, {0x0}, {&(0x7f0000001b80)="c0", 0x1}], 0x3}, 0x0) 00:43:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:17 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:17 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040), 0xc) r1 = semget$private(0x0, 0x4, 0x1b2) semop(r1, &(0x7f0000000400)=[{0x1, 0x100000001, 0x1000}, {0x2, 0xfffe, 0x1000}], 0x2) semop(r1, &(0x7f00000011c0)=[{0x0, 0x82}, {0x2, 0x2, 0x1000}], 0x2) 00:43:17 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) fchown(r0, 0xee00, 0xee00) 00:43:17 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) getitimer(0x2, &(0x7f0000000100)) 00:43:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x9, 0x3, 0x4, 0x5}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)='p', 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) 00:43:17 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040), 0xc) r1 = semget$private(0x0, 0x4, 0x1b2) semop(r1, &(0x7f0000000400)=[{0x1, 0x100000001, 0x1000}, {0x2, 0xfffe, 0x1000}], 0x2) semop(r1, &(0x7f00000011c0)=[{0x0, 0x82}, {0x2, 0x2, 0x1000}], 0x2) 00:43:17 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0xc0189436, &(0x7f0000000000)) 00:43:17 executing program 3: socketpair(0x28, 0x0, 0x5, &(0x7f0000000000)) 00:43:17 executing program 2: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)={0x300}) 00:43:17 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040), 0xc) r1 = semget$private(0x0, 0x4, 0x1b2) semop(r1, &(0x7f0000000400)=[{0x1, 0x100000001, 0x1000}, {0x2, 0xfffe, 0x1000}], 0x2) semop(r1, &(0x7f00000011c0)=[{0x0, 0x82}, {0x2, 0x2, 0x1000}], 0x2) [ 1235.099223][ T8551] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1235.379090][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1235.535817][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1235.545744][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1235.565530][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1235.579868][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1235.591463][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1235.602050][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1235.612491][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1235.699315][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1235.708424][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1235.725740][ T8551] usb 6-1: SerialNumber: syz [ 1235.774872][ T4715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1235.789130][ T4715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1235.810678][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1235.816728][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1236.032183][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1236.070282][ T8551] usb 6-1: USB disconnect, device number 15 [ 1236.091433][ T8551] usblp0: removed [ 1236.599314][ T8551] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1236.859086][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1237.010295][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1237.018693][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1237.029581][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1237.041098][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1237.052826][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1237.064769][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1237.075265][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1237.179873][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1237.189331][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1237.197348][ T8551] usb 6-1: SerialNumber: syz [ 1237.231615][ T4712] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1237.249473][ T4712] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1237.270680][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1237.276742][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1237.480767][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1237.530250][ T8551] usb 6-1: USB disconnect, device number 16 [ 1237.556063][ T8551] usblp0: removed 00:43:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:20 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) 00:43:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x6d) accept4(r0, 0x0, 0x0, 0x0) 00:43:20 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040), 0xc) r1 = semget$private(0x0, 0x4, 0x1b2) semop(r1, &(0x7f0000000400)=[{0x1, 0x100000001, 0x1000}, {0x2, 0xfffe, 0x1000}], 0x2) semop(r1, &(0x7f00000011c0)=[{0x0, 0x82}, {0x2, 0x2, 0x1000}], 0x2) 00:43:20 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe, 0xfd000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0xf2ffffff, 0xfffffffffffffe7e, 0x1d4}, 0x28) 00:43:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000f40)={&(0x7f0000000d80), 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:43:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000200)={0x0, "bb058eb03c0e3751ca17313272db564bde81d1ded221edcce88335871bce84dae79b48ea4a51229325c7529073230a7d4abfad823528d4d82e471a3458594d9d"}, 0x48, r0) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, 0x0, 0x0, r1) 00:43:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) 00:43:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) 00:43:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c000003"], 0x3c}}, 0x0) [ 1238.399105][ T9773] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1238.454306][ T4823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.465946][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.659008][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1238.779648][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1238.788089][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1238.807528][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1238.818155][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1238.835480][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1238.859020][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1238.873409][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1238.959808][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1238.969420][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1238.977663][ T9773] usb 6-1: SerialNumber: syz [ 1239.020719][ T4797] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1239.035918][ T4797] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1239.060240][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1239.066267][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1239.305644][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1239.371686][ T9773] usb 6-1: USB disconnect, device number 17 [ 1239.386670][ T9773] usblp0: removed [ 1239.859015][ T9773] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1240.104151][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1240.229141][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1240.229192][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1240.229222][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1240.229282][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1240.268535][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1240.291748][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1240.307467][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1240.399561][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1240.408779][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1240.425765][ T9773] usb 6-1: SerialNumber: syz [ 1240.464183][ T4794] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1240.485159][ T4794] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1240.500343][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1240.506368][ T9773] hub: probe of 6-1:5.0 failed with error -5 00:43:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1240.735715][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1240.800508][ T9773] usb 6-1: USB disconnect, device number 18 [ 1240.825738][ T9773] usblp0: removed 00:43:23 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="190714e541242f06695bec97ef82a90c"], 0x14}}, 0x0) read$alg(r0, &(0x7f0000001580)=""/4085, 0x200025a1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'macvtap0\x00', {}, 0x2}) 00:43:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) 00:43:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 00:43:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) 00:43:23 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4c8fa5", 0x10, 0x2c, 0x0, @remote, @local, {[], @ni}}}}}, 0x0) 00:43:24 executing program 0: syz_genetlink_get_family_id$fou(0x0) pipe(&(0x7f0000002ac0)) 00:43:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1f) 00:43:24 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xffffffffffffffff) 00:43:24 executing program 0: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1241.669127][ T8551] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1241.939063][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1242.089113][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1242.098081][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1242.111018][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1242.123622][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1242.135665][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1242.147916][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1242.159918][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1242.269257][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1242.278443][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1242.293984][ T8551] usb 6-1: SerialNumber: syz [ 1242.320839][ T4895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1242.328240][ T4895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1242.350323][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1242.356374][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1242.594237][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1242.659933][ T8551] usb 6-1: USB disconnect, device number 19 [ 1242.692671][ T8551] usblp0: removed [ 1243.129027][ T8551] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1243.389087][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1243.529172][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1243.541831][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1243.551489][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1243.561536][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1243.574374][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1243.585035][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1243.596533][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1243.719325][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1243.728510][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1243.744392][ T8551] usb 6-1: SerialNumber: syz [ 1243.781664][ T4887] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1243.795126][ T4887] raw-gadget gadget: fail, usb_ep_enable returned -22 00:43:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1243.830262][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1243.836290][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1244.054344][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1244.104201][ T8551] usb 6-1: USB disconnect, device number 20 [ 1244.117620][ T8551] usblp0: removed 00:43:27 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002"], 0x80}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 00:43:27 executing program 2: get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)) 00:43:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x24, 0x400, 0xc}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f00000007c0), 0x0}, 0x20) 00:43:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2080b}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r4, @ANYBLOB="80"], 0x20}}, 0x0) 00:43:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0) [ 1244.671248][ T4964] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1244.700582][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1244.802099][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1244.909065][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state 00:43:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/exec\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 00:43:27 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee01) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r2, 0x0, 0x0) [ 1245.069718][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1245.083003][ T9773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.090225][ T9773] bridge0: port 2(bridge_slave_1) entered forwarding state 00:43:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x125e, &(0x7f0000000040)) [ 1245.189612][T24282] usb 6-1: new high-speed USB device number 21 using dummy_hcd 00:43:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) [ 1245.379037][T24282] usb 6-1: device descriptor read/64, error 18 [ 1245.649009][T24282] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1245.839204][T24282] usb 6-1: device descriptor read/64, error 18 [ 1245.959741][T24282] usb usb6-port1: attempt power cycle [ 1246.669091][T24282] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1246.839291][T24282] usb 6-1: device descriptor read/8, error -61 00:43:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1247.109210][T24282] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1247.282275][T24282] usb 6-1: device descriptor read/8, error -61 [ 1247.399555][T24282] usb usb6-port1: unable to enumerate USB device 00:43:30 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:30 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20020008) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) 00:43:30 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) 00:43:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 00:43:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x0, 0x1012, 0xffffffff}, 0x0, 0x0, r0, 0x0) madvise(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x1, 0x40010, r1, 0x6c87) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:43:30 executing program 3: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 00:43:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1, 0x0, 0x0) 00:43:30 executing program 2: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)=ANY=[], 0x58, 0x0) 00:43:30 executing program 3: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 00:43:30 executing program 0: ftruncate(0xffffffffffffffff, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1248.279072][T24121] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1248.489073][T24121] usb 6-1: device descriptor read/64, error 18 [ 1248.790366][T24121] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1248.989273][T24121] usb 6-1: device descriptor read/64, error 18 [ 1249.121782][T24121] usb usb6-port1: attempt power cycle [ 1249.859076][T24121] usb 6-1: new high-speed USB device number 27 using dummy_hcd 00:43:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1250.039257][T24121] usb 6-1: device descriptor read/8, error -61 [ 1250.309139][T24121] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1250.499097][T24121] usb 6-1: device descriptor read/8, error -61 [ 1250.629817][T24121] usb usb6-port1: unable to enumerate USB device 00:43:33 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:33 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 00:43:33 executing program 2: semctl$IPC_SET(0x0, 0x0, 0xd, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) 00:43:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002dc0)={0x10, 0x2a, 0x73d}, 0x10}], 0x1}, 0x0) 00:43:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x541d, &(0x7f0000000000)) 00:43:33 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:43:33 executing program 2: request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 00:43:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000003580)=""/4080, 0x1a, 0xff0, 0x1041}, 0x20) 00:43:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 00:43:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b45, 0x0) [ 1251.379031][T24121] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1251.579115][T24121] usb 6-1: device descriptor read/64, error 18 [ 1251.879035][T24121] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1252.078964][T24121] usb 6-1: device descriptor read/64, error 18 [ 1252.209254][T24121] usb usb6-port1: attempt power cycle 00:43:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1252.949051][T24121] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1253.139124][T24121] usb 6-1: device descriptor read/8, error -61 [ 1253.409244][T24121] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1253.621450][T24121] usb 6-1: device descriptor read/8, error -61 [ 1253.739855][T24121] usb usb6-port1: unable to enumerate USB device 00:43:36 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) 00:43:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101441) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x2e0) 00:43:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') lseek(r0, 0x0, 0x1) 00:43:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:36 executing program 0: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 00:43:36 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) madvise(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x10) 00:43:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101441) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x2e0) 00:43:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101441) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x2e0) 00:43:36 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0xc80, 0x0) r0 = inotify_init() r1 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000013c0)=ANY=[@ANYRES64=r2, @ANYBLOB="b5b50e84a33bd9a4f8a271634ca81d0ae5b639e45eee8f44509ede7889e47fe6ba4735729298d6f822219184b6cc68e75a0aaae99ed7d7f1080400f17c805e62d220bb4405c32a9185d89a646612b38155d95d002b9ee824463e339abb0af22912b56ef28b0936c4275006310cee8cd11435f23ec6bc77ca9efc477a736588bbef8c566bf50362ebfe306945db7e2866eb35d7d987b6e6e466a05b7b6e1ac3151775de8df79c098d21058e7891b19ba0f21185f58a76e35efae0bfffe0f3ea"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x2900, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{}, r4, 0x4, @unused=[0x80000001, 0x8000, 0x8, 0x80000000], @subvolid=0x8}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)=r4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000500)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000440)={0x0, r2, "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", "80a9a909807773ccb72cb42c9e18084104480adcd32864d04f66e83739e0ac984eb09172b1d844cc73ded28fd3dec71858babebd89a68336f0510649bb32c28ac7b4e7690c55b8d87cf2f0e2daf7cd4d655871b576499d4fa8913dfff4efc12bb161b25b86c2beb9d1f2f9ecc3de9aa724d28080f5dca2b33e912519f7216384cb6bd79f857b5b7f036e9625e24dec4d1b0581f8cfd8c770ef49428f4df346d600b16e5f02a76e1951d3516830cb8402faff370b8185353d0358da7486d0672ed91bdf4896e335523b3d382b193ba789d3a14e2aa3fcbe56c784e4e0aaf5dc04e8f2f479bd7da880d3de220079244905d08a5721ce395ccd065af55ba9c0bc5c879519b1a54fdbb8ac432e2f60f95ef220ea679e2fd7332ebf148c16c4db0020db801b57b020929f18e7625fbcf5e7cddb0fba8cffdd0e34ddbc8387924c72a0b9a8e9bbc4392c38aca9d13ec579edd11a6a9088dab7ce866c74d64b97b759fe59013abc8f25df182d94bf3a15f5ab974d3612f367b0591fed0011d25f0cce7e8ce99739359120bb4c44783ad8db39ffd683d865c86f86f36836f892db936c023440c7cb36ae1318e718083b3b854a4dedbd13612c3dfcb50cf18e8e46698d61a9466fe79b271a1c9f45248638a69ad50824a99410a61fe6b4dc04a3f8e317396d224f0a8e2388aa15082e4ba19f7e0bdfcd1094e148de17b071857ac1b78dfbc49d5bbebc8ee9cc357dd6dd80357e886254cb7ee5061e6d8fd234d77204492b473f11232b3873b25bc5f6014751b73a30130d30f7cc2fdd69e2145f737d97bdb8d42d7c4ba4f58efeb0d9329c7485b674d9e3d24f7393ac1146a0844228196e7bc37411004d8386b220a17463a0f85e4764dd0de5f4f52f7f16ccf91ac28ef948dfa8c3ccac7dcdfebf90e4b0262526394aa621dfb8c7100c528d336d9a6601b3beece4ba804702e55918d28aa9e1d15ba6f63d14d3fdbcaa2517fd2bfdb0fcae9f189923ebf6cea806dd516ce010b2332ac765c33dda58aec45e1ca79c2a6640dfc32f0f6c2522544b01e7f1e530333fee1b1ee3559478f358987c3fe8757fbd4e2c133c506130ea02dab64545b988fbfba8dd43f1ccec250ff25daee86458a3419d62611a585aaac8fe4d121a8e1dcd966ab51fe98e3b3640a6a0f62455a02c248dcaaea04d03bb8ce38e83bc8267470ff5fbb6a771fbe9f30c82f359d10d4b8e8a88212a2c40ef3f76017ea01a3a59e362a4e9347b439a3e36665064c0d3de62bc8e2e77940d17e27588ee028f6909026ca8a1dae15b8a8146223022c7decf22056a5a0bf073badd9053ad5a6c806c4447c79c8906b477bba4b08ae3a83bd295628662f3ec2b506a5f2df2d794fe32c093804a7d0be3ceb9d83d5e3b5f9c9bcb63fcf6e4f8279c26ff36f7e19c01ea18448b9e965f8e584ddddd7b5de7657406b951cdf66e7c90fc94d3018935633cd0af585039066e217890201fd2a662cf6ae343055d0e6b314a952a0349bd6c7c4dd6ae0981010c37af6bf6312a53fb401ca1f8d9a894a444658c473f7530346d3db96f138db7fd744106a44511b84605a2ceb28a9f74a778c0d18cb871e23361170c6f8e4097bc132416e905c8cc627a6a068ddc5ce6d70991407eb7079ef1e7eb93b35a5d54fdf02b41e80586bf483e367eb74c9669df0b63b3e397b6d83bb8b2f455deeeb801ba5a62d37bc6c8e844e05647151f0fb8d5193007508241ef9fb0a2477b57236b421c637aef81d1dddedb845f2cc74b09a35f9e8963836298e742ed42b5bef505792a5a6cd15de24fbfd7fdff0ce69845e7702067875c2e420b6a44ce25cbb218a1a8fabfd1b285e402556ad3444707ae75fecafd013084d98c96cfa680dfb6bc3090663dc72eb0fd4b3f7ce51a2ea3555739965ddc615d92e95c3b844e6d2088fcdce1cb2fb5f4ed839951f6bf74bda2ff4ff74be9fe99b342ad7f11a4578c99b66a1d80741cc98675ff796e8ae69b42841172280393e599f8e42025776a971d18af3136a20da8ca1675b64254a760108ad3b9c4a588ee06583432345ebe9152d217e6a63d68c324ca423b167f0a2ea841315be074960121cba6843f7b9162aaf70b7f806c11561f525b3ed0be0f653a4db7a5527d7feadadf4a84253a0e22d58aea82cfab2b6231baedac474da631afe30a7d07c73edd4e94069e9988129a10018c21aa4a2f9701d86df1a6c211f6038301d5ec9666b1b8a596d5b4514f2ad6674e3c283860cc20a5ef93c68b790752e32fc65d1e632f9a1690cb1a7b7abdfba3351612bac4c6d299a3ad087bbce9b18590afe355651831bd32f2a12fc5e3de1b906f171e8f61691d25f1846fb2c2bde44b9520c9328845d34bad83ef8bf3d2f1f007a353568e26b69adcf9ce0c0edb82a4f671acd3421508d0e4c9cf0ca5d5519077fed55dcff3a926e6bcd3d3650a12a3a39e17209c253bd6b2c95617c741cd571a60a840f87c8cd234609c61686b3b378a37880a033e0be60f992e130d55658fa0abd83cc729115d01d1bba4ed2d393ece198684671ae4af428b3606a8ec0a45def9ce8f26222fea4eb4b998cb6f293194722d8c1f36b17ab56cfee57d381fe67cc46d67438f942af6027c9c58ce3506d7a0ac9af9b46292324884807e807c3d9b98bb01b3ef71138fd80114bfa56cc49c9e6ee907d23cdd71d3d32dd58b597f4f8195db4a1b86280536e8377459dde58d7147a369eeffedcc7164256ff34e4a885c4e792fd4854f30c7b292e14a0b884de405b1e97882f21e2a67ee940ab764702627a0c0c5af59c6a43e8caea52449dc61fd6f1011a129378a135f6d1b752f2418bae0a61124b5443daff1594b523f7f1df48edaf160adf8accb347f811b6d6e2d4430d519b3c22863418e2397281f534633c7431f5d4392608f4df6c0441fe50b8249a8315d1fc5c19664afe91d6526528fd0b1f2c8b42ac9451b42c37ba9b2008483ab7292f04b747b641fcbf0c439f943584222da184f30109e72e3b8b7d583cb0eccb3a10fda80eeb62f618bfa4562d6985047f610ad18eb9b25c0318d6ee7cd06eadf402e8433e4ca31588c2e6ce6e74794efb15cdd5686130ddba71a0dc5d114c30fde92b457eb6b78532214a8a7bf7e144665516aac426f8e8480229b07a8cb83821b30fa9ae7519f1a9b6748c68c3fd27ef7a1fbf56a226bc9359461fbf15fd82e3792aea73dd61d51670a50ed4a43267a5cd23834c8a2c44b3b5ae2d37482b4918c3da7c6b8d910022612de1a008646dde9988bf770e6637528a01d29a302baec4544006534f5580964e8bdfd2c1e6fe40710e91cd85da67c4038c6cf92884c3ec4fc14c62aad877efb06e13b0a87c2b758a1897a8788b9845a916f12350b825380dce90bd4feccac2286d15b083229b163e39a108697a339a769f313f2fdbb7f3244c466b0b60b4ff2c5ff9c73ec3d9b5af59a83196203503f08f2da4d2ad62819a75f59f3dfe242e27ebab960cac825a110db38d869ecf491bdac63a8736e8659f4296bc10114fa491cc009f1af9ec05f8d03cec7bddcf899eae8dea2d65b59a6fdd8e42dde7b49afc205a89e5a4ed81c040413ccadc96c9cf0679f677a18abca8d9aeac7a9edd0d4893fe7845dfb3783aa680eb54de4c866963805bbc14bf536af3cca841f8b88bf05011b99b3145c167dce14c5a111cd39880178ddd22f94994c4d990d32a8f9bbc056bb5d6d7aadecbda8e0faaa2fa2eb6933256cdfa075798005ca08ab20e1a3aed7a3d9782adf96123c7959cbbe10cc079253a5b06386d029a530753580c09fcdbb83e4a4ef83335c0d0982f37a86f8a5c583201f5ecf8ca56916e7382df415780236328f4db04169d86ff766c29afab80285c82c7e6a347b90caef08cb78efd62083fcf8ba6496070c1407e6c24588b7048e0fdb8edeeee3c1e899f915692705d1d02536c50cb684545ef73aba2263bc88d6bd616a2c6bd05cef7f4400ec804498271d7bc07dfc353adc5a552e6df36f91e7b307e016677d454f5f55677f2fae5dc4458e3f439731a5a7ecefe8c11c2000f27a72e24beec4250cebe3f279d88a754bbc034d8c66d280153cd27ee4549e93ca3d12fe06eb938361b90bac55b4c98434acb2bd8a0e057876b16c214881c1d77ba5946570249678706eb1d522f98904bf7115956b97ba457e8e1cb2c1f9669d4e0c30e2b480482338b70a71758cdae0d00be2d7b7711520f19ea0bd8786858a3741b5e3cd8c2a75ac6dc412e521cb140ab8f1dde24dce8c1761924173e1e3ea1280b778eca95b6ebdca1235b50a8854787a4c77e8d48867da4a9c49557219df1efafb5fdfb415dd483dd97d9ca11d76e9a186870b3d460934586b3991a92da8419a8b011a7225a1fbde6e50778ab379829751c73fa46a4c0c0c3c4d016a188cff9ba0e7e6416f15d2866739988421c99e4dc84bfe4ff3d7f2b9b54f8e694029ddc6d4ae171a01bd47bf2aa2526d93851728384a81b153a139ae9dd313ecedcf40f5f8a8f3394bd0fc953df5e04d82dd712fb9f07ceef3ab3e12807f0fabfa02e292a1a92eb7e45353b036156d814f21fabb87dece7129281ee2e6ac5cdfc0004cafab58503876e0289dbe8261355d2864b06c9579dfc9a4ce782cd4deecb41eb9bb1c78ae0bf2ff014de153e1409c66ceb66f3bac49b765f0b044992e5ad00c7497d91c038e3e9e4e1278915fce744f12ae48aca0498c84d5ae00747755a3a33f1520f0bb87ce11f83c24e32868cab1a43955f098227f39a8e2a0b4d82f8e42895d2630b5236552e50622a674063be9b23561ad9d6a95ce0d0d408a9c550cf886ffb7f5b6ceabe25636baa1d0d3026746588652ab4d54dd179dee9895c2fe7b391f084fb1fff6a3018e161d03c149b215ce343c3f25dff2bcec7dfe11014d7558e31105df4013ff962204f958992146bee6df2e100138fa90252f1b6a0c151a5f0db98ec962f58ae2298f3c612663f5acff6c356656b0ec9195be0704230dd9cef816ddb910573a13804e4fce68f17390cf50870f6951718d1dffa24c48deea73ff9924bcf56cf01dfa21ba26083aa017566e908d19ae2f3deed0ff17e559ac91c7911539cbbe39f299c0e5964269ad5b30f3033d8a14e5728b7e97c50b52dc315cb2429af4903c04bb1855bf618307bdd6d40f043e8a409d825078198ee65ae4ae944061b347dd0be78add2bbacbf69a0d86c332fdd7e03bc2704b4bfe7b4302d25aa1c4d0ee4fbb86ed6522493b80128be748f41c4b03b03edc17871c4e484db6b61a7dae3ab2782425168233cbebc2202f0f55d21805b94b72936398c2fe0c9395f74811be80b9bac88188fd912d4298573a401d032e3980fca2284ef6a4eaa5a8606fb126ad81ce8b9f5587007f0888e992cb"}) 00:43:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x101441) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x2e0) [ 1254.289107][T24121] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1254.539125][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1254.669091][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1254.677641][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1254.690002][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1254.701915][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1254.713607][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1254.724302][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1254.734963][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1254.849272][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1254.858488][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1254.868700][T24121] usb 6-1: SerialNumber: syz [ 1254.910699][ T5080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1254.926730][ T5080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1254.960546][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1254.966618][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1255.206968][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1255.840122][ T5079] usb 6-1: reset high-speed USB device number 33 using dummy_hcd 00:43:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1256.089064][ T5079] usb 6-1: Using ep0 maxpacket: 8 [ 1256.241391][ T5080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1256.248622][ T5080] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1256.318946][ C1] usblp0: nonzero read bulk status received: -71 [ 1256.477270][ T8551] usb 6-1: USB disconnect, device number 33 [ 1256.499794][ T8551] usblp0: removed 00:43:39 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:39 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(r0) 00:43:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000630477fbac141414e0000801be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 00:43:39 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000900)={'veth0_to_batadv\x00'}) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188120f80ecdb4cb9cca7480cf43b000000e3bd6efb440e09000e000a00100000000280f0001201", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="97801cfb77aae10942bf6f0abd851d277c11b40524481a97d7d113a5f28dc00242aa6426bb9dd17e18463e24ac935831d38219a37928ab8dcfe4d9ec52156a0fb8483d13d11e94b1786b0c8fcbc60d67b86d0d898e9ec1b8474e13cfa1c31d3c74377ed25923c2c0126bdef7a5dea281846916114d84f495ea35998e8086bc97c040f03df31014d8e7fc377c39bf70cab51335c79e989af4f0b59abc74edd55a91204016d6745726", 0xa8}], 0x1, &(0x7f0000000380)=ANY=[], 0x1a8}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) gettid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'bridge_slave_1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r2}) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x20d7c99fcced72a3) 00:43:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1257.047537][ T5135] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 00:43:39 executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4eb9, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x6180, 0x800, 0x0, 0x5, 0x8, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000600)='wlan3\x00\x1b\x1a\xec\xb5\xb0\xbd\x99\v\x00\xb9\xe1p\'f\xb1\xe14\xea\x86\x04\xfb\xeeC\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde9&\xdcU\xb8\xe5\x90y\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\x00l\xaad\x9a\xa041/\xd1\xe5\xdf\x96op\x9a\x16\x81N\x1b>R\x05\xb0#\x00\x00,\xeb\x10V]\xd8\xe1~C\xb0.\xfd\xdc\xe4wDy@c\xbf') recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000007c0)=@nfc, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=""/250, 0xfa}, 0x60030101) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0xff, &(0x7f0000000040)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/223, 0xdf}], 0x3}, 0x16123) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0xc) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x804, 0x7, 0x0, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0x9}, 0x3a) r4 = gettid() perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001f80)={0x2, 0x70, 0x40, 0x8, 0x7, 0x4, 0x0, 0x2, 0x614030bbc056506a, 0xcdd3f34d7821d21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x48d, 0x8}, 0x41040, 0x5, 0xffff, 0x4, 0x7, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x1a) r5 = perf_event_open(&(0x7f0000000480)={0x4, 0x70, 0xc, 0x5, 0x1d, 0x84, 0x0, 0xb1, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000000, 0x5, @perf_config_ext={0xffffffffffff8001, 0x1}, 0x204, 0x1, 0x7, 0x3, 0x1ff, 0xe3, 0x9}, r4, 0xd, r3, 0x2) close(r5) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000001a008104e00f80ecdb4cb8fc02000004a1dc0200810040fb12000200ac14141b40d8000000000000000e", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x4000886) [ 1257.106010][ T5135] team0: Device ipvlan0 failed to register rx_handler 00:43:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b707030000009e4ef086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:43:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000000640)=@sco={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 1257.346973][ T5153] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1257.419158][ T9773] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1257.438278][ T5135] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1257.466171][ T5135] team0: Device ipvlan0 failed to register rx_handler [ 1257.659072][ T9773] usb 6-1: Using ep0 maxpacket: 8 00:43:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) [ 1257.779174][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1257.787680][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1257.822876][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1257.849500][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1257.871334][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1257.883554][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1257.897279][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:43:40 executing program 3: ioprio_set$uid(0x0, 0xee00, 0x2007) [ 1257.999215][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1258.008317][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1258.027077][ T9773] usb 6-1: SerialNumber: syz [ 1258.070731][ T5142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1258.085980][ T5142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1258.111210][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1258.117238][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1258.340686][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1258.959667][ T5140] usb 6-1: reset high-speed USB device number 34 using dummy_hcd 00:43:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1259.209023][ T5140] usb 6-1: Using ep0 maxpacket: 8 [ 1259.361843][ T5142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1259.372406][ T5142] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1259.439002][ C0] usblp0: nonzero read bulk status received: -71 [ 1259.598113][ T8551] usb 6-1: USB disconnect, device number 34 [ 1259.625978][ T8551] usblp0: removed 00:43:42 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000600)) 00:43:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/7) 00:43:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000003c0)=""/232) 00:43:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8}]}, 0x2c}}, 0x0) 00:43:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "98ca0ebe29bdafa92de63d5a196244f27645934defc5265f46b4869c7a7df48f", "8e29aa4d572f7530e325aeaf6522ce8eb75559a7e6771ba958246c5709f1a5c2", "8c97b1cc4f08557aa6c94fb5ff9edcb0a2c9729762343002377fc2c2389436b1", "5cbade4e69eca77ef15d32e3d52607cd8b1c9c28ecc7bc72d4b7ddd21e9167e6", "1fc23e5c23df5e73a53ed65e41935ec86d567a62719ed7cb8c573b91a61db428", "bc6a72c1166ef554033b5ae4"}}) 00:43:42 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040), 0x0) 00:43:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800090100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r2, @ANYBLOB="110008"], 0x3c}}, 0x0) 00:43:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x41002, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x9) 00:43:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) ppoll(&(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1260.559251][ T3215] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1260.819003][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1260.961535][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1260.970222][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1260.987561][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1260.997496][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1261.009053][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1261.019369][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1261.029967][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1261.149403][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1261.158591][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1261.180431][ T3215] usb 6-1: SerialNumber: syz [ 1261.201521][ T5210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1261.215076][ T5210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1261.237911][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1261.253702][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1261.474815][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1262.110213][ T5209] usb 6-1: reset high-speed USB device number 35 using dummy_hcd [ 1262.359182][ T5209] usb 6-1: Using ep0 maxpacket: 8 [ 1262.521791][ T5210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1262.531287][ T5210] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1262.589013][ C0] usblp0: nonzero read bulk status received: -71 [ 1262.753636][ T9773] usb 6-1: USB disconnect, device number 35 [ 1262.772618][ T9773] usblp0: removed 00:43:45 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_ringparam={0x31}}) 00:43:45 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[], 0x6c) 00:43:45 executing program 3: r0 = mq_open(&(0x7f0000000000)=']\\\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 00:43:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_eee={0x45}}) 00:43:45 executing program 3: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:43:46 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$binfmt_script(r3, &(0x7f0000001640)=ANY=[], 0x1097) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x4}) 00:43:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0xb, 0x9, 0x8, 0x8, 0x2, 0x2, 0x7, 0xb, 0x4, 0xb, 0x3, 0x8, 0x8]}, 0x0, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000a486bf19000000000000000000df25802014b983540f6592cdb3000600150000007bce08", @ANYRESHEX=0x0, @ANYBLOB="08000300", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB="00b9fcde", @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRES64], 0x70}}, 0x20000001) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0xee00}, 0xc) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000040)) keyctl$get_persistent(0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) [ 1263.585135][ T5286] x_tables: duplicate underflow at hook 2 [ 1263.605608][ T5286] x_tables: duplicate underflow at hook 2 [ 1263.613392][ T5286] x_tables: duplicate underflow at hook 2 [ 1263.627527][ T5288] x_tables: duplicate underflow at hook 2 00:43:46 executing program 3: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)) time(&(0x7f0000000040)) 00:43:46 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) write$binfmt_script(r3, &(0x7f0000001640)=ANY=[], 0x1097) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x4}) [ 1263.709127][T24282] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1263.999112][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1264.150119][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1264.158531][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1264.171252][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1264.199532][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1264.217788][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1264.229662][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1264.240560][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1264.364235][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1264.373518][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1264.385414][T24282] usb 6-1: SerialNumber: syz [ 1264.430773][ T5274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1264.438110][ T5274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1264.460336][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1264.468103][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1264.674351][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1265.299682][ T5272] usb 6-1: reset high-speed USB device number 36 using dummy_hcd [ 1265.539133][ T5272] usb 6-1: Using ep0 maxpacket: 8 [ 1265.692113][ T5274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1265.700273][ T5274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1265.778974][ C0] usblp0: nonzero read bulk status received: -71 [ 1265.937240][ T8551] usb 6-1: USB disconnect, device number 36 [ 1265.963347][ T8551] usblp0: removed 00:43:49 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, 0x0}, 0x20000010) 00:43:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="677265300000000000008e18adfe65036ceea083c7c133000800", @ANYRES32=0x0, @ANYBLOB="000707007fffffff0000000449200024006400007f299078ac1414aaffffffff01860cfffffff903061482fc8f000000"]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'wlan0\x00', {0xc0e}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x4, 0xc8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bridge0\x00', {}, 0x5584}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'syz_tun\x00', {}, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 00:43:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x18, 0x3, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x5}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x1}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000140)=""/173, &(0x7f0000000200)=0xad) 00:43:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:49 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6030543e0010"], 0x0) 00:43:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="677265300000000000008e18adfe65036ceea083c7c133000800", @ANYRES32=0x0, @ANYBLOB="000707007fffffff0000000449200024006400007f299078ac1414aaffffffff01860cfffffff903061482fc8f000000"]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'wlan0\x00', {0xc0e}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x4, 0xc8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bridge0\x00', {}, 0x5584}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'syz_tun\x00', {}, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 00:43:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x18, 0x3, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x5}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x1}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000140)=""/173, &(0x7f0000000200)=0xad) 00:43:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x18, 0x3, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x5}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x1}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000140)=""/173, &(0x7f0000000200)=0xad) 00:43:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="677265300000000000008e18adfe65036ceea083c7c133000800", @ANYRES32=0x0, @ANYBLOB="000707007fffffff0000000449200024006400007f299078ac1414aaffffffff01860cfffffff903061482fc8f000000"]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'wlan0\x00', {0xc0e}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x4, 0xc8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bridge0\x00', {}, 0x5584}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'syz_tun\x00', {}, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 00:43:49 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0xc6b}) [ 1266.879146][ T8551] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1267.128983][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1267.249122][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1267.257645][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1267.277697][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1267.291761][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1267.308472][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1267.324654][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1267.340624][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1267.429660][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1267.438790][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1267.457174][ T8551] usb 6-1: SerialNumber: syz [ 1267.490678][ T5343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1267.498498][ T5343] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1267.530156][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1267.536193][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1267.750511][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1268.391279][ T5343] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 1268.649003][ T5343] usb 6-1: Using ep0 maxpacket: 8 [ 1268.801097][ T5370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1268.808376][ T5370] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1268.878945][ C0] usblp0: nonzero read bulk status received: -71 [ 1269.033470][ T34] usb 6-1: USB disconnect, device number 37 [ 1269.057503][ T34] usblp0: removed 00:43:52 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="677265300000000000008e18adfe65036ceea083c7c133000800", @ANYRES32=0x0, @ANYBLOB="000707007fffffff0000000449200024006400007f299078ac1414aaffffffff01860cfffffff903061482fc8f000000"]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x3, 'wlan0\x00', {0xc0e}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2b, 0x4, 0xc8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bridge0\x00', {}, 0x5584}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'syz_tun\x00', {}, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 00:43:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x18, 0x3, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x5}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x1}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000140)=""/173, &(0x7f0000000200)=0xad) 00:43:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000016c0)=@gcm_256={{}, "1c15b8351433e451", "c64c3857d5ccb9e4507beea571ab4def0d4d3ffc0e8da94be972831f26d0e64d", 'RIzU', "de0a964680716dad"}, 0x38) 00:43:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 00:43:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = eventfd(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 00:43:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80) 00:43:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 1269.969048][T24282] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1270.229195][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1270.349282][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1270.357701][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1270.379466][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1270.388700][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1270.400619][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1270.411370][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1270.421967][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1270.509255][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1270.518356][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1270.538385][T24282] usb 6-1: SerialNumber: syz [ 1270.580716][ T5403] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1270.591360][ T5403] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1270.610521][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1270.616574][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1270.846099][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1271.620158][ T5403] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 1271.879034][ T5403] usb 6-1: Using ep0 maxpacket: 8 [ 1272.021742][ T5447] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1272.030130][ T5447] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1272.088948][ C0] usblp0: nonzero read bulk status received: -71 [ 1272.258494][T24282] usb 6-1: USB disconnect, device number 38 [ 1272.270723][T24282] usblp0: removed 00:43:55 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 00:43:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:55 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1496d}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) waitid(0x1, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f00000004c0)) rt_sigtimedwait(&(0x7f0000000200)={[0x2]}, &(0x7f0000000440), &(0x7f0000000400), 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xa3, 0x81, 0x4, 0x9, 0x0, 0x3, 0x200, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xd51, 0x3}, 0x81, 0x4, 0x5, 0x8, 0x1c2, 0x6}, 0x0, 0x5, r1, 0x2) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)={0x2d, 0x400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x24002da6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x8, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) fcntl$getown(0xffffffffffffffff, 0x9) 00:43:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(0x0, &(0x7f0000000100), 0x2d) semop(0x0, &(0x7f0000000040)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 00:43:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0}}], 0x1, 0x0) 00:43:55 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1496d}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) waitid(0x1, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f00000004c0)) rt_sigtimedwait(&(0x7f0000000200)={[0x2]}, &(0x7f0000000440), &(0x7f0000000400), 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xa3, 0x81, 0x4, 0x9, 0x0, 0x3, 0x200, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xd51, 0x3}, 0x81, 0x4, 0x5, 0x8, 0x1c2, 0x6}, 0x0, 0x5, r1, 0x2) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)={0x2d, 0x400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x24002da6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x8, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) fcntl$getown(0xffffffffffffffff, 0x9) 00:43:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010efa8c68d0058b7a34f00000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1, 0x3, 0x801, 0x2, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) [ 1273.199155][T24282] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1273.449135][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1273.569907][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1273.578318][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1273.594487][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1273.609529][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1273.624421][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1273.640082][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1273.653855][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1273.749164][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1273.758375][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1273.766650][T24282] usb 6-1: SerialNumber: syz [ 1273.790758][ T5483] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1273.805611][ T5483] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1273.830408][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1273.837178][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1274.044744][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1274.669797][ T5483] usb 6-1: reset high-speed USB device number 39 using dummy_hcd [ 1274.919093][ T5483] usb 6-1: Using ep0 maxpacket: 8 [ 1275.061619][ T5516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1275.068854][ T5516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1275.128973][ C0] usblp0: nonzero read bulk status received: -71 [ 1275.298000][T24282] usb 6-1: USB disconnect, device number 39 [ 1275.321773][T24282] usblp0: removed 00:43:58 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:43:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 00:43:58 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1496d}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) waitid(0x1, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f00000004c0)) rt_sigtimedwait(&(0x7f0000000200)={[0x2]}, &(0x7f0000000440), &(0x7f0000000400), 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xa3, 0x81, 0x4, 0x9, 0x0, 0x3, 0x200, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xd51, 0x3}, 0x81, 0x4, 0x5, 0x8, 0x1c2, 0x6}, 0x0, 0x5, r1, 0x2) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)={0x2d, 0x400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x24002da6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x8, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) fcntl$getown(0xffffffffffffffff, 0x9) 00:43:58 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffd}, {0x0, 0x6cb3}], 0x2) semop(r0, &(0x7f0000000100), 0x2d) semop(r0, &(0x7f00000000c0)=[{0x0, 0x2}, {0x0, 0x1}], 0x2) 00:43:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:58 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1496d}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) waitid(0x1, 0xffffffffffffffff, 0x0, 0x20000000, &(0x7f00000004c0)) rt_sigtimedwait(&(0x7f0000000200)={[0x2]}, &(0x7f0000000440), &(0x7f0000000400), 0x8) r1 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xa3, 0x81, 0x4, 0x9, 0x0, 0x3, 0x200, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xd51, 0x3}, 0x81, 0x4, 0x5, 0x8, 0x1c2, 0x6}, 0x0, 0x5, r1, 0x2) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)={0x2d, 0x400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x24002da6) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x8, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e", [0x0, 0x2d]}) fcntl$getown(0xffffffffffffffff, 0x9) 00:43:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) read(r0, &(0x7f0000000340)=""/89, 0x59) 00:43:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000, 0x0) 00:43:58 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x0, 0x6, 0x3, 0x1f, 0x0, 0x80000001, 0x28288, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x3, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x8, 0x7fffffff, 0x7, 0x9, 0x1, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f00000006c0)={0x3, 0x70, 0xf, 0xff, 0x1f, 0x6, 0x0, 0x7c04b75c, 0x1000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000680), 0x2}, 0x2060, 0x8001, 0x3, 0x0, 0x8000, 0xb5bc, 0x101}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000005e0020802bbd7b00fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="04000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190404000400000007fd17e5ffff0800040000000000000000", 0x50}], 0x1) socket$netlink(0x10, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) 00:43:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:43:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) [ 1276.269077][ T3215] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1276.312397][ T5560] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. 00:43:58 executing program 0: open$dir(&(0x7f0000000180)='./file0\x00', 0xc0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) [ 1276.539177][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1276.630951][ T5569] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1276.669819][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1276.678263][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1276.709657][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1276.718783][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1276.751230][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1276.779065][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1276.796334][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1276.899731][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1276.928944][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1276.937032][ T3215] usb 6-1: SerialNumber: syz [ 1277.000790][ T5545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1277.008277][ T5545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1277.060948][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1277.067055][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1277.304646][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1278.069506][ T5545] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 1278.309048][ T5545] usb 6-1: Using ep0 maxpacket: 8 [ 1278.471551][ T5585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1278.478835][ T5585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1278.539036][ C1] usblp0: nonzero read bulk status received: -71 [ 1278.707798][ T34] usb 6-1: USB disconnect, device number 40 [ 1278.736504][ T34] usblp0: removed 00:44:01 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 00:44:01 executing program 3: r0 = socket(0x10, 0x20000000802, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}) 00:44:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) 00:44:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 00:44:01 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) 00:44:01 executing program 3: poll(&(0x7f0000000100)=[{}], 0x1, 0x2) 00:44:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0xa, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:44:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 1279.615135][ T9773] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1279.879232][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1280.029244][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1280.039552][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1280.048703][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1280.060072][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1280.071927][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1280.084047][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1280.096409][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:44:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) write$cgroup_int(r0, &(0x7f0000000000), 0x12) [ 1280.213389][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1280.233383][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1280.250825][ T9773] usb 6-1: SerialNumber: syz [ 1280.294691][ T5618] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1280.312233][ T5618] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1280.330276][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1280.336317][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1280.563897][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1281.180226][ T5618] usb 6-1: reset high-speed USB device number 41 using dummy_hcd [ 1281.429011][ T5618] usb 6-1: Using ep0 maxpacket: 8 [ 1281.592394][ T5651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1281.600820][ T5651] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1281.668969][ C1] usblp0: nonzero read bulk status received: -71 [ 1281.841071][T24282] usb 6-1: USB disconnect, device number 41 [ 1281.862855][T24282] usblp0: removed 00:44:04 executing program 5: r0 = syz_open_dev$hidraw(0x0, 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) write$cgroup_int(r0, &(0x7f0000000000), 0x12) 00:44:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000022c0)=""/4070, &(0x7f00000010c0)=0xfe6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 00:44:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0xf3030000, 0x0, 0x0, 0x0, 0x55}, 0x9c) 00:44:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0xf2030000, 0x0, 0x0, 0x0, 0x55}, 0x9c) [ 1282.790228][ T9773] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1283.042727][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1283.179298][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1283.194234][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1283.210545][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1283.228986][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1283.247107][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1283.267686][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 00:44:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 1283.309101][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:44:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:44:06 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x42080, 0x0) [ 1283.433669][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1283.457101][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 00:44:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@newpolicy={0xc0, 0x13, 0xe0b, 0x0, 0x0, {{@in6=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) [ 1283.492838][ T9773] usb 6-1: SerialNumber: syz 00:44:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) lseek(r0, 0x6a, 0x0) [ 1283.540706][ T5683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1283.566024][ T5683] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1283.640421][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1283.646968][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1283.867117][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1284.479790][ T5683] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 1284.739074][ T5683] usb 6-1: Using ep0 maxpacket: 8 [ 1284.894416][ T5715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1284.906016][ T5715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1284.989007][ C0] usblp0: nonzero read bulk status received: -71 [ 1285.145444][ T3215] usb 6-1: USB disconnect, device number 42 [ 1285.179793][ T3215] usblp0: removed 00:44:08 executing program 5: r0 = syz_open_dev$hidraw(0x0, 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 00:44:08 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2c800) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 00:44:08 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='f2fs_unlink_enter\x00'}, 0x10) 00:44:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:08 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) 00:44:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x8, 0x7, 0x1f, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000340)}, {0x0}], 0x2, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x6100) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 00:44:08 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) 00:44:08 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) lseek(r0, 0x0, 0x0) [ 1286.089074][T24282] usb 6-1: new high-speed USB device number 43 using dummy_hcd 00:44:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x2, 0x0, &(0x7f00000002c0)={0x0, 0x0}) [ 1286.329419][T24282] usb 6-1: Using ep0 maxpacket: 8 00:44:08 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000080)={r0}) [ 1286.455603][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1286.474271][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1286.519438][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1286.546345][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1286.577070][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1286.602231][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1286.619563][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1286.719997][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1286.729564][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1286.737600][T24282] usb 6-1: SerialNumber: syz [ 1286.780768][ T5746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1286.788453][ T5746] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1286.810391][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1286.816653][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1287.023395][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1287.629801][ T5746] usb 6-1: reset high-speed USB device number 43 using dummy_hcd [ 1287.869221][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 1288.048425][ T5779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1288.065152][ T5779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1288.129033][ C0] usblp0: nonzero read bulk status received: -71 [ 1288.293695][ T34] usb 6-1: USB disconnect, device number 43 [ 1288.322684][ T34] usblp0: removed 00:44:11 executing program 5: r0 = syz_open_dev$hidraw(0x0, 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[], 0x20001290}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 00:44:11 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) 00:44:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3147", 0xff7c}], 0x1) 00:44:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:11 executing program 3: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) [ 1289.022883][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSF(r2, 0x5441, 0x0) [ 1289.190170][T24121] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1289.429208][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1289.448949][T24121] usb 6-1: Using ep0 maxpacket: 8 00:44:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[], 0x20001290}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) [ 1289.569914][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1289.590813][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1289.614893][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1289.633033][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1289.652686][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1289.671150][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1289.690022][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="010000000000000080000100000008000100", @ANYRES32, @ANYBLOB="24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050000000000a40008807000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000008000a0001000000240002008705b3fbaa53c1d7622b08a83e9e6dfd7eb4da08fa8b6a19b2e9ca6d98e1fc370400040002000000ac1e000100000000000000003000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b0800030000000000060006"], 0xf4}}, 0x0) [ 1289.789211][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1289.800741][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1289.838815][T24121] usb 6-1: SerialNumber: syz [ 1289.856344][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1289.890835][ T5811] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1289.898400][ T5811] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1289.950566][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1289.963207][T24121] hub: probe of 6-1:5.0 failed with error -5 00:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 1290.171018][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:44:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x8, 0x1, 0x3, 0x24, 0xffffffffffffffff, 0x3, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x40) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x1000, 0xffffffff, 0x0, 0x1499, 0x0, 0x7}) [ 1290.970349][ T5811] usb 6-1: reset high-speed USB device number 44 using dummy_hcd [ 1291.219109][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 1291.361829][ T5852] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1291.374646][ T5852] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1291.439171][ C1] usblp0: nonzero read bulk status received: -71 [ 1291.618040][T24121] usb 6-1: USB disconnect, device number 44 [ 1291.627546][T24121] usblp0: removed 00:44:14 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x18}, 0x18}}, 0x0) 00:44:14 executing program 2: perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40811, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:44:14 executing program 0: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x1000)=nil) 00:44:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) 00:44:14 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2c800) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 00:44:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 00:44:14 executing program 0: clone(0x2000000080204500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x31) r1 = getpid() kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 00:44:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 00:44:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000840)) [ 1292.509313][ T34] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1292.759115][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1292.879066][ T34] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1292.889280][ T34] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1292.898125][ T34] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1292.907851][ T34] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1292.920322][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1292.930920][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1292.941360][ T34] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1293.050557][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1293.059975][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1293.068191][ T34] usb 6-1: SerialNumber: syz [ 1293.109431][ T5884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1293.116878][ T5884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1293.140457][ T34] hub 6-1:5.0: bad descriptor, ignoring hub [ 1293.146498][ T34] hub: probe of 6-1:5.0 failed with error -5 [ 1293.374856][ T34] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1294.010079][ T5884] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 1294.269182][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1294.411662][ T5913] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1294.419147][ T5913] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1294.468922][ C1] usblp0: nonzero read bulk status received: -71 [ 1294.638066][ T34] usb 6-1: USB disconnect, device number 45 [ 1294.648012][ T34] usblp0: removed 00:44:17 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000380)={0x0, 0x0, 0x0}) 00:44:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x5608, 0x4) 00:44:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'rose0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) listen(r3, 0x1000) io_setup(0x1, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x40400, 0x130) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x8200, 0x0) r6 = socket$inet(0x2, 0x1, 0xa2) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000680)) ioctl$CHAR_RAW_IOMIN(r5, 0x1278, &(0x7f0000000640)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = mq_open(&(0x7f0000000c00)='eth0\x00\xd3\x1eCF\x8e\xc1\xbel\x80N\x12\x14\xec\xee\xe0\tR\xad\xf0\x88\xbe\xbc\xf3\xef^4\xe2Q\x15\xa7\xcd \x004\x91\xcb,\x8b\x02\xa5\x89\xd1Q\x9c\xc3\xcb\x9dwx\\\x8a\x95\xad\xc1Q\x8c\x80\x8d\x85\x89m\x161K\x98\xad\xb3\xb07i}\xf2\xfd\xa9\x1d\x10\x01\xa9\x02n|\x86Qp\xaa\x0e\x1d\xd0\x99\x0f\xda8\xbf\x90\xcb8\xa1dN\a\x10\xca\xdd\xa3S\xef\xd3+\xbb\xadQR\xfd\xe1\f[>\x16\x06X\x7f\xae\xa6;\xa2\x87\x06R\x02\xc3b\xd1\xa4\vl\'Kn\xf5;\x88\x1dt\xa7H,&o=j+U\xbc=\xfd\x1b\xda$>:\xcbu\xf0\xfc\x80\xdb)\xa1\xc2o}\xa4N\xdf\x8b\x83\xdeb\x98\x1b\x9aQ<\x03\x14\x7f\x92\xcd\xcf\x84V\xd7\x8f\xc5\x04.\x93\tTC#\bC\xd3\x95\xbd\x97\x96\x84=F\xe5\x88\r\xa8\x0e*\xb6\xe9\xe9\x9b\x98\x8c\xb4?\x87u\xc7\x87\xd8\x00\x02\x00\x00\x00\x00\x00\x00\x7fRk\xb8\xc8\x06\"\xad\xfe\x82\xb6\x02\xfc\xdc\\\xae(\xa4/\xb5*=\xc2v\xd2\xb8\xf8\xf2\x85S\x98%\xad\xd0F\aw\x14\xca\x1f\x16\n\xfc^?h\x15\xe7\xf8\xd9e\xc8\x00\x06\x1e\xd7\xcbdq\x8a\xcb\xdb!R\'\xd7\x14\x930\x0f\x12.\xe1\xc5\xbag\b\x9a\x9e\xb2\xc2\x8f\xa5\xd8\"\xc8!\xd0\x82\x06\x00^\x05q\xd6\xd0J\xdd\x13c\xedg\x8f\xb0\xcc\xb0\x97\xce\x14\xae\x82\xe9|j8]\xbdH\xa0\x12\x8d\xef\xf3\x1dL\xd9+\x94\x93\xe4\x97\xbd1\x90&\r\xe5\xff\xd6h\xfe\x17\x10=nah\x9c\xb1\x91\n@\x84\xf8C+\xaeI\xc7\xbc\xda\xdf\xf6\xe7k\xd8\xb5\nh\xa9zj@P\"t\x8f\xf2\x89I\a\x80\x85N\xec\xca^!C\x1c\xcd5\xa8*\x93iim\r\tB0\xa2\xc3K-\x84\x84\x9d\xb5\x1a\xe6\x91\xc5>\xce\'1\xa0\xf2\x03.9\xce\x1c\xa3yJ:\x82x\xe6G\x87\xb3P\xf5wmR\x18J\x80\xb4\xb9Zov1\xb3p\x14-b\xb3\x87\xb3\xa5\x93/\xd6\xfe\xc9\xfd3\x14\x02\x15\x97\x0e\xbd\xf5\x18\xab\xfc\xbf\xe2)&t\x19\x8a\xde\xf9\xc6\xefoy~-d\x9c\xcd\x16>\xdagdD\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\x0e\xcd7j\x0f;\xf6\b{\x97\xf6\xc3\a\a\xcb-?\al\xefB\x10\x03\xa8\x155\x19u!\xa2\xf0\xf4\x90\xf0|H#\xb7\x8a\xa7\xd1> 3\xc1\xd9\xaa\xf8\xc5O\x85M\x98,a\xd7HV\xb4\xcc\n_\xf6 \xbd\'\x1e\x00', 0x842, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000180)="b5", 0x1, 0x0, 0x0) mq_timedreceive(r7, 0x0, 0xed9fc23d, 0x0, 0x0) 00:44:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:17 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000006680)='./file0\x00', 0x0, 0x0, &(0x7f0000006880)) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006540)={0x78, 0x0, 0x0, {0x0, 0xa5d5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:44:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000840)) 00:44:18 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f00000020c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 00:44:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 00:44:18 executing program 0: mount$fuseblk(0x0, 0x0, 0x0, 0xc0ed0000, 0x0) [ 1295.569100][ T8551] usb 6-1: new high-speed USB device number 46 using dummy_hcd 00:44:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) [ 1295.819001][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1295.939815][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1295.948226][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1295.966042][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1295.980502][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1295.995741][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1296.010877][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1296.026421][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1296.121925][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1296.131315][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1296.147126][ T8551] usb 6-1: SerialNumber: syz [ 1296.180680][ T5940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1296.187910][ T5940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1296.220302][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1296.226332][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1296.430749][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1297.050328][ T5940] usb 6-1: reset high-speed USB device number 46 using dummy_hcd [ 1297.298958][ T5940] usb 6-1: Using ep0 maxpacket: 8 [ 1297.452183][ T5996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1297.463451][ T5996] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1297.518951][ C0] usblp0: nonzero read bulk status received: -71 [ 1297.686162][ T8551] usb 6-1: USB disconnect, device number 46 [ 1297.704666][ T8551] usblp0: removed 00:44:20 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:44:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 00:44:20 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) 00:44:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:20 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 00:44:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x47b0, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x1e0}}], 0x1, 0x45) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 00:44:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) 00:44:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000840)) 00:44:21 executing program 2: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x44, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x11fd, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40000}, 0x0, 0xbb, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xae, 0x400}) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x5603, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, "553506ae0e184ec817e7e9b600", 0x8, 0x9}) [ 1298.569184][ T8551] usb 6-1: new high-speed USB device number 47 using dummy_hcd 00:44:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @local}, 0x10) [ 1298.819023][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1298.939813][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1298.949704][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1298.987636][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1299.007671][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1299.028425][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1299.045651][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1299.069658][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1299.169896][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1299.183889][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1299.216876][ T8551] usb 6-1: SerialNumber: syz [ 1299.250798][ T6022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1299.258255][ T6022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1299.310416][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1299.316492][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1299.531039][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1300.160944][ T6022] usb 6-1: reset high-speed USB device number 47 using dummy_hcd [ 1300.409620][ T6022] usb 6-1: Using ep0 maxpacket: 8 [ 1300.571672][ T6061] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1300.583594][ T6061] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1300.668959][ C1] usblp0: nonzero read bulk status received: -71 [ 1300.822719][ T3215] usb 6-1: USB disconnect, device number 47 [ 1300.851674][ T3215] usblp0: removed 00:44:23 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x10000000, 0x0, 0x0, "55350669d47fd100900513fe682f2450b51cae"}) 00:44:23 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='5\x00', 0x27) 00:44:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 00:44:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @int]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x560f, &(0x7f0000000080)) 00:44:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r0, &(0x7f00000002c0), 0x347) socket$nl_route(0x10, 0x3, 0x0) 00:44:24 executing program 3: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400200, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{}, 0x0, 0x4, @unused=[0x668, 0xffffffffffffde15, 0x2, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={{}, 0x0, 0x4, @inherit={0x78, &(0x7f0000000180)={0x0, 0x6, 0x20, 0x1, {0x0, 0x3, 0x4, 0x6, 0x533e04a3}, [0x7f, 0x0, 0x3, 0x6b6, 0x1ff, 0x200]}}, @name="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"}) write$sysctl(r0, &(0x7f0000000100)='7\x00', 0x2) 00:44:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x94}}, 0x0) 00:44:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x4bfb, &(0x7f0000000080)) 00:44:24 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/73) [ 1301.729012][T24121] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1301.986567][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1302.110191][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1302.118605][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1302.140551][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1302.162787][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1302.184355][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1302.197750][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1302.218644][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1302.319831][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1302.338244][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1302.362241][T24121] usb 6-1: SerialNumber: syz [ 1302.390730][ T6086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1302.398056][ T6086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1302.430277][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1302.437588][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1302.650893][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1303.429673][ T6086] usb 6-1: reset high-speed USB device number 48 using dummy_hcd [ 1303.699055][ T6086] usb 6-1: Using ep0 maxpacket: 8 [ 1303.841739][ T6121] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1303.855753][ T6121] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1303.918926][ C1] usblp0: nonzero read bulk status received: -71 [ 1304.082602][ T8551] usb 6-1: USB disconnect, device number 48 [ 1304.112632][ T8551] usblp0: removed 00:44:27 executing program 2: semget(0x3, 0x0, 0x660) 00:44:27 executing program 0: shmget(0x1, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 00:44:27 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:27 executing program 3: poll(0x0, 0x0, 0xe5) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 00:44:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @int]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:27 executing program 0: clone(0x4100, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0xe5) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 00:44:27 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) 00:44:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000010c0)) 00:44:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b36, 0x0) 00:44:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) ioctl$KDSKBSENT(r0, 0x4b36, 0x0) 00:44:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) 00:44:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1305.009095][ T9773] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1305.269273][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1305.399312][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1305.407918][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1305.419375][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1305.430048][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1305.441679][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1305.451897][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1305.463811][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1305.569317][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1305.581938][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1305.600488][ T9773] usb 6-1: SerialNumber: syz [ 1305.630741][ T6152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1305.638275][ T6152] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1305.656710][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1305.678026][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1305.874717][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1306.509829][ T6152] usb 6-1: reset high-speed USB device number 49 using dummy_hcd [ 1306.749102][ T6152] usb 6-1: Using ep0 maxpacket: 8 [ 1306.890829][ T6197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1306.898102][ T6197] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1306.968923][ C1] usblp0: nonzero read bulk status received: -71 [ 1307.136908][ T9773] usb 6-1: USB disconnect, device number 49 [ 1307.160109][ T9773] usblp0: removed 00:44:30 executing program 5: syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:44:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @int]}, {0x0, [0x0]}}, 0x0, 0xaf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x4800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) dup3(r1, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) dup3(r1, r4, 0x0) finit_module(r4, 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:44:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fd"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="ba2000b80700ef660f38f622baf80c66b8501eb58266efbafc0cedf3a939000f20e06635000040000f22e00f20d86635200000000f22d80f350f20d9f40f01ca", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:44:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1307.989027][T24121] usb 6-1: new high-speed USB device number 50 using dummy_hcd 00:44:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x560f, &(0x7f0000000000)) 00:44:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:30 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 00:44:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1308.228985][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1308.349708][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1308.358365][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1308.374611][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1308.384859][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1308.397786][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1308.407987][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1308.420076][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1308.509223][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1308.518348][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1308.530387][T24121] usb 6-1: SerialNumber: syz [ 1308.562948][ T6218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1308.579789][ T6218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1308.600766][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1308.606816][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1308.854967][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1309.480619][ T6218] usb 6-1: reset high-speed USB device number 50 using dummy_hcd [ 1309.739237][ T6218] usb 6-1: Using ep0 maxpacket: 8 [ 1309.881853][ T6272] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1309.893634][ T6272] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1309.968915][ C1] usblp0: nonzero read bulk status received: -71 [ 1310.132754][ T8551] usb 6-1: USB disconnect, device number 50 [ 1310.158487][ T8551] usblp0: removed 00:44:33 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) dup3(r0, r1, 0x0) dup3(r0, r3, 0x0) finit_module(r3, &(0x7f0000000000)='net/dev_mcast\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:44:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@fwd, @volatile, @fwd, @var, @int]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x3}) 00:44:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:33 executing program 3: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 00:44:33 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000003600)=[{0x0}, {&(0x7f00000013c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/89, 0x59}], 0x8, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/65, 0x41}], 0x1, 0x0) dup2(r3, r2) [ 1310.999092][ T34] usb 6-1: new high-speed USB device number 51 using dummy_hcd 00:44:33 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 00:44:33 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0x4020ae46, &(0x7f0000000040)) [ 1311.239227][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1311.359775][ T34] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1311.381547][ T34] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1311.413760][ T34] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1311.433361][ T34] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1311.449527][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1311.465190][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1311.481562][ T34] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1311.579109][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1311.588331][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1311.607114][ T34] usb 6-1: SerialNumber: syz [ 1311.630707][ T6296] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1311.638348][ T6296] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1311.670138][ T34] hub 6-1:5.0: bad descriptor, ignoring hub [ 1311.676172][ T34] hub: probe of 6-1:5.0 failed with error -5 [ 1311.883813][ T34] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1312.519856][ T6296] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 1312.768955][ T6296] usb 6-1: Using ep0 maxpacket: 8 [ 1312.911760][ T6351] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1312.921842][ T6351] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1312.988990][ C1] usblp0: nonzero read bulk status received: -71 [ 1313.152798][ T9773] usb 6-1: USB disconnect, device number 51 [ 1313.170493][ T9773] usblp0: removed 00:44:36 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:36 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@fwd, @volatile, @fwd, @var, @int]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) ioctl$KDSKBSENT(r0, 0x4b3b, &(0x7f0000000040)={0x0, "caecf01eacd105d9587928b200d3c72527409d473fca26740982e636a3c4b2bf86b2d94c5a907dbb141a93713b57d50ef17ee9120ec85194b78a638abd739db135633b8462550e253b329af90042dd63b476a8936d6c75bd7f35ee651664670e30d07712a338725ccdaf0cee0fc3c34f355ec017820b5882c5e0ee3858440146934c7a93a2139da606af3be702d776a2a4a01bb8c16fb7a20ac18f6d6a9c6178f5b39b567992b09c2f4e2bb6cfaa07c1d738cb2194cbd2b82c19319ad2d0783f81fcb65777459f5b13c0e0bc9ac1eb63708949ec533d4bcf18e4ea69bc95344fb6c975a8840d1930206b459ed8cd3f1d1d9e5c0cb5b381f32ee7d05763da450f5105c0cec04376168f7c29f9a5b94bbc13e7f23e92d44f04db843a97359cc7203016c8b6f91e30d1aaf295a78f30ab0dd806ef376a9666655a35cb66fd4c571bd10f1a0a9ef99e7600576d672a6e26c0356ed052491b1fa35b3015f29e231672ac3b2ab1bc62e68f1774a31892b41d0efb700064726530604fcbbbd4d938cc2787a33595ad09915528499162a70a9e3182f1dcb38b0d78126a84fc85da567c6b78a80fbbe4fba569e04a135a808bcdfd5af58f5339f84c67d3936054669401e37fe2c3de1a04f30decedbefb166621c105e4bd26785ecddb9f5ce084b83d3bda00bee6a7dbbd1f3277e2f10f0317ee38b83dcac5fde8c070245d673bce307f5f"}) 00:44:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000003600)=[{0x0}, {&(0x7f00000013c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/89, 0x59}], 0x8, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/65, 0x41}], 0x1, 0x0) dup2(r3, r2) 00:44:36 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:36 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1314.050120][ T3215] usb 6-1: new high-speed USB device number 52 using dummy_hcd 00:44:36 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) unlink(&(0x7f0000000140)='./file0\x00') 00:44:36 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000081000000040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487509101cba12c07d57d995b61e89a4530f923062242b416ae9eeefc0e9c60ebab1c17682dc2b9381b72b100d0682fd0a0c4906b29e220dc28dac72599456d4c4e6f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084aa2f56d1cb398dff1db3df9858837458a4ca03767c69b25f2a2b7b96b0d0b4af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a208e4557cd4ed88b37ab8674c644dca2faffc836c98b58cf1fe50917b2c6b05e6001c29d7ca47dc62a087cc7f0e053927d250e40a369aba3b08f0a8620c4d29eff8408ea28a6cb9fc8e7d360fced56ead5fa0c52f90bafb888ed8aa8d5d70cf2ec06edc22ca76157000b8beb850e2007f6118f6df0235d0fe1428c367c2d625414413dc04d025d4f7859c7e0d2a54cbe123e37c81956901005352068bc4007ebe8e7023fb0ce22c76445275d13012e6d6e8304744704a88401b58461f89c9de98bbb0b91f080a0a6c0880e71efc8444c7a0bafa52c316250c709216f24d9e8ceb6ef708d56be4548dc36a359f0753174b766e2fb04e0cfd836d81f7a18e02999483fc914f98eed61b12d87de304d73f4551301a24652a2c539c24af27a773bc206164fdda25bc2866f5fbfcc34c56040bf4c1315da2b2cbd54e4061eeef8aa908eae11a7caf000000008b335accc588a66ce3155c7d14504a2c8e7f8ec8dd6ef48546127593b8b230c2496951629d7aab90cb7821e8aa04d014e935b4a10d5d8a4dc4ad752968981692612a2c429121511d57a28b6af1ee6f7c93df32ea63b18ce9c3faa3e82ce9ce755b8127329495faaeeaafeb8a06db79334b94c06e9c58bf51d551471ad77c4db23ac9a11fa42a3df2e91155d8c4c72cdbbbc08ca1b02c9c7869129f3335c0d88ba0455e75520a583fb71fea46882131a145712ceb5fb8181e11ea9ed4430cac9da320b7228229778b93e30ebcdfc9e7ab16279e4c54cf11ea1a974a31aaeff0cef1fbee2b08200f8c40e06f93b310f44b64b47cd6e1d989736ec9dbc08836a7d798f1a422c9ec3fb9346a59f80bc6403ed89a47373534822c3eedc356e062aaac6aac8e6fa89e950b0a175737eb8fd5b1a60a3b07cc11669c14245ec90000000000000000002e4936d62ea967806def9c0f660e31ae510324f291619c9774012dc25becb0580b7769a045cf5d5247304b7bef6a670e9f210e767dd6b642f6471210b923195f440450d89b2087798b86eea72c95ce2917bd53d85587119c428c622335f7b720c5a2421ce526130214eaefbf157ffe18019629ee2fa725b1ffadad6b9031cb77bbd70891225b374e1f685b69422f75ac59a5faece0bd56224de22a36e67399ac7ec683ef9754e545aa0d6dc13fca61a5e529db342b6b7c21ea0b27a2ac0203ad6ceca4e21ae99beccd9d8a1d88cd1c9285f9489f3ee4b851a2b09ca3864fb4db860a3ad8ae30e486f416223c3e73ccef12ff664eb3660c2756bc5981883f5ccbdea1e280d2cd8dd22316eb41b5374909088016b4616d517f38121f272ac596b1b8a2022b6e78efda249db1de2b52afe02d16de1dc24798b3475c0460e93cf8ac1be479b1267fdf89328534050da76fe0358894c106e8bed6d896cbadc28ba65673bd6b4d5a09782de33211d19fba67a48ecd234807c80c4a76a9d19a25fbc65f97b99bad9359ee2ce4f73bceba2ec75411b0f243bccaf6aa855eb7564dd2ba1e4d6de54f10feba4aa2daba6f730a6e02464911e473db90f6d9011baa4491ab3830311a015956e75e3bb98291653b4a33f3354d693328767ad8539d4f573c9a4720d7fa566c1d72c6ab0e7349012d15b698b072fef56fae321b9bbbaf5f7863558e7271c4fe252b1bf0b98ec3df61b8bfd585ce48808b04b03c0747adca0b8c18a02678547346b0999da7b1d8cd26b0834a5dd65dbb79a17652f15a5e8bba619eb4624907f48ae27a25a76ae6f0d3e3708a01e92e6eab20418b906ed4ebff641084256c2fff4283bb51fa530a5cd018ac1caf541d000c8d539774e9c6be62fee88a7b5c521b15d0923eeb28fff7b3a849b2f6463454ae0b448bf8d5e51e2757654990d3ebb879767f32089b8e7a59e7fbf36b2edaef40d6f5ff47a4c097de84a6218fc922b110704821e12caddc5fc8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 00:44:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000003600)=[{0x0}, {&(0x7f00000013c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/89, 0x59}], 0x8, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/65, 0x41}], 0x1, 0x0) dup2(r3, r2) [ 1314.289109][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1314.419091][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1314.427786][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1314.444425][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1314.463297][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1314.479418][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1314.496890][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1314.516819][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1314.629341][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1314.638489][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1314.656744][ T3215] usb 6-1: SerialNumber: syz [ 1314.692381][ T6373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1314.708040][ T6373] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1314.720278][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1314.726290][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1314.950617][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1315.749795][ T6373] usb 6-1: reset high-speed USB device number 52 using dummy_hcd [ 1315.999039][ T6373] usb 6-1: Using ep0 maxpacket: 8 [ 1316.155317][ T6423] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1316.162911][ T6423] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1316.229068][ C0] usblp0: nonzero read bulk status received: -71 [ 1316.382481][ T3215] usb 6-1: USB disconnect, device number 52 [ 1316.410784][ T3215] usblp0: removed 00:44:39 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r0 = socket(0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x1) 00:44:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@fwd, @volatile, @fwd, @var, @int]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000003600)=[{0x0}, {&(0x7f00000013c0)=""/77, 0x4d}, {0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/89, 0x59}], 0x8, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/65, 0x41}], 0x1, 0x0) dup2(r3, r2) 00:44:39 executing program 3: pipe(0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x4004746a, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x400080, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 00:44:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xf7}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1317.117021][ T6456] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:44:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x6) [ 1317.174041][ T6462] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:44:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1317.239043][ T8551] usb 6-1: new high-speed USB device number 53 using dummy_hcd 00:44:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 00:44:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1317.499074][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1317.619116][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1317.627644][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1317.645501][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1317.660508][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1317.676172][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1317.690995][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1317.706685][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1317.799197][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1317.808403][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1317.819799][ T8551] usb 6-1: SerialNumber: syz [ 1317.852270][ T6446] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1317.868322][ T6446] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1317.910425][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1317.916460][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1318.124863][ T8551] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1318.749744][ T6446] usb 6-1: reset high-speed USB device number 53 using dummy_hcd [ 1318.989073][ T6446] usb 6-1: Using ep0 maxpacket: 8 [ 1319.151772][ T6484] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1319.166894][ T6484] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1319.218980][ C0] usblp0: nonzero read bulk status received: -71 [ 1319.391102][ T8551] usb 6-1: USB disconnect, device number 53 [ 1319.408797][ T8551] usblp0: removed 00:44:42 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000), 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:42 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 00:44:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:42 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = open(&(0x7f0000000140)='./bus\x00', 0x123100, 0x1c9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x0, 0x9, 0xff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe00, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x3, 0x1f, 0x0, 0x6, 0x40801, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x100000001, 0xf33}, 0x19040, 0x7, 0x9, 0x6, 0x8001, 0x4, 0xfffb}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x4, 0x7f, 0x0, 0x67a275bf, 0x80000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x2015, 0x40, 0x7, 0x6, 0xee5, 0xc6dd}, r1, 0x10, r4, 0x1) sendfile(r0, r3, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x10000101) 00:44:42 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = open(&(0x7f0000000140)='./bus\x00', 0x123100, 0x1c9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x0, 0x9, 0xff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe00, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x3, 0x4, 0x0, 0x0, 0x67a275bf, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x2015, 0x40, 0x7, 0x0, 0xee5, 0xc6dd}, 0x0, 0x10, r3, 0x1) sendfile(r0, r2, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 00:44:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x9b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1320.241298][T24121] usb 6-1: new high-speed USB device number 54 using dummy_hcd 00:44:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x80000, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0xfffff76e, 0x8001, 0x9, 0x7fffffff, 0x0, 0x0, 0x9}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="f30f09dd467366b9800000c00f326635000100000f30f0812700000f013d0f20a6660f154c00f4baf80c66b8345a5a8866efbafc0c66edbaf80c66b8d2174f8066efbafc0cb87000ef", 0x49}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 00:44:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1320.489018][T24121] usb 6-1: Using ep0 maxpacket: 8 00:44:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) [ 1320.611863][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1320.624041][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1320.676004][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1320.709390][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1320.761025][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1320.807942][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1320.851862][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1320.969974][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1321.017065][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1321.065432][T24121] usb 6-1: SerialNumber: syz [ 1321.120697][ T6506] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1321.128085][ T6506] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1321.160595][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1321.166727][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1321.383067][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1322.019545][ T6506] usb 6-1: reset high-speed USB device number 54 using dummy_hcd [ 1322.259080][ T6506] usb 6-1: Using ep0 maxpacket: 8 [ 1322.421771][ T6553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1322.432329][ T6553] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1322.518942][ C1] usblp0: nonzero read bulk status received: -71 [ 1322.665177][ T8551] usb 6-1: USB disconnect, device number 54 [ 1322.674229][ T8551] usblp0: removed 00:44:45 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000), 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:45 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:45 executing program 2: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000003d00)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:44:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:44:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x9b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:45 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000000)=0x62) 00:44:45 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:45 executing program 2: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)) 00:44:46 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x1, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) 00:44:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x1b8, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x218) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) [ 1323.579558][ T6600] x_tables: duplicate underflow at hook 3 [ 1323.586693][ T6600] x_tables: duplicate underflow at hook 3 [ 1323.619067][ T3215] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1323.859094][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1323.979546][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1323.988150][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1324.009785][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1324.021503][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1324.034122][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1324.044712][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1324.054838][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1324.150034][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1324.159546][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1324.167606][ T3215] usb 6-1: SerialNumber: syz [ 1324.200982][ T6582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1324.208392][ T6582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1324.260405][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1324.266489][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1324.473820][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1325.099754][ T6582] usb 6-1: reset high-speed USB device number 55 using dummy_hcd [ 1325.339099][ T6582] usb 6-1: Using ep0 maxpacket: 8 [ 1325.501922][ T6613] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1325.514629][ T6613] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1325.578980][ C0] usblp0: nonzero read bulk status received: -71 [ 1325.749061][ T8551] usb 6-1: USB disconnect, device number 55 [ 1325.776184][ T8551] usblp0: removed 00:44:48 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000), 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:48 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) 00:44:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:48 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 00:44:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1) 00:44:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x9b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:48 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000007800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:44:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 00:44:49 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 00:44:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x40000000002, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x1) 00:44:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1326.608913][ T3001] usb 6-1: new high-speed USB device number 56 using dummy_hcd 00:44:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400), 0x0, 0x0) [ 1326.869119][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1327.009180][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1327.017866][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1327.037187][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1327.052063][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1327.068031][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1327.082803][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1327.093977][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1327.199354][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1327.209721][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1327.217847][ T3001] usb 6-1: SerialNumber: syz [ 1327.250684][ T6634] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1327.258675][ T6634] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1327.300329][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1327.306570][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1327.528543][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1328.141201][ T6634] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 1328.392282][ T6634] usb 6-1: Using ep0 maxpacket: 8 [ 1328.561940][ T6678] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1328.575016][ T6678] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1328.639077][ C1] usblp0: nonzero read bulk status received: -71 [ 1328.814530][ T3215] usb 6-1: USB disconnect, device number 56 [ 1328.843394][ T3215] usblp0: removed 00:44:51 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:51 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) creat(&(0x7f0000000100)='./bus\x00', 0x0) 00:44:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:51 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400), 0x0, 0x0) 00:44:51 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) 00:44:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x20000004) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x5, 0x0, 0xfffffffffffff001, 0x10000, 0xb3, 0x0, {0x4, 0x80, 0x8, 0x0, 0x0, 0x8, 0x6, 0x707, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x3, 0x2}}}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x3000000, [], [{0x0, 0x7eff}, {0x801, 0x0, 0x80000001}]}) ioctl$RTC_AIE_OFF(r1, 0x7002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:44:52 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400), 0x0, 0x0) 00:44:52 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) listen(r0, 0x0) 00:44:52 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:44:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@nl=@unspec={0x0, 0x300}, 0x80) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:44:52 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1329.979126][ T9773] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1330.169024][ T9773] usb 6-1: device descriptor read/64, error 18 [ 1330.439135][ T9773] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1330.629072][ T9773] usb 6-1: device descriptor read/64, error 18 [ 1330.749188][ T9773] usb usb6-port1: attempt power cycle [ 1331.459004][ T9773] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1331.629175][ T9773] usb 6-1: device descriptor read/8, error -61 [ 1331.898998][ T9773] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1332.074598][ T9773] usb 6-1: device descriptor read/8, error -61 [ 1332.199854][ T9773] usb usb6-port1: unable to enumerate USB device 00:44:54 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13}}) 00:44:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:44:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x19, 0x0, &(0x7f0000000040)) 00:44:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f00000001c0)=@ethernet={0x306, @remote}, 0x80) 00:44:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="81"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1c00}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x3}]}}]}, 0x38}}, 0x0) 00:44:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:55 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x18, r0, 0x5ce03c6c22828773, 0x0, 0x0, {0x6}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:44:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x60, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 1333.029303][ T3001] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1333.218992][ T3001] usb 6-1: device descriptor read/64, error 18 [ 1333.499219][ T3001] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1333.709011][ T3001] usb 6-1: device descriptor read/64, error 18 [ 1333.829211][ T3001] usb usb6-port1: attempt power cycle [ 1334.559046][ T3001] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1334.749081][ T3001] usb 6-1: device descriptor read/8, error -61 [ 1335.038987][ T3001] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1335.239302][ T3001] usb 6-1: device descriptor read/8, error -61 [ 1335.361677][ T3001] usb usb6-port1: unable to enumerate USB device 00:44:58 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:44:58 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, 0x0}}], 0x1, 0x0) 00:44:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x80) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:44:58 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x18, r0, 0x5ce03c6c22828773, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:44:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:44:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, r1, 0x731, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:44:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000080)="d4", 0x1) 00:44:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x4, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x11, &(0x7f0000000200)=""/20, 0x14, 0xffffffc2}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(0x0) write$binfmt_elf64(r4, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRESDEC=r5, @ANYBLOB="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"/4083, @ANYRESDEC=r2, @ANYRESDEC=r3], 0x100000530) 00:44:58 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x18, 0x1}, 0xc) 00:44:58 executing program 2: symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 1335.902881][ T6794] --map-set only usable from mangle table 00:44:58 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) [ 1336.088981][ T8551] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1336.299057][ T8551] usb 6-1: device descriptor read/64, error 18 [ 1336.569021][ T8551] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1336.778954][ T8551] usb 6-1: device descriptor read/64, error 18 [ 1336.909657][ T8551] usb usb6-port1: attempt power cycle [ 1337.629079][ T8551] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1337.819096][ T8551] usb 6-1: device descriptor read/8, error -61 [ 1338.119113][ T8551] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1338.323895][ T8551] usb 6-1: device descriptor read/8, error -61 [ 1338.449723][ T8551] usb usb6-port1: unable to enumerate USB device 00:45:01 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:01 executing program 3: pipe2(0x0, 0x33a101352ee39361) 00:45:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:01 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4a0, 0x0) 00:45:01 executing program 0: open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x15d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x0) 00:45:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:01 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2c0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x801c581f, &(0x7f0000000040)) 00:45:01 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000200)=0x100) 00:45:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2062, 0x0) 00:45:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xff00) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4) 00:45:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f0000000580)) 00:45:01 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x179241, 0x0) [ 1338.949156][ T8551] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1339.159126][ T8551] usb 6-1: device descriptor read/64, error 18 [ 1339.449074][ T8551] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1339.639653][ T8551] usb 6-1: device descriptor read/64, error 18 [ 1339.770070][ T8551] usb usb6-port1: attempt power cycle [ 1340.489048][ T8551] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1340.679254][ T8551] usb 6-1: device descriptor read/8, error -61 [ 1340.969108][ T8551] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1341.169426][ T8551] usb 6-1: device descriptor read/8, error -61 [ 1341.292517][ T8551] usb usb6-port1: unable to enumerate USB device 00:45:04 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2b, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x0, 0x248, 0xffffffff, 0x0, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @loopback}, [], [], 'vxcan1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@ipv4={[], [], @empty}, @icmp_id, @gre_key}}}, {{@ipv6={@local, @dev, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "97015d188619258b069d6ec6cfe4cdc8a75ca33b2a624b9bc4e39f5d06cc"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 00:45:04 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:45:04 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000000000), 0x40) 00:45:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)={0x8, 0x0, 0x4}, 0x40) 00:45:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 00:45:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) 00:45:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:45:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 00:45:04 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000040)={@multicast, @link_local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "a300"}}}}, 0x0) [ 1342.009035][T24121] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1342.209505][T24121] usb 6-1: device descriptor read/64, error 18 [ 1342.499040][T24121] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1342.708989][T24121] usb 6-1: device descriptor read/64, error 18 [ 1342.829311][T24121] usb usb6-port1: attempt power cycle [ 1343.578969][T24121] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1343.782707][T24121] usb 6-1: device descriptor read/8, error -61 [ 1344.088955][T24121] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1344.299132][T24121] usb 6-1: device descriptor read/8, error -61 [ 1344.430285][T24121] usb usb6-port1: unable to enumerate USB device 00:45:07 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x3}]}, 0x1c}}, 0x0) [ 1344.712316][ T6870] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:45:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0xffffff42, &(0x7f0000000340)}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="7c02de59cdffab8d1c428d4af2d6c81951a6a93baa9e1f0e44e678fa5a5e56b6f74e46d9dc32b320a96c8f481768bbeab825ef3a81eef339f5e83df4c09e859d17a839d963c56622833173292d407212d3f4c22fd61d3e314555c7e0fcd5dfdb49e6448cb390a6ee5591c7f09dce078a4c86be005029e5aef57922f5b4df2587c16f853d3a3e466e3ac9cbfe5563691550b37fa6f16fb1f30d192d427a", 0x9d}, {&(0x7f0000000480)="fe168ac0ab2231141b154fdc4ed159b9089d38da9336f21bc84c4b5e87746837e940ff0838b1f1a42362f3419e83d314790ce0267e3eafb0d21ddd627ed1cf15e8b7c834a6c492334bdbe5d17c4269f5146e4be52b3166d5329e3883b7af0680ada7f3094e7a5d03f45447a554b670", 0x6f}, {&(0x7f0000000500)="d9c2e6c808712a1506862b471a9cbc1f948e60346f98c7ca222fd114a49c78ef6a5544caf27ed6644297b81837d1028805f98670ef2ec131ebf1c5d46e3b0077b34abb08825069e6b50be23a2caeeef139d9998dfec3d978419eacba00"/104, 0x68}, {&(0x7f0000000180)="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"/348, 0x15c}], 0x4}}], 0x2, 0x0) 00:45:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) 00:45:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) 00:45:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) 00:45:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 00:45:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000000)=0x1e) 00:45:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x0, 0x248, 0xffffffff, 0x0, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @loopback}, [], [], 'vxcan1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@ipv4={[], [], @empty}, @icmp_id, @gre_key}}}, {{@ipv6={@local, @dev, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "97015d188619258b069d6ec6cfe4cdc8a75ca33b2a624b9bc4e39f5d06cc"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 00:45:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x5, 0x0, &(0x7f0000001000)) [ 1345.089302][T24121] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1345.298984][T24121] usb 6-1: device descriptor read/64, error 18 [ 1345.569122][T24121] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1345.768995][T24121] usb 6-1: device descriptor read/64, error 18 [ 1345.889922][T24121] usb usb6-port1: attempt power cycle [ 1346.649352][T24121] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1346.839266][T24121] usb 6-1: device descriptor read/8, error -61 [ 1347.129086][T24121] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1347.319310][T24121] usb 6-1: device descriptor read/8, error -61 [ 1347.439533][T24121] usb usb6-port1: unable to enumerate USB device 00:45:10 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) 00:45:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @remote}, @loopback={0xfc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}) 00:45:10 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ba5951", 0x0, "3105ed"}}}}}}, 0x0) 00:45:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xb, 0x6, 0x401}, 0x14}}, 0x0) 00:45:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa0008016005c2fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:45:10 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @random="01af2136393b", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "49324ad5302b107d7e3aadbe57c61e449a82198e4c49c6dd10c2e1a8d6e95bbc7c3aff077c176787ce266f1d1eae982d36d7429c96825bd9f82d36e0df725b58"}}}}, 0x0) 00:45:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x301, 0x404c040) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000000000000290000003b"], 0x18}}], 0x2, 0x0) [ 1348.130672][T24282] usb 6-1: new high-speed USB device number 81 using dummy_hcd 00:45:10 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 00:45:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1348.271656][ T6928] netlink: 41435 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1348.329042][T24282] usb 6-1: device descriptor read/64, error 18 [ 1348.609002][T24282] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1348.799924][T24282] usb 6-1: device descriptor read/64, error 18 [ 1348.919174][T24282] usb usb6-port1: attempt power cycle [ 1349.629016][T24282] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1349.799854][T24282] usb 6-1: device descriptor read/8, error -61 [ 1350.069019][T24282] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1350.239090][T24282] usb 6-1: device descriptor read/8, error -61 [ 1350.361519][T24282] usb usb6-port1: unable to enumerate USB device 00:45:13 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:13 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="01af2136393b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @dev}}}}}, 0x0) 00:45:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x44}}, 0x0) 00:45:13 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @local, {[@noop]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ba5951", 0x0, "3105ed"}}}}}}, 0x0) [ 1351.026918][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 00:45:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x1c, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:45:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x5, 0x4) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x420}, 0x420}}, 0x0) 00:45:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x0, 0x248, 0xffffffff, 0x0, 0x0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @loopback}, [], [], 'vxcan1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@ipv4={[], [], @empty}, @icmp_id, @gre_key}}}, {{@ipv6={@local, @dev, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "97015d188619258b069d6ec6cfe4cdc8a75ca33b2a624b9bc4e39f5d06cc"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 00:45:13 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "36caac", 0x18, 0x6, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 00:45:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)=@sco, 0x80) 00:45:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="e0", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x20, 0x4) [ 1351.253151][T24282] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1351.449130][T24282] usb 6-1: device descriptor read/64, error 18 [ 1351.719104][T24282] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1351.918999][T24282] usb 6-1: device descriptor read/64, error 18 [ 1352.040089][T24282] usb usb6-port1: attempt power cycle [ 1352.749061][T24282] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1352.919141][T24282] usb 6-1: device descriptor read/8, error -61 [ 1353.189106][T24282] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1353.359049][T24282] usb 6-1: device descriptor read/8, error -61 [ 1353.479899][T24282] usb usb6-port1: unable to enumerate USB device 00:45:16 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:16 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1, 0x0) 00:45:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:16 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x404c0, 0x0) 00:45:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 00:45:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:16 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 00:45:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') write$P9_RLINK(r0, 0x0, 0x0) 00:45:16 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) [ 1354.250482][ T3001] usb 6-1: new high-speed USB device number 89 using dummy_hcd 00:45:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x2c}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0x3c}, 0x0) 00:45:16 executing program 3: mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:45:16 executing program 2: mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mprotect(&(0x7f0000c35000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 1354.458984][ T3001] usb 6-1: device descriptor read/64, error 18 [ 1354.742768][ T3001] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1354.959157][ T3001] usb 6-1: device descriptor read/64, error 18 [ 1355.089411][ T3001] usb usb6-port1: attempt power cycle [ 1355.839127][ T3001] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1356.049249][ T3001] usb 6-1: device descriptor read/8, error -61 [ 1356.339053][ T3001] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1356.529277][ T3001] usb 6-1: device descriptor read/8, error -61 [ 1356.655058][ T3001] usb usb6-port1: unable to enumerate USB device 00:45:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x1}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb) 00:45:19 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000200)={0x24, 0x1c, 0x1}, 0x1c) 00:45:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:19 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 00:45:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@init={0x14}], 0x14}, 0x20181) 00:45:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 00:45:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0x10}, 0x98) 00:45:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x61, 0x0, &(0x7f0000000000)=@un=@abs, 0x10) 00:45:20 executing program 3: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x80410, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 00:45:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x14}], 0x14}, 0x0) [ 1357.498987][ T8551] usb 6-1: new high-speed USB device number 93 using dummy_hcd 00:45:20 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 00:45:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x200, 0x0, 0x105}, 0x98) [ 1357.789145][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1357.939066][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1357.947705][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1357.967284][ T8551] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.982873][ T8551] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 1358.069277][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1358.078529][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1358.096839][ T8551] usb 6-1: SerialNumber: syz [ 1358.937436][ T7015] udc-core: couldn't find an available UDC or it's busy [ 1358.944681][ T7015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1360.155327][T24121] usb 6-1: USB disconnect, device number 93 00:45:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000080), &(0x7f0000000180)=0x8) 00:45:22 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, 0x0, 0x0) 00:45:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:22 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x8) 00:45:22 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) shutdown(r0, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 00:45:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f00000000c0)={{0x1c, 0x1c, 0x3}, {0x1c, 0x1c, 0x2}, 0x0, [0x0, 0x2]}, 0x5c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)=0xc9) 00:45:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000380), &(0x7f0000000440)=0x94) 00:45:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1c1c4e2000000000000000000000000002"], 0x98) 00:45:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c1c4e2000"/128, @ANYRES32=0x0, @ANYBLOB="0000000000de4561ba"], 0x98) 00:45:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 1360.788986][ T9773] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1361.030090][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1361.149148][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1361.157685][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1361.170405][ T9773] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.182759][ T9773] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 1361.270003][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1361.279149][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1361.287149][ T9773] usb 6-1: SerialNumber: syz [ 1362.099536][ T7070] udc-core: couldn't find an available UDC or it's busy [ 1362.106556][ T7070] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:25 executing program 3: sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 00:45:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000080), &(0x7f00000002c0)=0x4) [ 1363.459144][ T3215] usb 6-1: USB disconnect, device number 94 00:45:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:26 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 00:45:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000080), 0x8) 00:45:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), &(0x7f0000000080)=0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000240), &(0x7f0000000280)=0x8) 00:45:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff0500"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000300)=@in={0x10, 0x2}, 0x10) 00:45:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@init={0x14}, @init={0x14}], 0x28}, 0x20181) 00:45:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 00:45:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) fstat(r0, &(0x7f0000000100)) [ 1364.018991][ T3215] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1364.258963][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1364.379070][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1364.387742][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1364.396750][ T3215] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.407001][ T3215] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 255 [ 1364.489699][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1364.498803][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1364.510681][ T3215] usb 6-1: SerialNumber: syz [ 1365.311623][ T7114] udc-core: couldn't find an available UDC or it's busy [ 1365.318607][ T7114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 00:45:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000380), &(0x7f0000000440)=0xa0) 00:45:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1366.555126][ T3001] usb 6-1: USB disconnect, device number 95 00:45:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000100)={0x1}, 0x1) 00:45:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000080)=0x8) 00:45:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a01194f"], 0xa) 00:45:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:29 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='u', 0x1}], 0x1, &(0x7f0000000580)=[@dstaddrv4={0x10, 0x84, 0x9}], 0x10}, 0x0) 00:45:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x8c) 00:45:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000200)={0x1c, 0x1c, 0x2}, 0x1c) 00:45:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) shutdown(r0, 0x0) 00:45:29 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x4c) 00:45:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0x24}, 0x0) [ 1367.149034][ T3001] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1367.409096][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1367.559270][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1367.567901][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1367.579247][ T3001] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.591133][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1367.601956][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1367.613192][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1367.699188][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1367.709364][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1367.717682][ T3001] usb 6-1: SerialNumber: syz [ 1367.770206][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1367.776237][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1368.532249][ T7156] udc-core: couldn't find an available UDC or it's busy [ 1368.539539][ T7156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0), 0x98) 00:45:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@init={0x14}, @prinfo={0x14}, @init={0x14}, @authinfo={0x10}, @authinfo={0x10}, @init={0x14}, @sndrcv={0x2c}], 0x9c}, 0x0) 00:45:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb) 00:45:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x80000001}, 0x98) 00:45:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000140)='n', 0x1}], 0x1, &(0x7f0000000640)=[@prinfo={0x14}], 0x14}, 0x0) 00:45:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:45:32 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1369.769329][ T9773] usb 6-1: USB disconnect, device number 96 00:45:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003240)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:45:32 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 00:45:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20185) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x0, 0x3c}, 0x0) [ 1370.111441][ T8551] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1370.369192][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1370.509967][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1370.518382][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1370.531037][ T8551] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.542879][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1370.553645][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1370.564673][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1370.669787][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1370.687984][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1370.698112][ T8551] usb 6-1: SerialNumber: syz [ 1370.770357][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1370.780923][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1371.529701][ T7216] udc-core: couldn't find an available UDC or it's busy [ 1371.538622][ T7216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000000), 0x4) 00:45:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000006c0)={0x0, 0x0, 0x4}, 0x10) 00:45:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000880)={&(0x7f0000000440)=@in={0x10, 0x2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000480)="15", 0x1}], 0x1, &(0x7f0000000840)=[@sndinfo={0x1c}], 0x1c}, 0x0) 00:45:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000840000000a0000000000000000000000ffac1400aa140000008400000007"], 0x70}, 0x0) 00:45:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000), 0x84) 00:45:35 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x7, 0x1c, 0x3}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 00:45:35 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1372.879387][ T3215] usb 6-1: USB disconnect, device number 97 00:45:35 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), 0x10) 00:45:35 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:45:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000180), &(0x7f00000001c0)=0x8) [ 1373.239437][ T3215] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1373.479054][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1373.599827][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1373.608485][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1373.620518][ T3215] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.631145][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1373.642712][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1373.655161][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1373.749992][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1373.759628][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1373.767658][ T3215] usb 6-1: SerialNumber: syz [ 1373.820938][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1373.827883][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1374.583496][ T7264] udc-core: couldn't find an available UDC or it's busy [ 1374.594133][ T7264] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 00:45:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) 00:45:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000001680), &(0x7f0000001740)=0x4) 00:45:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:38 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) 00:45:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 00:45:38 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 00:45:38 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1375.969267][T24121] usb 6-1: USB disconnect, device number 98 00:45:38 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000), 0x4) 00:45:38 executing program 0: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x410, 0xffffffffffffffff, 0x0) 00:45:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000180), &(0x7f0000000240)=0x98) 00:45:38 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x308382, 0x0) 00:45:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000010c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 1376.289112][T24121] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1376.549316][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1376.699939][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1376.708368][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1376.728459][T24121] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.740535][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1376.750653][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1376.771560][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1376.790073][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1376.889135][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1376.898420][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1376.917040][T24121] usb 6-1: SerialNumber: syz [ 1376.950755][ T7318] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1376.970347][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1376.976392][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1377.744625][ T7318] udc-core: couldn't find an available UDC or it's busy [ 1377.751801][ T7318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:41 executing program 0: chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x480000, 0x0) 00:45:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000b00)={0x0, @in, 0x0, 0x0, 0x0, 0x7ff}, 0x9c) 00:45:41 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) 00:45:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 00:45:41 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)=0xc9) [ 1379.059258][ T8551] usb 6-1: USB disconnect, device number 99 00:45:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="1c1c4e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be1948e48d202ea0eb8785c66b"], 0x98) 00:45:41 executing program 0: semop(0x0, &(0x7f0000001240)=[{}], 0x1) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mincore(&(0x7f0000eda000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/4096) 00:45:41 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x55, &(0x7f00000000c0)={0x0, {{0x1c, 0x1c}}, {{0xfffffffffffffec7, 0x1c, 0x1}}}, 0x108) 00:45:41 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000002400)={0xfffffe22, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) [ 1379.462966][ T3215] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1379.708983][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1379.829083][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1379.837778][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1379.850499][ T3215] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.861918][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1379.872630][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1379.908038][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1379.918994][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1380.022133][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1380.036445][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1380.054433][ T3215] usb 6-1: SerialNumber: syz [ 1380.090949][ T7368] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1380.110269][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1380.116293][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1380.868171][ T7368] udc-core: couldn't find an available UDC or it's busy [ 1380.875303][ T7368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:44 executing program 2: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x410, 0xffffffffffffffff, 0x0) 00:45:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 00:45:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:44 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) 00:45:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x14}, 0x8) 00:45:44 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:44 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 00:45:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="8203a1b132d6eda7eeacb73a93c9b971c377812e7d413deeb1bfd71718b48a3573c312f0903643d52787ef05ff1e99b0b41db559e0de71fe3c764d005930b0dfd61c8eb334f9346bffd9b19bf3", 0x4d}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="1c1c"], 0x98) [ 1382.209401][T24121] usb 6-1: USB disconnect, device number 100 00:45:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 0x45c}, 0x8) 00:45:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) connect$inet6(r2, &(0x7f0000000200)={0x1c, 0x1c, 0x2}, 0x1c) 00:45:44 executing program 0: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) [ 1382.520229][T24282] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1382.759080][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1382.879133][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1382.887698][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1382.905497][T24282] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.922195][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1382.935194][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1382.950708][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1382.964958][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1383.059124][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1383.071493][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1383.083613][T24282] usb 6-1: SerialNumber: syz [ 1383.110692][ T7419] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1383.130812][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1383.136861][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1383.905740][ T7419] udc-core: couldn't find an available UDC or it's busy [ 1383.912932][ T7419] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000240)={0x1c, 0x1c, 0x3}, 0x19) 00:45:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) 00:45:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:47 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) 00:45:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000280)) 00:45:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000300), 0x8) 00:45:47 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1385.290482][T24282] usb 6-1: USB disconnect, device number 101 00:45:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) 00:45:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f0000000000), 0xc) 00:45:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x1c}, 0x0) shutdown(r0, 0x0) 00:45:48 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc0) [ 1385.619049][T24282] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1385.859074][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1385.980525][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1385.989090][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1385.997884][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1386.021032][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1386.033440][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1386.044293][T24282] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1386.055062][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1386.149049][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1386.160653][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1386.168767][T24282] usb 6-1: SerialNumber: syz [ 1386.210824][ T7478] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1386.230406][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1386.236728][T24282] hub: probe of 6-1:5.0 failed with error -5 [ 1386.997535][ T7478] udc-core: couldn't find an available UDC or it's busy [ 1387.008310][ T7478] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:50 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:45:50 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x48) 00:45:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:50 executing program 0: setgroups(0x5, &(0x7f0000000000)=[0xee00, 0xee00, 0x0, 0x0, 0xee00]) 00:45:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000003340)=[{&(0x7f0000000040)="c7", 0x1}], 0x1}}], 0x1, 0x0) 00:45:50 executing program 2: futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000000c0), 0x0) 00:45:50 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:50 executing program 2: clock_adjtime(0x0, &(0x7f00000000c0)={0x2}) [ 1388.399694][ T3215] usb 6-1: USB disconnect, device number 102 00:45:51 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x5c2) 00:45:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046d821b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fc61d767839b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe07929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31daeca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb503b4c5121dded93115f5ba8b208667228ca302d556eb2001bfcdf0fba229a80370cbf6aeb68205b62db0d495b0c2654521606aee1ad02f0171ce44ac1b5e396878f8fe40d6a661bc5b2cacaf6365785e77b812008bcad951982c7a49af7d607381299da4466acfeacc43627a2e0cd51f072ed81cffbeb883f2b2a6f22f073d435c97ae6617d6d9827199391bf0bb87cafd38f69e13d75e5a473cf65502e653073a644f26ae842f51fabc097560d174962e5cceabf29ad02e71f2540cb10c4e1d3422f22cb00"/2728], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:45:51 executing program 0: futex(&(0x7f0000000300), 0x1, 0x0, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) [ 1388.768974][ T8551] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1389.039233][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1389.171826][ T8551] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1389.198634][ T8551] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1389.221704][ T8551] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1389.236905][ T8551] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1389.255086][ T8551] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1389.265791][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1389.276611][ T8551] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1389.369247][ T8551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1389.378359][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1389.394945][ T8551] usb 6-1: SerialNumber: syz [ 1389.440877][ T7531] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1389.460253][ T8551] hub 6-1:5.0: bad descriptor, ignoring hub [ 1389.466398][ T8551] hub: probe of 6-1:5.0 failed with error -5 [ 1390.226319][ T7531] udc-core: couldn't find an available UDC or it's busy [ 1390.237040][ T7531] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @volatile, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000008700)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000003340)=[{&(0x7f0000000040)="c7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:45:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x109001, 0x0) 00:45:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:53 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000580)=0xc) 00:45:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/stat\x00') read$FUSE(r0, 0x0, 0x0) 00:45:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) 00:45:54 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x4028700f, &(0x7f00000004c0)) [ 1391.529650][ T8551] usb 6-1: USB disconnect, device number 103 00:45:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x608, 0x4) 00:45:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f0000000340)={'wlan0\x00'}) 00:45:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) [ 1391.939027][ T2898] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1392.179064][ T2898] usb 6-1: Using ep0 maxpacket: 8 [ 1392.299766][ T2898] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1392.308175][ T2898] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1392.329656][ T2898] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1392.342908][ T2898] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1392.357835][ T2898] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1392.373771][ T2898] usb 6-1: config 5 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1392.389386][ T2898] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1392.479179][ T2898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1392.488425][ T2898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1392.507309][ T2898] usb 6-1: SerialNumber: syz [ 1392.543590][ T7581] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1392.580414][ T2898] hub 6-1:5.0: bad descriptor, ignoring hub [ 1392.586455][ T2898] hub: probe of 6-1:5.0 failed with error -5 [ 1393.345922][ T7581] udc-core: couldn't find an available UDC or it's busy [ 1393.353013][ T7581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:45:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)="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", 0x581, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) sendto$inet(r0, &(0x7f0000000040)="fc94", 0x2, 0x4000011, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='[', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='b', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000007300)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7115}, 0x40001100) 00:45:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x20, {{0x2, 0x0, @multicast2}}}, 0x88) 00:45:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r1, 0x0, 0x2}) 00:45:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0xfffffeb6) 00:45:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001980)={0x28, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}], 0x1}, 0x0) 00:45:57 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:45:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r1, 0x0, 0x2}) [ 1394.688257][ T2898] usb 6-1: USB disconnect, device number 104 [ 1394.702786][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:45:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001100)={0x0, 0x0, 0x1, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r2}) 00:45:57 executing program 0: r0 = getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x2f, 0x4, @tid=r0}, &(0x7f0000000040)) 00:45:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r1, 0x0, 0x2}) [ 1395.129131][ T2898] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1395.379076][ T2898] usb 6-1: Using ep0 maxpacket: 8 [ 1395.499141][ T2898] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1395.507543][ T2898] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1395.518504][ T2898] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1395.529505][ T2898] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1395.542094][ T2898] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1395.552745][ T2898] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1395.563182][ T2898] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1395.573806][ T2898] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1395.659976][ T2898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1395.669168][ T2898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1395.677291][ T2898] usb 6-1: SerialNumber: syz [ 1395.710647][ T7634] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1395.750399][ T2898] hub 6-1:5.0: bad descriptor, ignoring hub [ 1395.756439][ T2898] hub: probe of 6-1:5.0 failed with error -5 [ 1395.969327][ T2898] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1396.579650][ T7631] usb 6-1: reset high-speed USB device number 105 using dummy_hcd [ 1396.819258][ T7631] usb 6-1: Using ep0 maxpacket: 8 00:45:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:45:59 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:59 executing program 3: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) [ 1396.962661][ T7634] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1397.319927][T24121] usb 6-1: USB disconnect, device number 105 [ 1397.347872][T24121] usblp0: removed 00:46:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r1, 0x0, 0x2}) 00:46:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000240), 0x4) 00:46:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t'], 0xc0}}, 0x0) 00:46:00 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f5, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000000c0)=""/233, 0x2e, 0xe9, 0x1}, 0x20) 00:46:00 executing program 3: rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 00:46:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x0, 0x1}]}, @ptr]}}, &(0x7f0000000100)=""/193, 0x42, 0xc1, 0x1}, 0x20) 00:46:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0xc0045878, 0x0) [ 1398.199336][ T3001] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1398.459129][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1398.611447][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1398.620131][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1398.629998][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1398.640660][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1398.652705][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1398.665162][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1398.676149][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1398.688093][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1398.789908][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1398.799590][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1398.807683][ T3001] usb 6-1: SerialNumber: syz [ 1398.850693][ T7715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1398.883952][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1398.890295][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1399.105981][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1399.760255][ T7713] usb 6-1: reset high-speed USB device number 106 using dummy_hcd 00:46:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@fwd, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:02 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x2, 0x0) 00:46:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000296a2d0eea45f451", @ANYBLOB], 0x1c}}, 0x0) [ 1399.984417][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1400.028953][ T7713] usb 6-1: Using ep0 maxpacket: 8 [ 1400.194120][ T7715] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1400.542450][T24121] usb 6-1: USB disconnect, device number 106 [ 1400.556032][T24121] usblp0: removed 00:46:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @volatile, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:03 executing program 0: socket(0x72, 0x0, 0x0) 00:46:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140)) 00:46:03 executing program 3: r0 = getpgid(0x0) ptrace$peek(0xffffffffffffffff, r0, 0x0) 00:46:03 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x300}, 0x0) 00:46:03 executing program 2: bpf$MAP_UPDATE_ELEM(0x5, 0x0, 0x10) 00:46:03 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x2780, 0x0) 00:46:03 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names}) [ 1401.359063][T24121] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1401.618989][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1401.749078][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1401.757594][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1401.778076][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1401.792058][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1401.807821][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1401.821841][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1401.836614][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1401.853202][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1401.949996][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1401.959568][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1401.968038][T24121] usb 6-1: SerialNumber: syz [ 1402.010611][ T7773] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1402.030426][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1402.036486][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1402.243437][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 107 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1402.859797][ T7772] usb 6-1: reset high-speed USB device number 107 using dummy_hcd 00:46:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f00000001c0)={0xec4, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xe95, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0xec4}}, 0x0) 00:46:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2) [ 1403.119163][ T7772] usb 6-1: Using ep0 maxpacket: 8 [ 1403.271618][ T7773] raw-gadget gadget: fail, usb_ep_enable returned -22 00:46:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@fwd, @volatile, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xcb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0xf55857402dd2c329, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:46:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0xa01, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x24}}, 0x0) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000200)=""/233, 0x30, 0xe9, 0x1}, 0x20) [ 1403.649458][T24121] usb 6-1: USB disconnect, device number 107 [ 1403.678279][T24121] usblp0: removed [ 1403.781452][ T7819] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1403.814363][ T7822] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:46:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0xa01, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:46:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0x9) 00:46:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000004bc0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004b80)={0x0}}, 0x0) 00:46:06 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r1 = epoll_create(0xbd46) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 1404.489157][T24121] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1404.779155][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1404.919740][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1404.928287][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1404.948456][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1404.963395][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1404.978695][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1404.990285][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1405.002534][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1405.109246][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1405.118687][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1405.126846][T24121] usb 6-1: SerialNumber: syz [ 1405.171214][ T7837] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1405.185984][ T7837] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1405.220552][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1405.226591][T24121] hub: probe of 6-1:5.0 failed with error -5 [ 1405.448355][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1405.520117][T24121] usb 6-1: USB disconnect, device number 108 [ 1405.539433][T24121] usblp0: removed 00:46:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:08 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000100)) 00:46:08 executing program 2: socket(0x3, 0x0, 0xffffffff) [ 1406.079128][T24121] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1406.329067][T24121] usb 6-1: Using ep0 maxpacket: 8 [ 1406.469064][T24121] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1406.477490][T24121] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1406.495189][T24121] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1406.507971][T24121] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1406.525193][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1406.539485][T24121] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1406.555364][T24121] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1406.649147][T24121] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1406.659533][T24121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1406.667778][T24121] usb 6-1: SerialNumber: syz [ 1406.701653][ T7833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1406.727192][ T7833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1406.741276][T24121] hub 6-1:5.0: bad descriptor, ignoring hub [ 1406.747315][T24121] hub: probe of 6-1:5.0 failed with error -5 00:46:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@fwd, @volatile, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xcb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:09 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x5}}}}}}}]}}, 0x0) 00:46:09 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttynull\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 00:46:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:46:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:46:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005000)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x2}]}, &(0x7f0000004e80)='GPL\x00', 0x5, 0x8b, &(0x7f0000000000)=""/139, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1406.964635][T24121] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f00000001c0)=""/233, 0xe9) [ 1407.030353][T24121] usb 6-1: USB disconnect, device number 109 [ 1407.063835][T24121] usblp0: removed [ 1407.119037][T24282] usb 4-1: new high-speed USB device number 121 using dummy_hcd 00:46:10 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @multicast2}}}) r1 = socket$inet6(0xa, 0x3, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r4}}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x4, 0xf3, 0x2, 0xffffffff, 0x18, @private0, @local, 0x8, 0x8000, 0x9, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @rand_addr=' \x01\x00'}}) [ 1407.489170][T24282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.511907][T24282] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1407.544508][T24282] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1407.584370][T24282] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1407.622765][T24282] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1407.824694][T24282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1407.833980][T24282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.850721][ T3001] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1407.854759][T24282] usb 4-1: Product: syz [ 1407.866107][T24282] usb 4-1: Manufacturer: syz [ 1407.880217][T24282] usb 4-1: SerialNumber: syz [ 1408.119357][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1408.219174][T24282] cdc_ncm 4-1:1.0: bind() failure [ 1408.233572][T24282] cdc_ncm 4-1:1.1: bind() failure [ 1408.253158][T24282] usb 4-1: USB disconnect, device number 121 [ 1408.270291][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1408.291008][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1408.314539][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1408.334091][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1408.345891][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1408.360891][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1408.371302][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1408.469941][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1408.479446][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1408.487632][ T3001] usb 6-1: SerialNumber: syz [ 1408.520766][ T7911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1408.528274][ T7911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1408.570325][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1408.576375][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1408.787905][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1408.853564][ T3001] usb 6-1: USB disconnect, device number 110 [ 1408.863445][ T3001] usblp0: removed [ 1408.929358][T24282] usb 4-1: new high-speed USB device number 122 using dummy_hcd 00:46:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xb3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005000)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB='@'], &(0x7f0000004e80)='syzkaller\x00', 0x5, 0x84, &(0x7f0000004ec0)=""/132, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:46:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) [ 1409.289892][T24282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.301004][T24282] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1409.311638][T24282] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1409.326524][T24282] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1409.339189][ T3001] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1409.345979][T24282] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1409.509121][T24282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1409.518375][T24282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.529297][T24282] usb 4-1: Product: syz [ 1409.534426][T24282] usb 4-1: Manufacturer: syz [ 1409.539779][T24282] usb 4-1: SerialNumber: syz [ 1409.609108][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1409.740004][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1409.748400][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1409.767891][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1409.781039][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1409.799753][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1409.815990][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1409.834060][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1409.869297][T24282] cdc_ncm 4-1:1.0: bind() failure [ 1409.887455][T24282] cdc_ncm 4-1:1.1: bind() failure 00:46:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@fwd, @volatile, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xcb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:12 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@abs={0x1}, 0x25, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x50}], 0x1, 0x0) 00:46:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f01b268ec66b9a109000066b80a80000066ba000000000f30e08d0f01c866b80500000066b9003800000f01d9baf80c66b89846c28766efbafc0c66b85700000066ef3666f2606766c7442400ad6700006766c74424026c0000006766c744240600000000670f011c24643e65260f01d5f08293e81305", 0x77}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 00:46:12 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x600480, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x125000, 0x0) [ 1409.940312][T24282] usb 4-1: USB disconnect, device number 122 [ 1409.970246][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 00:46:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)) [ 1410.006833][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1410.042469][ T3001] usb 6-1: SerialNumber: syz [ 1410.091660][ T7907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1410.121307][ T7907] raw-gadget gadget: fail, usb_ep_enable returned -22 00:46:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$evdev(r0, 0x0, 0x0) [ 1410.202865][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1410.210293][ T3001] hub: probe of 6-1:5.0 failed with error -5 00:46:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') [ 1410.410665][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1410.470370][ T3001] usb 6-1: USB disconnect, device number 111 [ 1410.487027][ T3001] usblp0: removed 00:46:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000005c40)={0x0, @llc={0x1a, 0x108, 0x80, 0x0, 0x8, 0x67, @link_local}, @nfc={0x27, 0x0, 0x1, 0x1}, @l2={0x1f, 0x1, @none, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000005c00)='macvlan1\x00', 0x6255, 0x8, 0x8}) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="240000000000000029001d00401500000092b2d6c200000000400000000e00001000c7cb5974f0bebe2e3686e964b22c8c19eda1b5853a7298cb3078e0ef3e2137bf9db7c5df9a8a6612d3eebdeef9a7a264590e8c80108f13233306724c5b19a6c8b22cb5a36129b2e237de7e1e2bbe1cb2f258ff36982f6140bd05858671ead9fe152906936867523583113301ad34d823aa63a90b15997e3e2d1709a5e8ca2cf4004b459b1b1f3c99cb7c5fa66f7467f3425a64a1b9dac90b2d8c5fb548219ca5814d7ce43743e7d6ab68de400ea78d496fa23ac0cc4770c2e48b7cd65b0871f801b4d4f5a8b7c4b8d40084cda3af79f1ff3fc14ff1277f2928964a5af514e0fc9b19758a5ad4f167b8"], 0x120}, 0x4004000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x73b4, {{0xa, 0x4e22, 0x55, @empty}}}, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000840)={@mcast2, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000041c0)={'ip6_vti0\x00', &(0x7f0000004140)={'syztnl0\x00', 0x0, 0x2d, 0x35, 0xad, 0x79fa, 0x14, @private0, @mcast2, 0x700, 0x8, 0x7, 0x8}}) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x10000, @private1, 0x7fff}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="556c3de1ade12e1f5f0283e7fe6974d97ab89aca8485b5919bf1e87f02018f7219f037526356bbeff3df285ac9641f59ef70f2d643c4c8911646234e9e238d7e13e050bd516d537e412a07e1a63bcf9f034b690277f6f08035c6cbf2e9980c464f793cccf2bafbefb76ed12e27e1efe7e6a19f573d308801d131d31c20dc6022e198ff6061de26881bdd3b42e21ea332dc071418994e00e0d1f1eaee842e83a9ce3c6f926844de73ba0bcfe4ebb342f2b86b7d2242f4e073bfcfe757b5aa5a636e9115988ba0404a49d16db803795136342c", 0xd2}, {&(0x7f0000000380)="9f7f0a272d26b9ab5fdc52dd5c5c2c74f6a1ffec7e0223de823fd38d0ba9e6cc946ef80c6fbc505026766cdc98bd1c43259d9c4248b5179421b8b4370899cafa9b82e3a49a751cb32ee155c8b8d9d289", 0x50}, {&(0x7f0000000400)="71367c4e91d5f04d611298d9b6bd644870036e3c7efc6b91a64b89999ff6f07e35786fd531d5010c9d3e9e6c7044c552b4d959682264405525743642008c20f7139d2d1d286ca94047fcae15ef9c1ea4fbcd07506c55f9f98cce6bcc4c3d7ccd9ced500fb6eb58c0c9510c6653a4398b2ad5b8054e0faa02e72528", 0x7b}, {&(0x7f0000000480)="9c7cc50935d2c42f9661e9dce4fcdcd7e6193486533fa6d03fbe", 0x1a}, {&(0x7f00000004c0)="ee1b43a8b5686787ac0f8aaade3112418f8a8bdf019a3bf8ece12c0f9c9129411444ecb8f5958202172164e5a74eb803c53220e4e59c878c01cc5725eb0d7698ec6bb81f6152c68fa84c5b0de2f4cd826c8a2ecf0b25c308b62260c88fe643d5d52afccf6972ca0c224ab9f58ba04aebb829b5ae", 0x74}], 0x5, &(0x7f00000005c0)=[@hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, [], [@jumbo]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}], 0x50}}, {{&(0x7f0000000640)={0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, [], 0x38}, 0x1ff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000680)="1ebce9fb1c301fb7dfc3317f4e126bab8c12832427d1b58bafe9697fa5af9014cf9213c03cef33436a6ba0190f5ed4a6227ab531b65f401eaeae4e5027a0a8ae9bd14290fc1f6ad175e5db26a9d6b7d7c79e8706b47b2196b82560696bb11fa3457ae63c84a78870ac8c763072a26eb014fbdfd67dda0a845eeba3a641da6344cc8ae780708646a50db3e3be4b6b0911949ff16c6c78b50e49dd578a98dbe14c2bde30391d4452a7bf7b7309650e0cca7919dc937b0b", 0xb6}, {&(0x7f0000000740)="fdbb198a2574aa07f7969884b782260cd2e7fc7660afcab49ba144f09332bd113c247de3fe392674ee0b094a13917d2f2c2f7239f00c077f06912ba6727dc0afe05e12a51ae7d18209bfc9537486b3ec0674e792c8de05328ff2654aae06100440d6c95804cfd0f3fc15f260a6cd201d5534f31844a68192040a83956ec5345008aa3f867fa399f9d6540e9ad8c48173d4228493282d", 0x96}], 0x2, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hopopts={{0x1d8, 0x29, 0x36, {0x0, 0x37, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x70}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xc5, "46a73b3fd097dbcbeab5874510cc57fff5ffc091931c5335b5dc07f790c7bb2743f02ac82544ac1349f4cc13f1cc79b31e8a019446b7e52dcffd86f08db499ef9aeccc1354d57f5c373f112727fd2ecf112d9f9d7998b0a61b68ce5a8bebc1a98094af51232d45bcea58a91eb3bc6a4fb65987c6b59bb1976f9e6024f9b1dfc31fdc13a5c99ae1c9d2464f962334e8cf17b73af5d4cbec9d2d7c3e8c515fa0bb7d8c28735ca715c8edb529d83d086f1081b16c40f6d85c67691eb7d272e1da83276aca0893"}, @generic={0x7, 0xc9, "e3ca8bd41e07be4d0d15666c6f013c819461405bde4c848eaa8ba0cddb6bd8423c309ca644ffe8ffe793600cac8004f9c3997bc7cbbe2e84a2a4267f7efe4cd18fede16b6c6921f07086f61cea9863d695386d00ad90d103228f3bbd062ac2e21d399d72ff0b8fb1cfdac0cdaa01192d7c5c7e98566304e8d0ca5e6e9d7b89fd21ff5707a0afe7abe9d2b08ae1962ab4cd69d79114deb7871eea1ef64b291bb119d757cbba1433a1be8fa6fbca343600a94b984c9be238b700d2df043f2f19d32e5fc0ec8e98f5f038"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3, [0x80]}}]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x67, 0x1e, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private2}, @pad1, @generic={0x80, 0xa6, "715c33395b5c5d194de9dc88e572a6a1117d176189ec1f5b08b169272a1e6010db77f4f43aa7dee0acae0c94356c7638fbfdf247392e2ccad538eddbdd21485ec338073812ebb3cf06f710166c8504653f75ff0b5fbb9d5e6d865b28609ac8533f4073d0b3c7d218e7a46d58d210497bcdfb4126fb90e83a450df9b3136d34c7456d1f1d05f24fcdf16780b8c59eaedceeb743c59e9a4068db3b812568cd90d46f4ba37120d4"}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x3ff}, @hao={0xc9, 0x10, @empty}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@mcast1, @private0={0xfc, 0x0, [], 0x1}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x2, 0x7, 0x0, [@mcast1, @mcast1, @private0={0xfc, 0x0, [], 0x1}, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0]}}}, @dstopts={{0x60, 0x29, 0x37, {0x0, 0x8, [], [@calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x0, [0x6, 0x7ff, 0x8001, 0x2, 0x2]}}, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x81}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}], 0x460}}, {{&(0x7f0000000d40)={0xa, 0x4e21, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000d80)="3d97b6e7f1b23e6fab978361dbe05371362de500fea13201b58215e721dab764e641f61bd1076aa6575e72c66acded8b591badf85e1faae012872904bb57033183636797a3c12c18ef8a64f979116cd5082d73e9af13a52c374ceb21570d331b1a4538f9b5abe3170ff5c921d393e6e9ce1d60c1c72425da3b88cb8804ff864d470dd82d641b2229", 0x88}, {&(0x7f0000000e40)="8cb9b65b10d432dff97fa45b42f647632c82a1aabf75736e973944f20e01e94de39919cd7c60961da8c42bd14f9e46ae1516572dac18684e37387e6a3ff6f643009104cdf1185126e2e686f7cd627946100f92e3408e9950f27d759eeeeca03a37e1d76891e3ffa482075e95300d81142b0ee86f38cfa910acc33d2a2fa52384baf6b866a0ac26590c2b636fafea2fd8f00d53758a3247ae2532dbf498d9ec56e4ef5b480b177071c01412ad20b348829d5f99020dd098f2e8768756de9873d9285dd1d0165d9ba74d1a1c5aa4fffe588ae87d749e", 0xd5}, {&(0x7f0000000f40)="e8042da05e323b0f0544632c770c7a6bd44519f4124bec1b0deb8948bcd88b85dfdf194acdaef5bfd5154a3654e2accf2ca72144087b7e5ad489527302155ee1d4c4fe409c1d6b07a228dcc8c722f32443324298a718efca69e42e7da183355c6e1d5f5cbbd1802e0e161505e3cec18f28133a0da8ea0f05a6503f9ab46aed546fe289ab16abba313911b1607909c2eac8", 0x91}, {&(0x7f0000001000)="1fb888940d90a0099facd8cb0a86c85deeeba117899a10a20b673b62ea2910a0984d02075a5bfc4202b2eb7358cfbb2bb4b3fb6dab6ff76a6be13d91bfe756288af00ff2a62f", 0x46}, {&(0x7f0000001080)="7339b8ada9d62c4bb4233f09a56b5130667a855bced991d42a950ef5ccee59", 0x1f}], 0x5, &(0x7f00000016c0)=[@rthdrdstopts={{0x1058, 0x29, 0x37, {0x89, 0x208, [], [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x8, 0x1000, "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"}, @pad1, @pad1, @generic={0x81, 0x24, "d92ba2ebf0ca2ffd40f0bde3bf43c291196904f1f94cd3d59ee743439e58ce11bc5fafc9"}, @ra={0x5, 0x2, 0x8}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x3c, 0x1b, [], [@enc_lim={0x4, 0x1, 0x35}, @ra={0x5, 0x2, 0xdafd}, @ra={0x5, 0x2, 0x101}, @jumbo={0xc2, 0x4, 0x392f}, @calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x543a, [0x1, 0x7f, 0x3, 0x1ff, 0x100000000, 0x2, 0x10001, 0xff]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x80, 0x9, [0x8]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x81, 0xfec, [0x98, 0x7, 0x8, 0x8000, 0xfffffffffffffffc, 0x3, 0x8]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x7, [0x1, 0x7fff, 0x800, 0x7f]}}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x0, 0x0, [@local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x11f0}}, {{&(0x7f0000001140)={0xa, 0x4e22, 0x9, @empty, 0x20}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001180)="ea98b01b786f60dfe9b96c10c32e8099f4bc773d3322e64ab167127c67cf8520f18659ced74f0bdcd7f504001845b9c743105e2fc6ac158bd8b61d82fc628510a3bc23fd5bce7e888aeccc", 0x4b}, {&(0x7f0000001200)="c169c9c0ef9b426d77ebfe46e9db5cc354e260e5e2d584", 0x17}, {&(0x7f0000001240)="3dfa5989ca390f3ff9aa0411cafe38ff8f5be9ac86b73d1acca02b7f67052e0706939dab86b2a92e4ef0ad777e3bf67c6bffa47119c3004d1c2dd59952db3c3f9c23f5d61a4e247483fb79073b2f9e22e39848b73ae57c90b6eefa46d0f2a75cb4c339d95666cad76b4a12dfb94b49903fd72b82ae688ca5fcf0875ab411e58afdd5d566107335c6e77b8a8717b39c171269874d9dfc7b7fb1d0f73076acb4888cd10337817cd6466c457dcd8117a52cf5073777dc6eb1c9a910dc07f41458ca22a5a4621b3a", 0xc6}, {&(0x7f0000001340)="beb534173a6c50e8d933737a243b6bc94bbf9fcd605702e1e0e072e733009a25ec163abccecba1049ccf1016bd66a82547ea2f452aecfb1c06254a6df8533db66e844e92da992a79b4471fcb1caa2aed82e3061ea1fe2f430516053f15df030844cffe34a776f7941b2f259bb411ea11f0b2f90b03164b702f855b148ad2a739ff2f9924d6965662355e527811d993f850904c3795", 0x95}, {&(0x7f0000001400)="ba2b2793e14d69ad92b610d1b9761c3445b28d364a2db8e6f7892655eacd51c872c6393ef82f29d8f502b95a021ccb6f4d9dac688fc7b4448331d956facbdd8760cf73643f1f990d2dcf418cb70e8138a76fd6feb4fd074c0acc0b03b06b1e6ee6ad94a532c91bc1679f14c1dc263dd559b8d8a7243eb8535a4350682a5bdc8c62a09207b5926d0a2ab0aff4a6232ebdff3327939d7eea33d6078ea91cadb55b70ad923e96565a649d851e512c74", 0xae}, {&(0x7f00000014c0)="838d19f21844c4103c5c9e9eb770207eb5606585e4ee3b4cb1aab3332dd7e560881268c52582bf2c422acdb32f01e3", 0x2f}], 0x6}}, {{&(0x7f0000001580)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000028c0)=[{&(0x7f00000015c0)="51d23dfc625b4a7095ad619867b2ded1fb190ad8121d1600c07db0d2f0393fdf797ba9946f08614b6739516de3e0fc3e464c56ae8e54959641b8ef6423b8fa8c044bb0bd8a6d08f51dae75d0170958e0cfd5880874a0333413c3447181c53dc88b69525fea86574d40aaf59a695cfd31d8c50b49c15426a7672313abc0c84cddeb2533dee25a03", 0x87}], 0x1, &(0x7f0000002900)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0x16, 0x4, [], [@ra={0x5, 0x2, 0xffff}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x1f}, @pad1, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x8}, @pad1]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x33, 0x19, [], [@ra={0x5, 0x2, 0x8001}, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x2, 0xa, "0b350eb7c5d36f466860"}, @ra={0x5, 0x2, 0x9}, @generic={0x7f, 0xa3, "0444239530d220547e0b1cb8a478da71a722a1116a668e150b168898db8a4536b23f54200280fd499fd8b2779ea7c7bed4045dd9d746c58df75499e0f78bee51ca8a6c5b8e7b0b7897d868d7c9f86bcee6804c8647b22b2beca4ee4db79bc9d320fd9c4009c20226fbcc68a0f7aaeba5497c673f194559aa504708f7feb7106a817261db854071259e091dbcd3a7552d5ab1bb0d021b564372d670b157295814912fa9"}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x67, 0xa, [], [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xff, 0x6, [0x8, 0x2, 0x3, 0x0, 0x2000, 0x6]}}]}}}], 0x198}}, {{&(0x7f0000002ac0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xff000}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="217664101aa64db0a54b45afa697fe69e1a8b381fe95f3e23b9f46bd6bf3b66c32dd6d090445862b953ef941102924ee8c06cab5b32b2084393a8a066ced4094309f04a4f9f48fdbb5936334e70c2c768bf951f6fef98e2a3273b9e862d702729c203ac393c8fe3d60ad7543231ba55ef9fe9c543398d35c64d052d67be7bf54547a5c2f461a280119f9303e9789e62a06d1e3", 0x93}], 0x1, &(0x7f0000005cc0)=ANY=[@ANYBLOB="140000000f0000b9af861ceb8d9ad972eb84b4c90029000000340100000800000000000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002c40)="496297b198fb623b936952b65d5f41ed34d2c02e737d5799e61ee0f54b84a54ae5ad771bf22e6fd8d934d4fef40ac48fe18413f47abc6251f4c725be9490166a285f7c0ebd7cfb77b0c52c17af2c0130eba0ceb3be602e8eb227767b1b5b4b", 0x5f}, {&(0x7f0000002cc0)="058953dd39b4449f8fd1f1b08443c5ff0a", 0x11}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="db42180605e5ad34d10f1dadcc41c4a091eb77b2278733e9588a5b2044492773be8dde8980d54c74603d02e829ba6e140d2a909fd55d2fecf7d2a0df1a3611f6dadedc9a2bebd2100f66176954326ca5ff603762fbd639b1bf34090550d8d180819849cdfe19d360a20414e77b6565831afb4e03d98729831d3b8d8e7479e75f5a548892ca6478f3ecc3dec8e854e76ab29757763aa10b3211", 0x99}, {&(0x7f0000003dc0)="6a327874bc4d", 0x6}], 0x5}}, {{&(0x7f0000003e80)={0xa, 0x4e21, 0x401, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, &(0x7f0000004100)=[{&(0x7f0000003ec0)="380af52fe044ced51017a6cfd9e9f6aab68a6d02a87b13beee6edffd4e84cd88cc685835a61b6e80e9c5ff3d6f112ff124c480c0ae33", 0x36}, {&(0x7f0000003f00)="42edaba896169c759260a7b4bd79daf64226718da4be37", 0x17}, {&(0x7f0000003f40)="b42316f964f7eeba5748a4f8b24a0329aa6233ac395c296b9bea2d5e6b3337ca6ab4df79c80fdf8e3762a96f68d659097390783ad747773c14d314614b0a853c2e42e3f3f345fce25e88564cd61688b8966605f121f1fa5b7754a68d174a8f0707ab65815253c78af8a59021e8b57d889ae2f3ceef4bc2998d942ae8eec8c3caa67008b5220f37bfdb341e7c8c60c0e629b6a81b5bb307745c4756", 0x9b}, {&(0x7f0000004000)="edd6ee380029d772edb137509922d0d5615bfd9b5e67bc1d994926fa88aa0e48f8932281578e1e44a93d65936cf83ee514175bf820ab7e58d649f49ec2ec375b8a679c1a6a20d514cae921b175ea0c00a15fc48a4f960584f2327a23a8536f85f9c562212f0a64c831575d7c7c423df82aed05dd3f6c058dc4ce854817142a8e185aeb7ee51ac44ab4ac1d40e911eb7d519e2519a0cd96560fe2754c075a09cd328d800d6bba52dd4c5ce949a4247ff9d6c701ced4cf6ba56d841647e1e0a8f75bd1e00a24", 0xc5}], 0x4, &(0x7f0000004200)=[@hopopts={{0x118, 0x29, 0x36, {0x2, 0x1f, [], [@generic={0x0, 0xf2, "2824bae59d63c1c7cfb49990bdd1ab8a76ad6c9ea490ff581df5364c6f69ec850b0ef98df3528591b099b7a937416529b12148bdea5b155341533b7152fc77db4c75dabb6ed5b05e4adb435df5b2f04fe8fdc219e74c88d7314d7a8d33eee5947f4a4897a5bcc144504690d0b46ea76124afa343278438e80fe1f7b15926a4922d5244b5c71ad081d3d15d34b072ec6ff96de53fd1de8c797a29a5a7f0051a7b6f0031467327f8c7662c9580f1fe5b736dc21d0916a0e193e74d0007ed65048a4af21b2f70da36affe124d58b580e5d844ba8a0b62a3d09c2eda413e8646b19504beea8e07db39b0948bea17c738c65960c4"}, @jumbo={0xc2, 0x4, 0x80000000}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x0, 0x3, [], [@jumbo={0xc2, 0x4, 0x8001}, @pad1, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x20}}], 0x190}}, {{&(0x7f00000043c0)={0xa, 0x4e21, 0xffffffff, @local, 0x2}, 0x1c, &(0x7f0000005880)=[{&(0x7f0000004400)="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", 0xfa}, {&(0x7f0000004500)="4ee871ba9ac3ce1be224347b503ad3d01e3ee1565ae68b79fa6f6cf4530de5071e2011b487f63a0d202e61", 0x2b}, {&(0x7f0000004540)="78827c394fb971b758d28729deeb1ba3c90d016d3a5900f55d537091d923d4d17ae060a588642f360a4cf235c291cc55a822b7216babeafeaea86bf74d0fdb2bfe44f0feae12eb4ba2f30738ec7762667ee31ea7ae8ec80c3a8f331b5928df40344e45ef2384b0fd09910613727f3204f396c163be7f1de59d7ab349ae2007041c695e010f318ffb0246ea91d7f77db27624693ddb01de2f7efc36aee146b00369e13a39f10c5c2de2cc143e07823e661bb4ea025f4be9a2cef8ed25fa38d2f619d7ea857ebe08b9f09e2791400f21f934ffe1d714261886c47d7af262909d184373c19ec23c24a80d151a9fbf8eaeb0befc460d89e3fcff41d4779c6212449273292289fd683eb5dd1fcb5759466b3da6ee15693b25cdbd582f8f0b6c34ea38f8248b69816b778220d750a97cea4583a7fcd75bea1caf55f50866ea10f42a5e990dc596f8039b1cdb7f152793ba9f60e41eac5de78e3970583f9e046dfac1261f5477bbe65f9bd5ecfbb4e947c97e11fd95af24e671801bf88cfa713a35f902775e39527d3b5af5f3601750386a25df0fdb479260e15a595d93435cd9c2065fa0d85fd00e20d542cd18656032ae0c3c2b4fee1f095b2ea033ee512e6d812be10c4f028fea94ea5108bff18d47251081ca10847844dd92746143efd85d5e828678e4d3077c940f8ad25a9787dc0c99b986c22539cf45fee98938673fee2b9254e0eb1170de64e616ed10392ece68abbcf69453da579b8799985d94456031b4e09efc034be63d53ffff3153bdf89b10f463460dfd231c2e459d02fb8524cd241854c63ab9b144023acef077d3df63010f66b72ed74a80fad529fcad76951e7717e36058fc1759459242e0697cf0899d8a3321c1b215e655f8285c8c8e0d1b9bf9f25e3a378915a88a68eac1bc02068ba1242f80a5fd673a089e5f57645f13952324ffd9f6a44b2dfd4c64cb2fd33c298543be800d5ed72d0fd20133bf8812ef408a703e12a4b95837323a02c4ad9f851e78ceb3c00e077987ccbb089fad4f2a2ceb291293aad3d894bb4bd4c7cfdb11f9aae222af085ac48d86090978cd8c10029bc1fb16452b73e0b59d776fc12d92ad09cbee70bcc807b40edb353367a05ec594e019d1995f547738bfeed555812ae9df7fd31872ffc3187c7924b54d95b4536825e5cf3a47c53c5bb8a2bb13d37de3159ad3c49dad44430f468ddae624f5743988412b3f8936d7f5f55407bc005c1d06f8c99421e5169ec2d2ebd5b1dac195afbf8a431d8c6875d079050978539f43f5cab92553386a9e92cfd5d2b12d6524afe9c578a998831687b386ea1ffe747a42d15dc084debb853dea683929946248d9bb79666df9ac190a86ea7b880724ecd63995258324d551c42cab3df9a6a2fd7db12130fc68fd6de7e30c4109d22e390732bb7274052c3528fea7ad89d63bb1d10ab230cfdd9d91a6ec693b27dac83c5189e1047174cca7cf07cce4f0ed0e9ffd0b5ad804a7190f73ff687d58772228d518595eae2bd4b5ba27984c34d708a3ceb2864fad82899672130000c2e74f3b168d5eb41538314e74c2f791e7a6285dce260bb22983c3325448755b4292e1eb098c6398c6c722ce34893ab43871e0fb190a44b0d175e416cf158fe471c2cf25dcbcbdae5f4cd20677ccfe2ad79c6bf4092f836a6a5673398f0aa3b535b23ccbdcddc010f9a36ead1335291b09961658db9bcd741aca70fe66a66759c3c71f966a9b6d8f4dc2f2d5769714f8972400164b11711f3b2cae3e3c86e9ae448448c62dfd571f9737709bcc3e486b559ef65339e0285fbea1027899f32d7beab25b7e7051181107fded6f92daabf24e161a53ac909b85becaacfee1d1cb7984760b866eb0cc68e07e2ee5cb7c9f15cd82a30e51e7ac043187bf90018fee682745d0b385f0628eaa7110109f7c8ccd8cd2eaeafc11a3a4e08819e7eceb31b9be79533128bd96c87a3138d20d8a7bdcfca15776cc235dfcf81a3f5b8e235f9036635bc07aec23b6b0958d618ff3cbdd792515374ac18cf7f624882dbe198712fd5480818fddf42118ae9a82801ce48ad92b2775541d0800992f7b63a2673de61c66b41c50a52fee59316832d0517c1933845dcf55f5de8a1bb537c24e7ca18d4b3767f5e10436c557a6cb410e11589bdba9a9f7aff37601b81b4df84e53296769c919382496a1ad3d7a273f63022d57104dfb3539e9b8850bb417f8f57d5533f97203f18d42b61faa941b712b8c0fc520267489388fe0c9d0ddeb16c9d7bda8e7fcbcab400d5a20095dbce78ea93c783e63f7a2bd3721316c4702b6fc09b7b4a7550f3c74de161419ad2fe8eeb8d022a6cd19513c83969b6f9440acd27608d4541fc92d8f26810c28cdd0fa82267093673e062a73013cd039392c007590f48ec4c9602cc5a976a1302773fdf0b5aa6fb825b24fa79b8f1ea4dbe0efcaf578271cbb173102b7b6cfc8bcfeb0eddd1c7658fd61cd27955501633e4738486036eddb02a9398b13a33ed7edbcaf8e4da6782ab72c7125656fa11bcbdf5a4cb1c78e4d187585d570036fa526c9602d776e32fd7f21f4d4f10bbc77ae798de6ca5cf01e2fe366d0a6790548fd898d900a75ed58f9894e03fe61f14c59d357f7153a534a68eca18690ae78004078b85511431247de4ff58c696c19c20cd656dbbc24272b9ae167f3d649292e5ab69590a7fb06cac2a9bccc0f64d5dec5ab11baba315499b253870108eb76199e790c29718cd556f82d1b143b2bb293e85dd289718f98d938f28b1bd58fe642494acb7c015d8161aeb45d3d694d572a490e5fe9226f69e90c56db0c3e640a4fddaeee7946d275c87431e4545fb4afea07178cd34d6d52d9b4bddbba4a4c0596f19fd62c143daf13f13af4fb170a9962601b7ac9165fa3cdaa38bb4f1986874fb54d6077303ca1b9758dc9a3de719c9f208a6bc86b5e8b99b19c729903e065ede0e14adf63e38f757bfe385baf3194bb80c0d80a3198c124c0ef6a5339c3b997179ae16950b016fdf3609c94fd9166934d39c60b7e78acdc6016748c2d17aa93e94b39590913347427cf1a51ab5c54dd4652ab13e6dbf578ceb436fe822f0e69fa36d79dc97f527a0d3b8c16e1d2bb5305b443e4e61973d213a36e286e5c351050d0ec7bc6eacefbd0dab0c33c07fc2d44ff46d534b505d770ea283b547d67045a32fd17b9441536025d935ea2dad49e8f8a8064821a269492a1c00bd66cdd7cbb019ab344e0d591dfde30ddf61b853fc3f1146620a20279731d009d71b93bc1d55d0b30748517c980f9e057df372b6330a51855ef58585cd1a68f8159ad39599ed17849e4e1b788fa7fc307ee0544a3341829aa1551be921fb58a4bffed098277304f26b0aac278503114d0c2dbdf847672e69230defe2e7279360c976d368d5dae673e7ab1762cfe55ea6597e98f580c773204b5f93264578da0c1cab1a45267d3e2b689d333ef021cb73560737b673c512eecd81dc9ba67afc21dc55ad2fcccbd0a5427f9615121092fd895871e41e7a6aba8a0ed1668dc37ce860d653556e3da90eed03a80c8802cb737a02a5c2cb06becb7490edec88a895e9c4a18f472189cb3f1f058701fc2adb5fc368900c5d98d8b0c42dcb90e836bf9056cdc5dce898e6d16c4a103b02dd15b69ebc8e384cf35472d9fdd6e23205c061fbbe98609121f1e5e286420cc8eb5fbef36089841702ba4c5b736bb6b45d6390e54f49c35430b453de8c564b0cd13b0a2569950699df2fa668554786db10c812e564a2a95d2d7e917ced19873bc3c1c147e340d5718c876d29c054b27c870eeee46fcd77039565695e7456eae6390e94ff25e6c251340dd144e4af7f3de6c6ff1f9190b93021eba7e9def1abc1b0343bfae2cee1f3592c888cdd4d5c26896955df0401b078d2000b5bcd4613e38f78879e261437ca88fed76c9c6b24e7db72b3a67ae9457638709b6369b88eb0316a0406e056cf9275b819a0b642a84c230d624586b995095c50951f611d78ae8332f360c690aa2cdd063a1ccca79739b550cafe752cd3eb6cc4d0172b5137180b3bba8f9908816939284a1784ff9b36e4fc0d15c138553430bdee9a68cc89b4a76b3302ad9345f27577265dfea3ed7cdcdb0225b915a26c7a8226eeb9d1ef8669164606682ae5b3aea2cd870272e691a4cbd76c2b78dab2890115ab4548d45a68c78ddf38ba00b8963016be6a6d78e64eddce83dfbe0e45663668ebe11c24825f23d32ccd99e8205e9b1ea5d9b1d8d365110db2ce5ba4bce9cd1433a4300d31753fc2d477f98287fbf25b5aeef39b9cbd8b8522a86b4ab4f8b467749fdb5b56b34ed8bade216d1a89174e2d3ff56ef9bc633669a400238b731b0a8936cb64c8df2096cac76ac81f7416ea93f0d79b4c1b6b93c9c42c0ed7d5ebe34dc4c93f9a0528dadda447f7da9a384970f507e9dfbdf4f05c1ee02a0b3478475f9e96ebb61244bf75a5dd85ee1ce1721c5609a4c06447b200c87a7beed956e3707e39b6ca928369ceb3f162a5c0ed6c24c5ac03e546cb1204aec8bc07a5948553d91f4bc1f163bf37f5af9fed6cd56c9916fbfd31ce09bcdd28fc0e317cea1e9304b56a5a1148f33828e657ed650c9ece3367e7354a721937cf76e7059ee0180bcf50fd9c952668e10393cd213446f6e48856bc9440542422a1eefd27fd5550dfa1d9d9c49b528abb097acc8eb2d9f94c140f19322db25e7a5b87518ef631011d1eebc72f3df85e293886037cb80ba7d7d692f1fe2234ff9acc87e39a1f7f62a7ea04bb2ab49309c9ee0be697d6bd488fa8e9b10b1cb8cf45b6e9be304b359ba32983c81b49b1fbd0a2ee82afc34e18fd9246d31eb3748a362f4ad6e24ea200d329dea8380357a888a162a758e51363a02805736c1b5d81deeb87dcdf7a90f49785fcc41f10f15abb0d2031e52fefac1a43644620be0e8980604ae3c09b5b6fc555a0a0a49d010c5a606eee83b8a3481d46f2324725237ebc4dcb42c27f9beb589012fe405b90787152a53a85b86c771a7ea5f2a2586c928469de56463259f23c2d5cb1256bde236cdcb2a783680403cb3d2ab018a259e66a7917b022b52bc5ea6848816865f0df2c0443a7b02a04e6dacee7cf2c403bab2c74dd32ed49dc3f5c17d3d4673de50977844f0fdf9c6ada51ab75a178b649b5b23538b0ef4c3e21d85b04407459e573ad7723f437478952dba8988d747e802b9fd0c679f5baddd75fc9070fa23f5a3f5190f75a5af93935f1aac51ab3a397217cb4a04a7d34d861287967af8894e62b2616e3626707b401f99f6fdc7204014d699b272b765d673f4aa13f1a58656d843f5df638f0b20d67b5cf0a6114ec4f11d4d4dc4dc7da9c23c6470dbcc4ca9ee222adb06103afebc0a0f4a3f8351b7d95174a0eacd02a3db04039ca67f40617a48833f9cbb31b9ee319282a9e8f2f18ab4c68eae4247d76a71870a784d161a5820f40c105152f53e9f9424f8ddbda7f28ae92eb4936904200a63bbc846452a91cbeb0420e773430b0b7b2c47824cb6207bb568176fd24ed3a7c2b754a3ccb40f4cf2cf1b773c9358a35e764366e26b86fcf34d8b2ea78589671c76fc7bb6cdcb95415e44331f162b5adf2bb0521d73ee4fbd9849179ca6bd1100665ffdf46ad610f789b38212a7d580a122a62bc31643be20fd513adac93573b7d678b2633ffe1f0581dd6feb47654d181744ddddcff93a37a34d87792b2e091846742647c94d7b3477c3522eb4e3c4bcbca79c8224c7dddba7a8fdba4a47346adb8b30936762", 0x1000}, {&(0x7f0000005540)="bf3dccfd64803b47feb26029fa804c317ba570e7b6448b9c8cf2b803b631bbb576e9cc7b583fe0aa2eeb9f4d051dfca838374a11aac7a0c309fd96c52f08b43cd710193175c8f4c2e5eecd0e53d769d068830c1366cde1473e9d3f2fecee46dfe14df0138b877a6eb9dec96a1ab6de6ed247c9f8f2fe27", 0x77}, {&(0x7f00000055c0)="c5f05d46412ec88dcef5f236569869c07e717f93e3158d18d0e30cecd81c7224316e0a6794ad9542de494bd7c95a7dea6190c5f9638398a745f4c55b30e62aecca1b511a305f41c6b36ff6f0fd3faec09a65f9fb2c6c21381cc9bd62de881267d281c5134aad48fd1a0d8a48b669f2ae60b9e118c5381e97a0b4c76a5a37b430ebe5d6294b11ce1879fa69e12b67a3ac70a83dfb3c972f251340f10f932ded8508386cef60b0c187c64763123532aedbb6aa20047e7f91f4928eb7bcafbb767a948e702ff903b9733506", 0xca}, {&(0x7f00000056c0)="df475bb47017a3a99f0adab3f53679649b", 0x11}, {&(0x7f0000005700)="4757d617058c9a3dfb44f8508a2f318ecae4b27df52128255b841292f3bcd0f9228b0ec2efc0243d089786231fc44b72b87a4775f6c23191efff55f11edeaeea0f3c6b9703fc005bdbee87181f9ebe", 0x4f}, {&(0x7f0000005780)="c0cfac1d6891b2f10e8f1dfd499e70ddb8c87efad43b9e9823d2744c0d5750174467bb8ee84b3dd61366f9ba658e66fb3b5a709f404f47239c8d8fdb30dbc1d182ac93c5e5a4d81f8aaf1567e71836c9d9a179ba313f7535698d016377472ea3f7269c4ca8e2af6e21b7a41a06ec6fc7437d19061a6d798e0926d80bca550273a493ae383bb2f4517b59a958f5a50325547b42d2c0a8765374795657f89f5c6b4bd7a10173bd7d3b86969d0fdbc217f93b1b69dcd6d7187571c0634da24f49c8a40893aafd81f340d095dc7ce83445fb9f67f4dfeea37d9a64bcc1de5c1efe4087b7fb270a36e7cf374a", 0xea}], 0x8, &(0x7f0000005900)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x0, 0x40, 0x0, [@local, @mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0x88}}], 0x9, 0x0) 00:46:13 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1411.308961][ T3215] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1411.548959][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1411.669057][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1411.679960][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1411.696683][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1411.709915][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1411.726810][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1411.741948][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1411.755710][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1411.849543][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1411.858759][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1411.874513][ T3215] usb 6-1: SerialNumber: syz [ 1411.910860][ T8025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1411.918258][ T8025] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1411.950547][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1411.964490][ T3215] hub: probe of 6-1:5.0 failed with error -5 00:46:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x2, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}}, 0x0, 0xbe}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x228, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@cgroup0={{0x28, 'cgroup\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "a1c58dec48a84554e0f9b1292b3df1a3438adef2c20bc0c410246708451a"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x118, 0x150, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "7614"}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 00:46:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x108, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [], [], 'caif0\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 1412.214027][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1412.283743][ T8041] x_tables: duplicate underflow at hook 2 [ 1412.291439][ T8042] x_tables: duplicate underflow at hook 2 [ 1412.310170][ T3215] usb 6-1: USB disconnect, device number 112 [ 1412.335135][ T3215] usblp0: removed [ 1412.759280][ T3215] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1412.999228][ T3215] usb 6-1: Using ep0 maxpacket: 8 00:46:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:15 executing program 2: set_mempolicy(0x12db689ad607d985, 0x0, 0x0) 00:46:15 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x0) 00:46:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x541) write$evdev(r0, &(0x7f0000000080)=[{}], 0x11) [ 1413.119678][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1413.128070][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1413.158151][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1413.203767][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1413.237585][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 00:46:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@bridge_getneigh={0x20, 0x1e, 0xd07d9f7c237bbf4b}, 0x20}}, 0x0) 00:46:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x4, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @array, @volatile, @enum, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xcc}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1413.266670][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1413.291142][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 00:46:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x541) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0xbe2d2218a965d38b}], 0x18) 00:46:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1fffbf773793a177c1b995d22431b60c0d1b44e4e8a2b9e183043b26ff42e50ed987a986d6bb7e87691ba03d3480ede7362c0773e6359f6b42325024bb9f81f01620882f62102647bd6736e3efb9b9b2b1fedc316464fc42250af639168c13e6e43278ca316d97c5f12bf6cce72d141fe7502cb1f8cf112089", 0x79}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1413.381110][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1413.404637][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1413.453787][ T3215] usb 6-1: SerialNumber: syz [ 1413.494208][ T8024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1413.524970][ T8024] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1413.550290][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1413.556376][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1413.761957][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1413.839991][ T3215] usb 6-1: USB disconnect, device number 113 [ 1413.869514][ T3215] usblp0: removed 00:46:16 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1414.659036][ T3001] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1414.909037][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1415.049141][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1415.066099][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1415.082888][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1415.102062][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1415.120202][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1415.135007][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1415.151449][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1415.249371][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1415.259416][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1415.267701][ T3001] usb 6-1: SerialNumber: syz [ 1415.303945][ T8104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1415.330007][ T8104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1415.340128][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1415.346151][ T3001] hub: probe of 6-1:5.0 failed with error -5 00:46:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x2, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}}, 0x0, 0xbe}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x16, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 00:46:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x298, 0x298, 0x1c8, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "9954f169737f9b4c127013429a6b3827d047fbda811c0dabd50685853bdb0e2e3bd39f7d1fdf63d95ff7c7f1fa313ec75e9ac63c54f79039ea5d5cc3907b82bf1f6498d8690dac8bdb24fcae838371f2f50cc64cd7be533fb6349e6cb954c8e6d0ef93c37462de4bc67da964d3eae7b034fae8eb2ebeb2429fef5f5212bf63ab", 0x5d}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [], 0x0, 0x0, 0x0, 0x0, 0x9db, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) [ 1415.514872][ T8119] x_tables: duplicate underflow at hook 2 [ 1415.594217][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1415.664432][ T3001] usb 6-1: USB disconnect, device number 114 [ 1415.683401][ T3001] usblp0: removed [ 1416.149063][ T3001] usb 6-1: new high-speed USB device number 115 using dummy_hcd 00:46:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {0x4}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:18 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d5", 0x1}], 0x1, &(0x7f0000000380)=[@hoplimit_2292={{0x14}}, @hopopts={{0x18}}], 0x30}}], 0x1, 0x0) 00:46:18 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 00:46:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x190, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'caif0\x00', 'tunl0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "c5757f8534666d67581f93a3244157c5a6f3e8045839250e759c862b13a33cc5bfadee3e5c0b60f8d6a9af75ce27fad89cd1210c2a3cb3b0a95aea69baf90960cc4e868924634fd0c4a992f46cc9cd9fbdd7213888e897feb9f5dcc910c789aba2d990af0658c77cb66fd32653e1121f54b132d5f3a4a552784bc7cd071e5f12", 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 00:46:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}}, 0x0) [ 1416.333561][ T8146] x_tables: duplicate underflow at hook 2 00:46:18 executing program 0: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:46:18 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f0000004dc0), 0x5, 0x0) [ 1416.419252][ T3001] usb 6-1: Using ep0 maxpacket: 8 00:46:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0xffffffffffffffff) [ 1416.559792][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1416.568209][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1416.601600][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1416.615940][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1416.633740][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1416.647606][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1416.662514][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1416.759896][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1416.769220][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1416.777305][ T3001] usb 6-1: SerialNumber: syz [ 1416.814630][ T8104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1416.831875][ T8104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1416.860249][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1416.866290][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1417.098332][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1417.150309][ T3001] usb 6-1: USB disconnect, device number 115 [ 1417.178260][ T3001] usblp0: removed 00:46:20 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1417.959388][ T3001] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1418.209005][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1418.361728][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1418.370417][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1418.387771][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1418.401049][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1418.414140][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1418.439005][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 00:46:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x2, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}}, 0x0, 0xbe}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:21 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x88}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40012140, 0x0, 0x0) 00:46:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 1418.456271][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1418.589594][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1418.598773][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1418.619728][ T3001] usb 6-1: SerialNumber: syz [ 1418.660607][ T8188] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1418.668056][ T8188] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1418.680248][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1418.686289][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1418.929542][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 116 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1418.980043][ T3001] usb 6-1: USB disconnect, device number 116 [ 1419.000631][ T3001] usblp0: removed 00:46:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 00:46:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'caif0\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 00:46:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1419.288175][ T8228] x_tables: duplicate underflow at hook 3 [ 1419.316569][ T8231] x_tables: duplicate underflow at hook 2 00:46:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:21 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 1419.519164][ T3001] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1419.779125][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1419.919176][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1419.927621][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1419.946486][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1419.960526][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1419.978190][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1419.994120][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1420.007909][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1420.119981][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1420.132397][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1420.148197][ T3001] usb 6-1: SerialNumber: syz [ 1420.181728][ T8187] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1420.189682][ T8187] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1420.230264][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1420.236439][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1420.454587][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1420.502567][ T3001] usb 6-1: USB disconnect, device number 117 [ 1420.526081][ T3001] usblp0: removed 00:46:23 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 00:46:23 executing program 3: openat$tun(0xffffff9c, &(0x7f0000001280)='/dev/net/tun\x00', 0x0, 0x0) 00:46:23 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xc}]}}, &(0x7f0000000200)=""/244, 0x26, 0xf4, 0x1}, 0x20) [ 1420.982892][ T8266] x_tables: duplicate underflow at hook 3 [ 1421.369028][ T3215] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1421.609010][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1421.729553][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1421.738060][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1421.756894][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1421.770124][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1421.785727][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1421.800147][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1421.816772][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1421.909528][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1421.919565][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1421.927625][ T3215] usb 6-1: SerialNumber: syz [ 1421.962550][ T8271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1421.971775][ T8271] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1422.000149][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1422.006281][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1422.214149][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 118 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1422.260066][ T3215] usb 6-1: USB disconnect, device number 118 [ 1422.295891][ T3215] usblp0: removed 00:46:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:24 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) 00:46:24 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0xc000, 0x0) 00:46:24 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000002280)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 00:46:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x78}}, 0x41) 00:46:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b1, &(0x7f0000000080)={'team0\x00'}) 00:46:25 executing program 0: modify_ldt$write2(0x11, &(0x7f00000001c0), 0x10) [ 1422.769225][ T3215] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1423.009115][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1423.129870][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1423.138413][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1423.159148][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1423.168256][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1423.190147][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1423.200338][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1423.216401][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1423.309834][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1423.319070][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1423.327079][ T3215] usb 6-1: SerialNumber: syz [ 1423.361670][ T8270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1423.377595][ T8270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1423.402320][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1423.408372][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1423.624697][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1423.694262][ T3215] usb 6-1: USB disconnect, device number 119 [ 1423.704625][ T3215] usblp0: removed 00:46:26 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:26 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 00:46:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 00:46:26 executing program 2: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, 0x0) [ 1424.568960][ T3001] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1424.819157][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1424.949247][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1424.957693][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1424.970304][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1424.980688][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1424.992925][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1425.003671][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1425.014162][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1425.119235][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1425.128538][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1425.141173][ T3001] usb 6-1: SerialNumber: syz [ 1425.170677][ T8342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1425.177905][ T8342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1425.230445][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1425.236553][ T3001] hub: probe of 6-1:5.0 failed with error -5 00:46:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x6, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x102, 0x401eb94) 00:46:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfffffffffffffffb) 00:46:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0xffff6cbd, 0x4) 00:46:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1425.441801][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:28 executing program 0: r0 = socket(0xa, 0x80003, 0x7f) setsockopt(r0, 0xff, 0x0, &(0x7f0000000040), 0x0) [ 1425.551283][ T3001] usb 6-1: USB disconnect, device number 120 [ 1425.579969][ T3001] usblp0: removed 00:46:28 executing program 2: munmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 00:46:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) [ 1426.039139][ T3001] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1426.301432][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1426.439179][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1426.448551][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1426.469029][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1426.478222][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1426.489368][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1426.500147][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1426.510403][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1426.609861][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1426.619019][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1426.627655][ T3001] usb 6-1: SerialNumber: syz [ 1426.664206][ T8341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1426.677521][ T8341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1426.701798][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1426.707940][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1426.945924][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1427.019921][ T3001] usb 6-1: USB disconnect, device number 121 [ 1427.033641][ T3001] usblp0: removed 00:46:29 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:29 executing program 2: mount$fuseblk(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 00:46:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local, 0x6}, 0x80) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) 00:46:30 executing program 0: r0 = socket(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000b80)=ANY=[], 0x1d0) [ 1427.839085][ T9773] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1428.079131][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1428.199228][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1428.207919][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1428.228057][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1428.241196][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1428.256325][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1428.273106][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1428.287502][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1428.379742][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1428.392536][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1428.410585][ T9773] usb 6-1: SerialNumber: syz [ 1428.440645][ T8415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1428.448058][ T8415] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1428.480324][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1428.486357][ T9773] hub: probe of 6-1:5.0 failed with error -5 00:46:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)='\n', 0x1}], 0x1}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x12262, 0x0, 0x0) 00:46:31 executing program 2: add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='i', 0x1, 0xfffffffffffffffe) 00:46:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x1e) 00:46:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:31 executing program 3: r0 = socket(0xa, 0x3, 0x6) recvfrom$unix(r0, 0x0, 0x0, 0x2122, 0x0, 0x0) 00:46:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20060000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fff, 0x4) sendto$inet(r0, &(0x7f00000002c0)="f1", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="1b", 0x1, 0x0, 0x0, 0x0) 00:46:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004044) [ 1428.695879][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1428.800094][ T9773] usb 6-1: USB disconnect, device number 122 [ 1428.852611][ T9773] usblp0: removed [ 1429.309054][ T9773] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1429.548972][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1429.669748][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1429.678382][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1429.712603][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1429.729615][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1429.754712][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1429.768784][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1429.784653][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1429.880094][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1429.889490][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1429.897633][ T9773] usb 6-1: SerialNumber: syz [ 1429.931574][ T8413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1429.943916][ T8413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1429.970232][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1429.977214][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1430.194032][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1430.242823][ T9773] usb 6-1: USB disconnect, device number 123 [ 1430.255687][ T9773] usblp0: removed 00:46:33 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:33 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000002340)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x20004801) 00:46:33 executing program 0: r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 00:46:33 executing program 2: r0 = socket(0xa, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 1431.099056][ T9773] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1431.339054][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1431.459203][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1431.467732][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1431.476924][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1431.487788][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1431.499550][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1431.510794][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1431.522540][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1431.611608][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1431.628935][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1431.636987][ T9773] usb 6-1: SerialNumber: syz [ 1431.680785][ T8511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1431.696397][ T8511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1431.720596][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1431.726661][ T9773] hub: probe of 6-1:5.0 failed with error -5 00:46:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:34 executing program 3: r0 = socket(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:46:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 00:46:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffff9c, &(0x7f0000000980)='/dev/null\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740)) openat$fuse(0xffffff9c, &(0x7f0000001780)='/dev/fuse\x00', 0x2, 0x0) inotify_init() openat$null(0xffffff9c, &(0x7f0000000980)='/dev/null\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)) sendmmsg$unix(r0, &(0x7f00000018c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}], 0x1, 0x40003) 00:46:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80) 00:46:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) 00:46:34 executing program 0: syz_emit_ethernet(0x1386, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd65bb0ed71306142782a74f5f351612260d3cbf62d538e3c0ffc1"], 0x0) [ 1431.933797][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1432.013227][ T9773] usb 6-1: USB disconnect, device number 124 [ 1432.059596][ T9773] usblp0: removed [ 1432.488992][ T9773] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1432.728992][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1432.849072][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1432.857603][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1432.869986][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1432.880581][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1432.892674][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1432.903019][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1432.916204][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1433.009124][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1433.018467][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1433.030636][ T9773] usb 6-1: SerialNumber: syz [ 1433.051779][ T8510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1433.071447][ T8510] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1433.110380][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1433.116878][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1433.335062][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 125 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1433.390213][ T9773] usb 6-1: USB disconnect, device number 125 [ 1433.410659][ T9773] usblp0: removed 00:46:36 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:36 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0xd, &(0x7f0000000040)='\x00\x00\x00W', 0x4) 00:46:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x40e81) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:46:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x73d, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 1434.249100][ T9773] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1434.488982][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1434.609162][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1434.618136][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1434.637540][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1434.651860][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1434.668691][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1434.685108][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1434.699991][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1434.799268][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1434.813158][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1434.830371][ T9773] usb 6-1: SerialNumber: syz [ 1434.860698][ T8587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1434.868039][ T8587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1434.900374][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub 00:46:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:37 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x10000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0x0, 0x2, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x4, 0x2, 0x80000000, 0x0, 0xe}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001540)={0x100, [{r2, r3}, {r1}, {0x0, r3}, {0x0, r3}, {}, {r1}, {r2, r3}, {r1, r3}, {r2}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r1, r3}, {0x0, r3}, {r2, r3}, {}, {r1}, {}, {}, {0x0, r3}, {r2, r3}, {}, {r2}, {0x0, r3}, {0x0, r3}, {r1}, {0x0, r3}, {0x0, r3}, {}, {r2}, {}, {r2}, {}, {r1}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r1, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {r1}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1}, {r2, r3}, {r2}, {r1}, {r1, r3}, {r1, r3}, {0x0, r3}, {r1}, {}, {r1, r3}, {r1}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {r1}, {}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {r1}, {0x0, r3}, {r1, r3}, {r2}, {r2}, {}, {r1, r3}, {}, {}, {}, {}, {r1}, {r2}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {}, {r2}, {r2}, {}, {r2}, {}, {r2, r3}, {r1}, {}, {}, {}, {0x0, r3}, {r2}, {}, {}, {r1}, {r2, r3}, {}, {}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {r2, r3}, {}, {}, {}, {}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r2}, {}, {0x0, r3}, {r2}, {}, {r2, r3}, {0x0, r3}, {r2}, {}, {}, {0x0, r3}, {r1}, {}, {r2}, {r1, r3}, {}, {r1}, {r2}, {r1}, {0x0, r3}, {}, {0x0, r3}, {0x0, 0x0}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {r1}, {}, {r1}, {r2}, {}, {}, {r1, r3}, {r1, r3}, {r1, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r1, r3}, {0x0, r3}, {}, {r1, r3}, {r1}, {r1, r3}, {}, {r2, r3}, {}, {r1, r3}, {}, {}, {0x0, r3}, {r1, r3}, {r2, r3}, {r1}, {0x0, r3}, {r1}, {}, {0x0, r3}, {r2, r3}, {r2}, {}, {}, {}, {r1}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r2}, {r1}, {}, {r2, r3}, {r2, r3}, {0x0, r3}, {}, {r1, r3}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {0x0, r3}, {}, {0x0, r3}, {r2}, {}, {r2, r3}, {}, {}, {0x0, r3}, {r2}, {}, {0x0, r3}, {r2, r3}, {}, {}, {}, {r2}, {r2, r3}, {0x0, r3}], 0x2, "9f4906d3622477"}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0a85322, &(0x7f00000001c0)={0xbf00, 0x0, 'client1\x00', 0x0, "35f6dc28ed09fe6a", "0a078ac998e3c422848ca4792a734f8d98d824dc1ab9282eebea69ad58c2090d"}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000013c0)=ANY=[@ANYRES64=r10, @ANYBLOB="b5b50e84a33bd9a4f8a271634ca81d0ae5b639e45eee8f44509ede7889e47fe6ba4735729298d6f822219184b6cc68e75a0aaae99ed7d7f1080400f17c805e62d220bb4405c32a9185d89a646612b38155d95d002b9ee824463e339abb0af22912b56ef28b0936c4275006310cee8cd11435f23ec6bc77ca9efc477a736588bbef8c566bf50362ebfe306945db7e2866eb35d7d987b6e6e466a05b7b6e1ac3151775de8df79c098d21058e7891b19ba0f21185f58a76e35efae0bfffe0f3eaf3213e9ce7107768b7e78cbbe972b7bd9b21063994273320457d2810393f920b20f5766d6d37b51d602552a35a348eb6181af7cc1f66bffa454a247a4466ef62081c21bf0f0d18ff88ca9aa479143967b930733d032dee79bcb8db79c034deb5645183cd0c17f68b280135c6fa6eb6e5b61662a3d38dbd6412c153fee5f969aec6bdebab979f963a96401656ef0100"/345]) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f00000002c0)={r10}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000521c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r10, r11}], 0x2, "826a550f66720f"}) 00:46:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:46:37 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0}) 00:46:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1434.906454][ T9773] hub: probe of 6-1:5.0 failed with error -5 00:46:37 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xbc, 0x4, 0x10001, 0x0, 0x0}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002240)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x5, 0x10000, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r3}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 00:46:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x43, 0x0, 0x0) [ 1435.135255][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d}}) [ 1435.779769][ T8586] usb 6-1: reset high-speed USB device number 126 using dummy_hcd [ 1436.028971][ T8586] usb 6-1: Using ep0 maxpacket: 8 [ 1436.172048][ T8587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1436.180503][ T8587] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1436.248941][ C0] usblp0: nonzero read bulk status received: -71 [ 1436.414104][ T34] usb 6-1: USB disconnect, device number 126 [ 1436.448361][ T34] usblp0: removed 00:46:39 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000001400)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@remote, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}], 0x38}, 0x0) 00:46:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @ipv4}}, {{0xa, 0x0, 0x0, @empty}}}, 0x148) 00:46:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a80)={&(0x7f0000001400)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}, 0x900) [ 1437.368981][ T34] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1437.629000][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1437.759854][ T34] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1437.770078][ T34] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1437.780345][ T34] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1437.791045][ T34] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1437.802947][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1437.815369][ T34] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1437.826712][ T34] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1437.929111][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1437.939395][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1437.959017][ T34] usb 6-1: SerialNumber: syz 00:46:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000040)="56ec08c2a5d64938", 0x8) 00:46:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 00:46:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x1a, 0x0, 0x0) 00:46:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1438.000655][ T8659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1438.008358][ T8659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1438.040271][ T34] hub 6-1:5.0: bad descriptor, ignoring hub [ 1438.065924][ T34] hub: probe of 6-1:5.0 failed with error -5 00:46:40 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)="fce5f860a8f21f9a1cc5f3946e0b1ed8c1a19704e104a0ec3c5f96ca1a111d10bda0b10927094cd680fc30cd80bc420d780c4c54e3c4b4763361dd7a56a92a2213c82e7df12bb6a3de8033ea0f884c963af3d64b929b98839494cd6e75c56dbb1ba2394a138dd5fdfc47d5292d2911ee8e3f32e605e852a877e1f56438b0a2c9f971db2a09d7418fa3a671ab8477abf0dccc9e62b04d4b83e1bb1a33b6ad8f3c69bc9052c7ddfc2b31d56982e7330cd232b5f4c693a920e681072bce00562aa9ef00ad9f11db3003f91d8b0e9e3f5aa7ba55c2bdc52142eddbf35489f41eef102e1a78d098", 0xe5}, {&(0x7f0000000340)="0fde6524ab4ebc8fbc4aca99a0ad04999769015e3a11b4995f9a2ae5be063b6f1032e2db40dacc39ee1eab88f5321bfd638765553d503b6173e0021d3af1b379b02bd0ae280dadc16ff94eb1305c32c7c33ed09993ced1b647ef9f9d428b810a0b06cc3b630261d7f9ac72a2a06c", 0x6e}, {&(0x7f00000003c0)="acdb3854c522cdb331589eb408396fd115f2df45aab9c3c98d287d8e18380759841dee9cce1472cbd4f3e2d0db8eb9203516d0cbea88864382c1f7434e2729b314a3d41e280dc1f5291abebcd99302e1dfc5e5c82bc4bed148eb2cd6cdf7c0faf1e10490b8843a74d66af55653d02a5efa4ded54ed3ea0ef1b8d72410d61fbd7af9a9be47a11a72f3c009b2e8c30c9f89454781b329696c64bcf", 0x9a}, {&(0x7f0000000480)="1c5b86cd8bc12266a75c7610ab214276eb356127c658331b1240dc4380c378feb02d7816aadafd2c8e71ce57", 0x2c}], 0x4}}], 0x1, 0x0) 00:46:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x84, 0x4, &(0x7f0000000040)="56ec08c2", 0x4) 00:46:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'vlan0\x00'}) [ 1438.264903][ T34] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1438.889729][ T8658] usb 6-1: reset high-speed USB device number 127 using dummy_hcd [ 1439.128963][ T8658] usb 6-1: Using ep0 maxpacket: 8 [ 1439.272217][ T8659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1439.281597][ T8659] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1439.348935][ C0] usblp0: nonzero read bulk status received: -71 [ 1439.516083][ T34] usb 6-1: USB disconnect, device number 127 [ 1439.527533][ T34] usblp0: removed 00:46:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a80)={&(0x7f0000001400)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, 0x0}, 0x0) 00:46:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000040)='V', 0x1) 00:46:42 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f00000005c0)) 00:46:42 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1440.479182][ T9773] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1440.749116][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1440.879291][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1440.887707][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1440.907263][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1440.921486][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1440.936640][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1440.951623][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1440.967243][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1441.059340][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1441.080873][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1441.097833][ T9773] usb 6-1: SerialNumber: syz [ 1441.130700][ T8717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1441.137941][ T8717] raw-gadget gadget: fail, usb_ep_enable returned -22 00:46:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:43 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x894b, &(0x7f0000000180)) 00:46:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000006300)={0x0, 0x0, &(0x7f00000062c0)={&(0x7f0000006280)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 00:46:43 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x7ffff000}}, 0x0) 00:46:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1441.180245][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1441.186303][ T9773] hub: probe of 6-1:5.0 failed with error -5 00:46:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x19, 0x0, 0x0) 00:46:43 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 00:46:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0xc008ae88, 0x0) 00:46:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000001440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1}, 0xc) [ 1441.425976][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:44 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/196, &(0x7f00000001c0)=0xc4) 00:46:44 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r1, 0x4) [ 1442.039856][ T8716] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 1442.299142][ T8716] usb 6-1: Using ep0 maxpacket: 8 [ 1442.481791][ T8717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1442.495464][ T8717] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1442.558946][ C0] usblp0: nonzero read bulk status received: -71 [ 1442.726543][T24282] usb 6-1: USB disconnect, device number 2 [ 1442.736102][T24282] usblp0: removed 00:46:45 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 1443.334095][T21948] kworker/dying (21948) used greatest stack depth: 19128 bytes left [ 1443.639221][T24282] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1443.909109][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1444.039321][T24282] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1444.047732][T24282] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1444.066020][T24282] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1444.079850][T24282] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1444.097206][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1444.113030][T24282] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1444.128802][T24282] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1444.229943][T24282] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1444.240451][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1444.248704][T24282] usb 6-1: SerialNumber: syz 00:46:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:46 executing program 3: unshare(0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8948, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 00:46:46 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 00:46:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001455d60b7030000000000006a0a00fe87680000850000000d000000b7000000000000009500020000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017da839eec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec883176e90e41ae0e4e598a93bece9e736b2f64c2c3720c7eef01232f1daede03ebba99bdc3a3da015b601c3c2e7db9d7f505b243f69c8fee816914bd7be554b8b7efc44c5ddb54d9f27d489232bcd7bcfdc86219feb310db5cb53a0db219fb1063497ce7d9935697601f57acaa44dfc94ab8b51f10fe978f697ed1d767bd08b5282d05d0ee62a85a1c2f94e5d82851548cddff06c0730e4ad76bfa56c37a5dabc33a6e532ebb4348dc7fec1a55d2d90b84e8c55d3d2fcf7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) 00:46:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1444.280627][ T8783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1444.287978][ T8783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1444.340442][T24282] hub 6-1:5.0: bad descriptor, ignoring hub [ 1444.346500][T24282] hub: probe of 6-1:5.0 failed with error -5 00:46:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x107, 0x17, 0x0, 0x0) 00:46:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401070cd, 0x0) 00:46:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:47 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7283d3d7"}, 0x0, 0x0, @fd}) [ 1444.555940][T24282] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:47 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = dup(r0) ioctl$NS_GET_OWNER_UID(r1, 0xb701, 0x0) 00:46:47 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, &(0x7f00000001c0), 0x5, 0x0) [ 1444.878928][ C1] usblp0: nonzero read bulk status received: -71 [ 1445.010020][ T8782] udc-core: couldn't find an available UDC or it's busy [ 1445.017013][ T8782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1445.075206][ T9773] usb 6-1: USB disconnect, device number 3 [ 1445.105686][ T9773] usblp0: removed 00:46:48 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:48 executing program 2: r0 = socket(0x26, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) 00:46:48 executing program 0: syz_emit_ethernet(0x83, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e953ce", 0x4d, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0x4d, 0x0, @opaque="91b466a00149a4e919488369f6534b1089e7b96ef374e9f937a5f42f058b4b81dcc77d209ba43b1289ef5482cb711fa72f990a9af98c43046df98180642e4ab65cf658c8ea"}}}}}}, 0x0) 00:46:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000240)="4fb341ccd38ee732", 0x8) 00:46:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0) [ 1445.979126][ T9773] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1446.239022][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1446.379234][ T9773] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1446.389500][ T9773] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1446.398396][ T9773] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1446.421179][ T9773] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1446.432271][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1446.442706][ T9773] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1446.452781][ T9773] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1446.559182][ T9773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1446.568363][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1446.587660][ T9773] usb 6-1: SerialNumber: syz [ 1446.620793][ T8851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1446.628209][ T8851] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1446.670133][ T9773] hub 6-1:5.0: bad descriptor, ignoring hub [ 1446.681526][ T9773] hub: probe of 6-1:5.0 failed with error -5 [ 1446.880603][ T9773] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1447.219012][ C0] usblp0: nonzero read bulk status received: -71 00:46:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:49 executing program 0: timer_create(0x1, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f00000001c0)) 00:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000040)="56ec08c2", 0x4) [ 1447.346129][ T8850] udc-core: couldn't find an available UDC or it's busy [ 1447.359458][ T8850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1447.399622][ T34] usb 6-1: USB disconnect, device number 4 [ 1447.423696][ T34] usblp0: removed 00:46:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:50 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) splice(r1, &(0x7f0000000180)=0x20000000, r0, 0x0, 0x5, 0x0) 00:46:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000016d4e4c9baef9baee0000000000", @ANYRES32=r0], 0x3c}}, 0x0) 00:46:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in=@private}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 1447.656036][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 00:46:50 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 00:46:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) 00:46:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8912, 0x0) 00:46:50 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x12c9) 00:46:50 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40001, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) write$char_usb(r0, &(0x7f00000001c0)="b9", 0x1) [ 1448.329078][ T3215] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1448.609137][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1448.739838][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1448.749079][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1448.749120][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1448.749177][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1448.749220][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1448.749254][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1448.817897][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1448.920476][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1448.933226][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1448.950485][ T3215] usb 6-1: SerialNumber: syz [ 1448.982666][ T8905] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1448.996094][ T8905] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1449.030670][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1449.036666][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1449.268604][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1449.598988][ C0] usblp0: nonzero read bulk status received: -71 [ 1449.719224][ T8903] udc-core: couldn't find an available UDC or it's busy [ 1449.726349][ T8903] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.761169][ T3001] usb 6-1: USB disconnect, device number 5 [ 1449.783311][ T3001] usblp0: removed 00:46:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:52 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 00:46:52 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x7004, 0x0) 00:46:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:53 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 00:46:53 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:46:53 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002240)={0x14, 0x453, 0x0, 0x0, 0x0, "9c"}, 0x14}}, 0x0) 00:46:53 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2c0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x6612, 0x0) 00:46:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8904, &(0x7f0000000500)={'vxcan1\x00'}) 00:46:53 executing program 2: shmget$private(0x0, 0x4000, 0xfeffffff, &(0x7f0000ffa000/0x4000)=nil) 00:46:53 executing program 0: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000002c0)) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:46:53 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) [ 1451.089357][ T3215] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1451.369040][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1451.489096][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1451.498190][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1451.519036][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1451.528316][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1451.540884][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1451.551175][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1451.566265][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1451.669290][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1451.678401][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1451.696700][ T3215] usb 6-1: SerialNumber: syz [ 1451.740792][ T8950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1451.748235][ T8950] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1451.770348][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1451.776411][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1451.990983][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:46:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:56 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 00:46:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4) 00:46:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0x0, "cc88de688d6061c9ce08ad748edcdc2c8b5613"}) 00:46:59 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:46:59 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 00:46:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420}, 0x420}}, 0x0) 00:46:59 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:46:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1456.522021][ T3215] usb 6-1: USB disconnect, device number 6 [ 1456.549935][ T3215] usblp0: removed 00:46:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000080)) 00:46:59 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@random="abe3545bdc9e", @remote, @val, {@ipv4}}, 0x0) 00:46:59 executing program 3: open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 00:46:59 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x277f826d}) 00:46:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000080)) 00:46:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:46:59 executing program 3: semget(0x0, 0x4, 0x325) [ 1457.148974][ T3215] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1457.389005][ T3215] usb 6-1: Using ep0 maxpacket: 8 [ 1457.509118][ T3215] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1457.517920][ T3215] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1457.527329][ T3215] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1457.536647][ T3215] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1457.549184][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1457.559477][ T3215] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1457.569644][ T3215] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1457.659964][ T3215] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1457.673037][ T3215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1457.683710][ T3215] usb 6-1: SerialNumber: syz [ 1457.712976][ T9011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1457.729584][ T9011] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1457.750369][ T3215] hub 6-1:5.0: bad descriptor, ignoring hub [ 1457.756423][ T3215] hub: probe of 6-1:5.0 failed with error -5 [ 1457.970675][ T3215] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:47:05 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000200)='/dev/hidraw#\x00', 0x0, 0xe2681) write$hidraw(r0, &(0x7f0000000000)='4', 0x20000001) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000101090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) syz_open_dev$hidraw(0x0, 0x0, 0x641) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 00:47:05 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @local, @val, {@ipv4}}, 0x0) 00:47:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000080)) 00:47:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x14) 00:47:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1462.432190][ T3001] usb 6-1: USB disconnect, device number 7 [ 1462.457089][ T3001] usblp0: removed 00:47:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:47:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000080)) 00:47:05 executing program 2: r0 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r0, 0x4, 0x7, 0x0) 00:47:05 executing program 3: select(0x40, &(0x7f0000001200), &(0x7f0000001240), 0x0, &(0x7f00000012c0)={0x0, 0x10000}) 00:47:05 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @val, {@ipv4}}, 0x0) 00:47:05 executing program 0: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) [ 1463.008988][ T3001] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1463.248967][ T3001] usb 6-1: Using ep0 maxpacket: 8 [ 1463.369810][ T3001] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1463.378274][ T3001] usb 6-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 1463.391209][ T3001] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 1463.401112][ T3001] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1463.412992][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1463.424657][ T3001] usb 6-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 1463.435225][ T3001] usb 6-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1463.529934][ T3001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1463.539153][ T3001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1463.547180][ T3001] usb 6-1: SerialNumber: syz [ 1463.582898][ T9061] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1463.596626][ T9061] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1463.620281][ T3001] hub 6-1:5.0: bad descriptor, ignoring hub [ 1463.626332][ T3001] hub: probe of 6-1:5.0 failed with error -5 [ 1463.850451][ T3001] usblp 6-1:5.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 00:47:10 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dbedeb", 0x14, 0x6, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x5ae27de3affce047}}}}}}}, 0x0) 00:47:10 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @local, @val, {@ipv4}}, 0x0) 00:47:10 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:47:10 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x1ff}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1468.319348][ T3001] usb 6-1: USB disconnect, device number 8 [ 1468.346002][ T3001] usblp0: removed 00:47:10 executing program 5: clone(0x87a40780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@typedef, @union, @int]}}, 0x0, 0x42}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 00:47:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000300, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) syz_open_procfs(0x0, 0x0) 00:47:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0xfffffffffffffffe) 00:47:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4004ae8b, 0x0) [ 1468.511586][ T9111] ptrace attach of "/root/syz-executor.5"[9110] was attempted by "/root/syz-executor.5"[9111] 00:47:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/163, 0x1a, 0xa3, 0x1}, 0x20) 00:47:11 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 00:47:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:47:11 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000240)=0x400, 0x4) 00:47:11 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x200011, 0x4) 00:47:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:13 executing program 2: socket(0x2, 0x2, 0x2) 00:47:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x11, 0x3, 0x3}, 0x14}}, 0x0) 00:47:13 executing program 0: pipe(&(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0xff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001740)) 00:47:13 executing program 5: socket$inet(0x2, 0xa, 0x6) 00:47:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001280)=0x2, 0x4) 00:47:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x89a1, &(0x7f0000000240)=@buf) 00:47:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 00:47:14 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) 00:47:14 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000000c0)={'wlan1\x00'}) 00:47:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, &(0x7f0000000000)={'wlan1\x00'}) 00:47:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) 00:47:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 00:47:17 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:47:17 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8930, &(0x7f00000000c0)={'wlan1\x00'}) 00:47:17 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) 00:47:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f00000000c0)={'wlan1\x00'}) 00:47:17 executing program 2: r0 = socket(0x25, 0x5, 0x0) getpeername$unix(r0, 0x0, 0x0) 00:47:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) 00:47:17 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0) 00:47:17 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xa0014102) 00:47:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@fwd, @volatile, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xff}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="01"], 0x170}}, 0x0) 00:47:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0320"], 0x64}}, 0x0) 00:47:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x38}}, 0x0) 00:47:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00'}) 00:47:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15}, 0x40) 00:47:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8914, &(0x7f0000000240)=@buf) 00:47:20 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "b3"}]}}, &(0x7f0000000240)=""/163, 0x2a, 0xa3, 0x1}, 0x20) 00:47:20 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:47:20 executing program 0: epoll_create(0xbd46) clock_gettime(0x0, &(0x7f0000000380)={0x0}) pselect6(0x40, &(0x7f00000002c0)={0x9}, 0x0, 0x0, &(0x7f00000003c0)={r0}, 0x0) 00:47:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f00000000c0)={'wlan1\x00'}) 00:47:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x0, 0x1ff}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:23 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f00000000c0)={'wlan1\x00'}) 00:47:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000280)=ANY=[], 0xffffff1c, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='?'], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 00:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000000010b040000006088ffffff02000000240001801400018008000100ac141400080002007f0000010c0002800500010000000000240002801400018008000100ac1414bb08000200000000000c000280050001000000000008000740000000001c000f800800034000000000080001"], 0x80}}, 0x0) 00:47:23 executing program 2: syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d015b69e8fb23e62bf966ee5360c2578"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0x3, 'o'}, @mss={0x2, 0x4}, @timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 00:47:23 executing program 2: r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file2\x00', 0x0) symlink(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)='./file1\x00') r1 = geteuid() fchownat(r0, &(0x7f0000000500)='./file1\x00', r1, 0x0, 0x0) [ 1480.715563][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 5: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, 0x0, 0x0) [ 1480.777778][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:23 executing program 2: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 00:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000000010b040000006088ffffff02000000240001801400018008000100ac141400080002007f0000010c0002800500010000000000240002801400018008000100ac1414bb08000200000000000c000280050001000000000008000740000000001c000f800800034000000000080001"], 0x80}}, 0x0) 00:47:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 00:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000000010b040000006088ffffff02000000240001801400018008000100ac141400080002007f0000010c0002800500010000000000240002801400018008000100ac1414bb08000200000000000c000280050001000000000008000740000000001c000f800800034000000000080001"], 0x80}}, 0x0) [ 1480.920089][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1480.999246][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8000000000010b040000006088ffffff02000000240001801400018008000100ac141400080002007f0000010c0002800500010000000000240002801400018008000100ac1414bb08000200000000000c000280050001000000000008000740000000001c000f800800034000000000080001"], 0x80}}, 0x0) 00:47:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14) 00:47:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}, 0xfc}, 0x1c) 00:47:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf) [ 1483.789725][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:26 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) close(r0) 00:47:26 executing program 0: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000280)={0x18}, 0xfffffe98) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)={'gretap0'}, 0xa) 00:47:26 executing program 5: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000280)={0x18}, 0xfffffe98) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50}, 0x50) 00:47:26 executing program 3: memfd_create(&(0x7f0000000000)='@)#\\\\\x00', 0x0) 00:47:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 00:47:26 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r0, &(0x7f00000085c0)=@known='com.apple.system.Security\x00', 0x0, 0x0) 00:47:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:29 executing program 3: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000280)={0x18}, 0xfffffe98) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60}, 0x60) 00:47:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x8040) 00:47:29 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000280)={0x18}, 0xfffffe98) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18}, 0x18) 00:47:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000580), 0x4) 00:47:29 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 00:47:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000340)=0x54) 00:47:29 executing program 5: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 00:47:29 executing program 2: socket(0x1e, 0x4, 0x0) 00:47:29 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8947, &(0x7f0000000140)={'batadv0\x00'}) 00:47:29 executing program 2: r0 = socket(0x1, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x851) 00:47:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:32 executing program 5: socket(0x23, 0x2, 0x0) 00:47:32 executing program 2: pipe(&(0x7f0000001d40)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 00:47:32 executing program 3: r0 = socket(0x2, 0xa, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x42) 00:47:32 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xdad, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000001c0)={0x0, [[0x0, 0x2]]}) 00:47:32 executing program 5: clock_gettime(0x6, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x141000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 00:47:32 executing program 0: pselect6(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0x0) 00:47:32 executing program 3: timer_create(0x0, 0x0, &(0x7f00000000c0)) 00:47:32 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)) 00:47:32 executing program 3: syslog(0x2, &(0x7f00000000c0)=""/226, 0xe2) 00:47:32 executing program 5: socketpair(0xa, 0x0, 0x55ee, 0x0) 00:47:35 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}) 00:47:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000100)=[@clear_death, @increfs, @register_looper], 0x1, 0x0, &(0x7f0000000140)="c3"}) 00:47:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={0x0}}, 0x0) 00:47:35 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:35 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 00:47:35 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 00:47:35 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) 00:47:35 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/btrfs-control\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10) 00:47:35 executing program 5: socket(0x23, 0x0, 0xadd0) 00:47:35 executing program 0: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x80000000]}, 0x8}) 00:47:35 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000004d, 0x0) 00:47:35 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 00:47:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@fwd, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:38 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000280)) 00:47:38 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 00:47:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0xfffffffd, 0x4) 00:47:38 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vcsa\x00', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000000), 0x8001) 00:47:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1496.102137][ T9381] tipc: Trying to set illegal importance in message 00:47:38 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) 00:47:38 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x240002, 0x0) 00:47:38 executing program 5: r0 = msgget(0x3, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040), 0x8, 0x0) 00:47:38 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)) 00:47:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x38, 0x0, 0x0, "2eff379acfbc32102ccef59327af87e0646c75b92f6f4a652336576e85743ace30"}, {0x7d0, 0x0, 0x0, "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"}], 0x808}, 0x0) 00:47:38 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 00:47:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:41 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x692, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 00:47:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) 00:47:41 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x10000000000002b4}, 0x0) 00:47:41 executing program 3: r0 = msgget(0x3, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) 00:47:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:41 executing program 3: nanosleep(&(0x7f0000000040)={0x0, 0xfffffffffffffff7}, 0x0) 00:47:41 executing program 2: sendmsg$unix(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) 00:47:41 executing program 0: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:47:41 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 00:47:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4010aefd, 0x8167000) getresgid(&(0x7f0000002680), &(0x7f00000026c0), 0x0) 00:47:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0xae4a, 0x0) 00:47:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22040fb5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:47:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4010aefd, 0x8167000) setreuid(0x0, 0xee00) getpid() stat(&(0x7f00000026c0)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000340)="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", 0x2000, 0x0) 00:47:44 executing program 0: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ftruncate(r0, 0x20) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) 00:47:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0xe}}) fork() openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:47:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b60, &(0x7f0000000100)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 00:47:45 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) lgetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x2) 00:47:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4010aefd, 0x8167000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)={0x7, 0x0, [{}, {}, {}, {0x80000001}, {}, {}, {}]}) 00:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4010aefd, 0x8167000) preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x0, 0x0) 00:47:45 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) 00:47:45 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f00000001c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xe0z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137/J\xcb\x8a\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) fcntl$addseals(r0, 0x11, 0x0) 00:47:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0xfb}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x18, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@generic="8e"]}, 0x18}}, 0x0) 00:47:47 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) 00:47:47 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') sync_file_range(r0, 0x0, 0x3, 0x0) 00:47:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 00:47:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1505.369794][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:47:47 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 00:47:48 executing program 5: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="11", 0x1}], 0x1}, 0x20000840) 00:47:48 executing program 2: openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) 00:47:48 executing program 2: r0 = gettid() capset(&(0x7f0000000280)={0x19980330, r0}, &(0x7f00000002c0)) 00:47:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x2b0, 0x2b0, 0xffffffff, 0x0, 0x0, 0x4cc, 0x4cc, 0xffffffff, 0x4cc, 0x4cc, 0x5, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'veth0_macvtap\x00', 'bond_slave_1\x00'}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24, 'ttl\x00'}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0xf, @multicast1, @private, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x1e8, 0x21c, 0x0, {}, [@common=@ttl={{0x24, 'ttl\x00'}}, @common=@inet=@policy={{0x154, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], @ipv6=@local}, {@ipv4=@loopback, [], @ipv6=@private1}, {@ipv4=@multicast1, [], @ipv6=@mcast2}, {@ipv4=@empty, [], @ipv6=@dev}]}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @private, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x5bc) 00:47:48 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0xffffffffffffffff, 0x2a}]) 00:47:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x2, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:51 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'ip_vti0\x00'}) 00:47:51 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0xea60}}) 00:47:51 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 00:47:51 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 00:47:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:51 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r1, 0x8, 0x0) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, 0x5, 0x2) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 00:47:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000000000000000", 0x58}], 0x1) 00:47:51 executing program 0: r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="ff", 0x1, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) add_key$fscrypt_v1(&(0x7f0000000580)='logon\x00', 0x0, 0x0, 0x0, r0) 00:47:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000507a57d6663a29ac793baa39f91", @ANYRES32, @ANYBLOB="00000000000000001c0012800b000100627269646765"], 0x50}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 00:47:51 executing program 0: getgroups(0x4, &(0x7f0000000080)=[0xee00, 0x0, 0xee01, 0xee01]) r3 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) dup(r8) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x20000401) r10 = dup(r9) write$P9_RGETLOCK(r10, &(0x7f00000003c0)=ANY=[], 0x27) write$nbd(r10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b2c474477734761b0ec762e59474460a10788e2c38b9511f56bf82e9e293943fc5c3bab1d7e3c3720403301c059bde3c6abf27908b3fa01f6a3e35bfd7a8b85384ec6c27cac0a281ce0bedeada55b3693afdd232e03f4e7579276233b9dd3d9599416f6d18c63c636bbf46557158d886ae2f34cbefed4a331bf425143060c9566630c078d758", 0x86}, {&(0x7f0000000100)="6c3164bcd423f016e4e17607495c7088d4446b86050254b59f5a2608b284ac884a2c0c2babd2ede55d5706", 0x2b}, {&(0x7f0000001600)="f5f229ecb180dbb468cb9805dc199ead0569238aec6cb4951ade852916afcece608e4538d34492113a9f43a440cb4b8821bcf501b02c68cc4909200545ed0a74b8198d6f2942c612da85818dbe8e531cdae1c950686a755ac1806715b8d56af0ef445cd0b1eac449f3bffbfee073394cbdef10387378d22b5eaccb57d6bbdceb159830a7503b75fdbca56d35829e5a05abb638cc67fa852ae9e5d7d512f4", 0x9e}, {&(0x7f00000016c0)="708a403cf4cd09fb7fe7f15af3adbbcf6a813a9477bc75b1eef81e9d1fc2673f2da4bd8147b87d413a58e5adc54a30f4346a03bf5c8150bdadbdd925c0678bac00fdc49235743db4d711099a8e8f701a25b8cc9ba910f6bf5230edc2ddd6d7d8eda507934926d20fee170ca5668dba72e77746b6ee6c", 0x76}, {&(0x7f0000001740)="fdaafef4e0f8a54255e7aa4b9f6c0b3246c673ae86f2266cc2a0e912debee2619e309d2932c2b6206fccbeabfbbea85665bce515b85fb801a3c680368059ea02a5f01add9ebad85095aac65f67ae8ae168cf841509ff628adb45d2ff231eaeb417c311d99bf87720e58ecf8247fb76e8ac9081c79c6a5ef7862f43397b4a4094948c83481777b88e35faa5ffb70bddae591f4d476bbdd73ed26fd4b13bd81a740d142a1344cd118eed6b1c280bfb3b74a8a9f580e3356b435ec1c21c26f5e80161e970ed666a9a3269", 0xc9}, {&(0x7f0000001840)="15d4d5aa19e5a3e562e859b8eee89fe8e8dd77b1a943e9d9dd05ea4288eb8579e6a68f00c29e05891a3a429833fb79eb21ac803f22e2fc93b0c1d6670d8b7716b8c3a94e8a768256b8c2231274b9a47e6f8f82f013bccebd0bf77afab02e27ef14327382bbc538", 0x67}, {&(0x7f00000018c0)="4a004d7bf86a7ee9a405ad6bae84b4ad52e2ee55465ceae8248207810ab88ba423fcdb81167af4828d100b7f7e52e3698da8c2af8965105dbdf259588e5d61bdb56c2195bb384f900597edf17d8b3c5484eb67af71094b55d0c222521ad764f15881df9d641b59788c44c311f4b7375b02340f835999fa2f981672ed87646002bc21c760e3ee5369a807cc7e65d26cf8ce9ceaaffd381ae29b5536e487cbf31220d3ffd0256092ffbaad7f2bda46afd959e3f82bdc6cf2e45c5fa304369695ac706b7c1c6241ef9894871f5fbec7f05a67e755b543326963e7d925d0a847c3", 0xdf}, {&(0x7f00000019c0)="6acce8f86775706628af36eae264c320d607ee18bc236694f9ae4b5e2e251c32c74cd738e5d385a46f7ea30f2887ccf008e1c41e3c8dd7bc1253d13b3f2695c928", 0x41}, {&(0x7f0000001a40)="9e08b2222d0676ebb030e678e385cdb5e700b4d3d77f2d054409d65048abc16823f3bf5c22f782c11f17de2439df40b6f7f7e66a54d30735ebf55627b2e8e5f262365876b23c30b8913d41ed2ba6fdcccae45af5134726feb79ae5dd79e2837db7a9e4afda84c6235cd722a1b096e32beaca5154984e46013ccbf054cb2de878825a772fe1b92c9f43aba156cda4cfdc6b6fad13cccc73450487182c53cddc17450c586973cd177b64a63b5dd699456d3d2b", 0xb2}], 0xa, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000001a236b6ccf2e62f469953fc00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRESDEC=r1, @ANYBLOB='B\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYRES32=r10, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES64=r3, @ANYRES32, @ANYRES32=r9, @ANYBLOB="2893fcb4d831d71b7f16be2d57e75c439129be7957582aa385885e0e7978a9bfa058d269a42b217b5e8d204102dc6c348ffa63b4d7157fceb0ec5b2335170c1c95edf268e960b364b1b8f03b7afebe1ac25c60a4dd90", @ANYBLOB="18000001010000000200000024dbf58754f454d24e88e8b0ae75b65f76da586ebf10f30316c8e6a33cec6c131c0d0a8d303a3cb405a1e549e9a5b91971c4fa80bd8816a33501ec2bedb263fa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1800000001000000020000009ae69b5b7a154f7824670ac3744e458efa8629f3cbdd44870d76166e3952c4c90e7b7006fdeeee39b34ee12fc755ce871f4fb10e797cef16d436e36f5d4cc5c814ba312e4c2abf283b2f28e9d77d9056c2a6644f8b23a4df70d2370fe8e2b930895417ce0c2ca3a6bf43bcf269eb0935edf845f095", @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRESDEC, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r9, @ANYRESHEX=r3, @ANYRES32=r8, @ANYRES32, @ANYRES32=r2, @ANYRES64, @ANYRES16=r1, @ANYRESOCT=r8], 0x10c, 0x4000000}, 0x84) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES64=r4, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="1d13500163cce309b1415bd43338ab9fb06df8e06eb959753338e0b6122b9484238d79ff22a5a16c6460f9bd8f79e7610bbc4175f44dc5d4f000a9990a181f55a08e29c37230aae15d63c30e9251c8c0c4919edb3119616afbe7b68dfacdf9197a7b4ad2d0ff1e43fa3ff76f2789773f988c66bc336737b29ca8ebfb3e3299b5a9df", @ANYRES32=0x0, @ANYBLOB="040004000000000008000000", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="10000300000000002000040000000000"], 0x74, 0x1) getgroups(0x9, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, r1, 0x0, r0, 0x0, r2, r6]) 00:47:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 1508.694169][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.712523][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.766427][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.785551][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x2, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x808}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 00:47:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000400), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000006c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c9290800000000000000b88c87cff1866b60bec4a3eb286e8b1800", [0x2, 0x40000000002b]}) 00:47:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1501c00000000100"/28, 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffde3, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001b", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280), 0x20) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 00:47:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100726564001c010200040142001fc3aad2a437370d6d097ebfd52aedbb1655a58f2aa0af35cd00195caa3e3d0b98a32e2639261316f0985a29d96c82106a94f123296f511e69f7085723a7388c5e88fc0a24bef98af5c922f2bc9c7c3400bbfff5445bada28d3931e78b902254ba8b9bea56ab331a79c37588e84cab1940a713b016f641a36624ce7a39038b8205d648a6ba37ea07ba06eef4ffe1ff5ac5bbef85af149841d9d71f626ed2ad93e0dda0e3b3e4a1bb3a4c46bacd966ad0c6cf56bd217c3ddf1882fbb53a6b3ccf10804087607838843f3cd4470de33d27e2d2dc582633cefc33bd29ee387e2c5a9b6b7fd7d13c27d35533b22845c825f55388581c84bf0746cd84b0fb06e31f80dce1386d14000100000000000200000000000001000000000000db69ce452d56149b2b30dc254cdd4c783691d691fd91e16a605aebd60607d1693d6a0df5422fc9eb"], 0x148}}, 0x0) r3 = accept4$unix(r0, &(0x7f0000000440)=@abs, &(0x7f00000002c0)=0x6e, 0x0) r4 = dup(r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, 0x0}, 0x0) sendto$inet(r5, &(0x7f00000003c0)="81", 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 00:47:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1511.596721][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.625395][ T9591] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 00:47:54 executing program 0: syz_usb_connect(0x0, 0x41, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd7, 0x71, 0x7d, 0x10, 0x421, 0x2d9, 0xa718, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0) [ 1511.653613][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.690334][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 00:47:54 executing program 2: syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x40) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000080)={0x1}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000580)) [ 1511.734086][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.756884][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.783074][ T9588] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.808603][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.848780][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.873689][ T9610] netlink: 44251 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.913448][ T9610] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. 00:47:54 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/373], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0xc7c8, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x4cb, 0x7, 0x2, 0x757, 0x6, 0x7b8}) [ 1511.981588][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:47:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7e, 0x6c, 0x3e, 0x8, 0xb95, 0x1780, 0xd0a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0xd0, 0x3f}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000dc0)={0x2c, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x7}]}}, 0x0, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xcc}, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1}, 0x0}) [ 1512.049229][ T3001] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1512.298968][ T3001] usb 1-1: Using ep0 maxpacket: 16 [ 1512.349022][ T3215] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1512.399002][T24282] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1512.429806][ T3001] usb 1-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=a7.18 [ 1512.440798][ T3001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.452109][ T3001] usb 1-1: config 0 descriptor?? 00:47:55 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x97, 0xc2, 0xf5, 0x8, 0x61d, 0xc170, 0x40f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdd, 0xc9, 0x90, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8866d98abd"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1512.519629][ T3001] usb 1-1: bad CDC descriptors [ 1512.530282][ T3001] usb 1-1: bad CDC descriptors [ 1512.589285][ T3215] usb 3-1: Using ep0 maxpacket: 8 [ 1512.640088][T24282] usb 4-1: Using ep0 maxpacket: 8 [ 1512.709964][ T3215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 246, changing to 11 [ 1512.719963][ T3001] usb 1-1: USB disconnect, device number 28 [ 1512.757155][ T3215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 1512.772312][T24282] usb 4-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=d0.a2 [ 1512.798794][T24282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.830027][T24282] usb 4-1: config 0 descriptor?? [ 1512.958999][ T9773] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1512.975367][ T3215] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=9d.c6 [ 1512.991337][ T3215] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1513.009281][ T3215] usb 3-1: Product: syz [ 1513.013499][ T3215] usb 3-1: Manufacturer: syz [ 1513.018123][ T3215] usb 3-1: SerialNumber: syz [ 1513.047735][ T3215] usb 3-1: config 0 descriptor?? [ 1513.081225][ T9615] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.089418][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1513.103050][ T3215] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 1513.229283][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1513.329845][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1513.349801][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1513.369623][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1513.389000][ T9773] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1513.422203][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1513.439350][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1513.467540][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1513.489049][ T9773] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1513.498153][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.520469][ T8551] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1513.533632][ T9773] usb 6-1: config 0 descriptor?? [ 1513.543030][ T3215] usb 3-1: USB disconnect, device number 24 [ 1513.551472][ T9628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.591163][ T9773] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1513.709315][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1513.733725][T24282] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1513.779081][ T8551] usb 1-1: Using ep0 maxpacket: 16 [ 1513.811436][ T9773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1513.826995][ T9773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1513.836438][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1513.888394][ T9773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1513.920146][ T8551] usb 1-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=a7.18 [ 1513.934457][T24282] asix 4-1:0.0 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 6a:60:1e:ea:a6:80 [ 1513.953358][ T8551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.968505][ T9773] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1514.021782][T24282] usb 4-1: USB disconnect, device number 123 [ 1514.027263][ T8551] usb 1-1: config 0 descriptor?? [ 1514.028403][T24282] asix 4-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 1514.071751][ T9773] usb 6-1: USB disconnect, device number 9 [ 1514.128387][ T9773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1514.169603][ T8551] usb 1-1: bad CDC descriptors [ 1514.188681][ T8551] usb 1-1: bad CDC descriptors [ 1514.191876][ T9773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1514.212420][ T9773] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1514.253176][ T9773] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1514.303700][ T9773] quatech2 6-1:0.0: device disconnected [ 1514.361984][ T8551] usb 1-1: USB disconnect, device number 29 00:47:57 executing program 0: syz_usb_connect(0x0, 0x41, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd7, 0x71, 0x7d, 0x10, 0x421, 0x2d9, 0xa718, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}}]}}]}}]}}, 0x0) [ 1514.509724][ T3215] usb 3-1: new high-speed USB device number 25 using dummy_hcd 00:47:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x2, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:47:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1514.789743][ T3215] usb 3-1: Using ep0 maxpacket: 8 [ 1514.795601][T24282] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1514.878973][ T9658] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1514.909160][ T3215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 246, changing to 11 [ 1514.921027][ T9773] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1514.929622][ T3215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 00:47:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002980)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x5452, &(0x7f0000000100)=0x100004) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1a9402) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) write$hidraw(r1, &(0x7f0000000080)='&', 0x3888) [ 1515.049166][T24282] usb 4-1: Using ep0 maxpacket: 8 [ 1515.129085][ T9658] usb 1-1: Using ep0 maxpacket: 16 [ 1515.138170][ T9749] [ 1515.139355][ T3215] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=9d.c6 [ 1515.140537][ T9749] ===================================================== [ 1515.140552][ T9749] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1515.163960][ T9749] 5.11.0-rc7-syzkaller #0 Not tainted [ 1515.168906][ T9773] usb 6-1: Using ep0 maxpacket: 8 [ 1515.169344][ T9749] ----------------------------------------------------- [ 1515.169354][ T9749] syz-executor.2/9749 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1515.183098][ T3215] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1515.189296][ T9749] ffff8880172304b0 (&new->fa_lock){.+.?}-{2:2}, at: kill_fasync+0x14b/0x460 [ 1515.189450][ T9749] [ 1515.189450][ T9749] and this task is already holding: [ 1515.189457][ T9749] ffff888057086028 [ 1515.209194][ T3215] usb 3-1: Product: syz [ 1515.213559][ T9749] (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values.part.0+0xf6/0x970 [ 1515.230469][ T9749] which would create a new lock dependency: [ 1515.234080][ T3215] usb 3-1: config 0 descriptor?? [ 1515.236384][ T9749] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){.+.?}-{2:2} [ 1515.249452][ T9749] [ 1515.249452][ T9749] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1515.259333][ T9749] (&evdev->mutex){+.+.}-{3:3} [ 1515.259368][ T9749] [ 1515.259368][ T9749] ... which became SOFTIRQ-irq-safe at: [ 1515.271855][ T9749] lock_acquire+0x1a8/0x720 00:47:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) [ 1515.277560][ T9749] __mutex_lock+0x134/0x1110 [ 1515.282268][ T9749] evdev_open+0x2f3/0x6a0 [ 1515.286697][ T9749] chrdev_open+0x266/0x770 [ 1515.291215][ T9749] do_dentry_open+0x4b9/0x11b0 [ 1515.296100][ T9749] path_openat+0x1b9a/0x2730 [ 1515.300805][ T9749] do_filp_open+0x17e/0x3c0 [ 1515.305413][ T9749] do_sys_openat2+0x16d/0x420 [ 1515.309942][ T3215] usb 3-1: can't set config #0, error -71 [ 1515.310202][ T9749] __x64_sys_openat+0x13f/0x1f0 [ 1515.310230][ T9749] do_syscall_64+0x2d/0x70 [ 1515.327210][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1515.327471][ T3215] usb 3-1: USB disconnect, device number 25 [ 1515.333224][ T9749] [ 1515.333224][ T9749] to a SOFTIRQ-irq-unsafe lock: [ 1515.333237][ T9749] (&new->fa_lock){.+.?}-{2:2} [ 1515.333263][ T9749] [ 1515.333263][ T9749] ... which became SOFTIRQ-irq-unsafe at: [ 1515.333271][ T9749] ... [ 1515.333276][ T9749] lock_acquire+0x1a8/0x720 [ 1515.333303][ T9749] _raw_read_lock+0x36/0x70 [ 1515.333325][ T9749] kill_fasync+0x14b/0x460 [ 1515.333347][ T9749] sock_wake_async+0xd2/0x160 [ 1515.333366][ T9749] sock_def_readable+0x2cb/0x4c0 [ 1515.341489][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1515.346348][ T9749] tcp_data_ready+0xea/0x320 [ 1515.351730][ T9658] usb 1-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=a7.18 [ 1515.358987][ T9749] tcp_data_queue+0x1a81/0x4b30 [ 1515.359023][ T9749] tcp_rcv_established+0x841/0x1eb0 [ 1515.359055][ T9749] tcp_v4_do_rcv+0x5d1/0x870 [ 1515.362027][T24282] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1515.366281][ T9749] tcp_v4_rcv+0x2d36/0x3780 [ 1515.366308][ T9749] ip_protocol_deliver_rcu+0x5c/0x8a0 [ 1515.366337][ T9749] ip_local_deliver_finish+0x20a/0x370 [ 1515.374848][ T9658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.375400][ T9749] ip_local_deliver+0x1b3/0x200 [ 1515.383623][T24282] usb 4-1: can't read configurations, error -71 [ 1515.385166][ T9749] ip_rcv_finish+0x1da/0x2f0 [ 1515.385198][ T9749] ip_rcv+0xaa/0xd0 [ 1515.396273][ T9773] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1515.400266][ T9749] __netif_receive_skb_one_core+0x114/0x180 [ 1515.400304][ T9749] __netif_receive_skb+0x27/0x1c0 [ 1515.400329][ T9749] process_backlog+0x232/0x6c0 [ 1515.400352][ T9749] net_rx_action+0x461/0xe10 [ 1515.400377][ T9749] __do_softirq+0x29b/0x9f6 [ 1515.400403][ T9749] asm_call_irq_on_stack+0xf/0x20 [ 1515.400428][ T9749] do_softirq_own_stack+0xaa/0xd0 [ 1515.424956][ T9658] usb 1-1: config 0 descriptor?? [ 1515.431901][ T9749] irq_exit_rcu+0x134/0x200 [ 1515.431935][ T9749] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1515.431961][ T9749] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1515.431988][ T9749] do_wait+0x354/0xa00 [ 1515.459972][ T9773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1515.460460][ T9749] kernel_wait4+0x14c/0x260 [ 1515.479025][ T9773] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1515.486172][ T9749] __do_sys_wait4+0x13f/0x150 [ 1515.486206][ T9749] do_syscall_64+0x2d/0x70 [ 1515.506388][ T9658] usb 1-1: bad CDC descriptors [ 1515.508125][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1515.508164][ T9749] [ 1515.508164][ T9749] other info that might help us debug this: [ 1515.508164][ T9749] [ 1515.508173][ T9749] Chain exists of: [ 1515.508173][ T9749] [ 1515.513582][ T9658] usb 1-1: bad CDC descriptors [ 1515.517844][ T9749] &evdev->mutex --> &client->buffer_lock --> &new->fa_lock [ 1515.517844][ T9749] [ 1515.517883][ T9749] Possible interrupt unsafe locking scenario: [ 1515.517883][ T9749] [ 1515.517889][ T9749] CPU0 CPU1 [ 1515.517895][ T9749] ---- ---- [ 1515.539045][ T9773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.544829][ T9749] lock(&new->fa_lock); [ 1515.544852][ T9749] local_irq_disable(); [ 1515.544859][ T9749] lock(&evdev->mutex); 00:47:58 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x97, 0xc2, 0xf5, 0x8, 0x61d, 0xc170, 0x40f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdd, 0xc9, 0x90, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8866d98abd"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1515.544875][ T9749] lock(&client->buffer_lock); [ 1515.583862][ T9773] usb 6-1: config 0 descriptor?? [ 1515.585088][ T9749] [ 1515.585096][ T9749] lock(&evdev->mutex); [ 1515.585115][ T9749] [ 1515.585115][ T9749] *** DEADLOCK *** [ 1515.585115][ T9749] [ 1515.585120][ T9749] 7 locks held by syz-executor.2/9749: [ 1515.585136][ T9749] #0: [ 1515.702082][ T9773] usb 6-1: can't set config #0, error -71 [ 1515.703638][ T9749] ffff88801d7c9110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x1d3/0x760 [ 1515.726325][ T9749] #1: ffff8880185ea230 (&dev->event_lock){-...}-{2:2}, at: input_inject_event+0xa6/0x310 [ 1515.733895][ T9773] usb 6-1: USB disconnect, device number 10 [ 1515.736373][ T9749] #2: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0x92/0x310 [ 1515.752020][ T9749] #3: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: input_pass_values.part.0+0x0/0x700 [ 1515.764592][ T9749] #4: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x59/0x3f0 [ 1515.773773][ T9749] #5: ffff888057086028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values.part.0+0xf6/0x970 [ 1515.784601][ T9749] #6: ffffffff8bd73da0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x3d/0x460 [ 1515.793721][ T9749] [ 1515.793721][ T9749] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1515.805600][ T9749] -> (&evdev->mutex){+.+.}-{3:3} { [ 1515.810844][ T9749] HARDIRQ-ON-W at: [ 1515.814917][ T9749] lock_acquire+0x1a8/0x720 [ 1515.821268][ T9749] __mutex_lock+0x134/0x1110 [ 1515.828533][ T9749] evdev_open+0x2f3/0x6a0 [ 1515.829518][ T3215] usb 1-1: USB disconnect, device number 30 [ 1515.834718][ T9749] chrdev_open+0x266/0x770 [ 1515.834748][ T9749] do_dentry_open+0x4b9/0x11b0 [ 1515.834771][ T9749] path_openat+0x1b9a/0x2730 [ 1515.859931][ T9749] do_filp_open+0x17e/0x3c0 [ 1515.866288][ T9749] do_sys_openat2+0x16d/0x420 [ 1515.873620][ T9749] __x64_sys_openat+0x13f/0x1f0 [ 1515.880341][ T9749] do_syscall_64+0x2d/0x70 [ 1515.886886][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1515.895868][ T9749] SOFTIRQ-ON-W at: [ 1515.899962][ T9749] lock_acquire+0x1a8/0x720 [ 1515.906329][ T9749] __mutex_lock+0x134/0x1110 [ 1515.913912][ T9749] evdev_open+0x2f3/0x6a0 [ 1515.920087][ T9749] chrdev_open+0x266/0x770 [ 1515.927093][ T9749] do_dentry_open+0x4b9/0x11b0 [ 1515.934604][ T9749] path_openat+0x1b9a/0x2730 [ 1515.941983][ T9749] do_filp_open+0x17e/0x3c0 [ 1515.949057][ T9749] do_sys_openat2+0x16d/0x420 [ 1515.956593][ T9749] __x64_sys_openat+0x13f/0x1f0 [ 1515.964263][ T9749] do_syscall_64+0x2d/0x70 [ 1515.971469][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1515.979224][ T9749] INITIAL USE at: [ 1515.983897][ T9749] lock_acquire+0x1a8/0x720 [ 1515.991254][ T9749] __mutex_lock+0x134/0x1110 [ 1515.998709][ T9749] evdev_open+0x2f3/0x6a0 [ 1516.005825][ T9749] chrdev_open+0x266/0x770 [ 1516.013103][ T9749] do_dentry_open+0x4b9/0x11b0 [ 1516.019629][ T9749] path_openat+0x1b9a/0x2730 [ 1516.026911][ T9749] do_filp_open+0x17e/0x3c0 [ 1516.033443][ T9749] do_sys_openat2+0x16d/0x420 [ 1516.040581][ T9749] __x64_sys_openat+0x13f/0x1f0 [ 1516.048162][ T9749] do_syscall_64+0x2d/0x70 [ 1516.055238][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.063910][ T9749] } [ 1516.066512][ T9749] ... key at: [] __key.6+0x0/0x40 [ 1516.073946][ T9749] ... acquired at: [ 1516.078643][ T9749] _raw_spin_lock_irqsave+0x39/0x50 [ 1516.085317][ T9749] evdev_do_ioctl+0x2d7/0x1820 [ 1516.090274][ T9749] evdev_ioctl+0x145/0x1a0 [ 1516.095272][ T9749] __x64_sys_ioctl+0x193/0x200 [ 1516.100283][ T9749] do_syscall_64+0x2d/0x70 [ 1516.105395][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.112730][ T9749] [ 1516.115154][ T9749] -> (&client->buffer_lock){....}-{2:2} { [ 1516.120913][ T9749] INITIAL USE at: [ 1516.125986][ T9749] lock_acquire+0x1a8/0x720 [ 1516.133393][ T9749] _raw_spin_lock_irqsave+0x39/0x50 [ 1516.140191][ T9749] evdev_do_ioctl+0x2d7/0x1820 [ 1516.146543][ T9749] evdev_ioctl+0x145/0x1a0 [ 1516.153835][ T9749] __x64_sys_ioctl+0x193/0x200 [ 1516.160192][ T9749] do_syscall_64+0x2d/0x70 [ 1516.167152][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.174964][ T9749] } [ 1516.177500][ T9749] ... key at: [] __key.4+0x0/0x40 [ 1516.185281][ T9749] ... acquired at: [ 1516.189909][ T9749] lock_acquire+0x1a8/0x720 [ 1516.195394][ T9749] _raw_read_lock+0x5b/0x70 [ 1516.200452][ T9749] kill_fasync+0x14b/0x460 [ 1516.205542][ T9749] evdev_pass_values.part.0+0x64e/0x970 [ 1516.212656][ T9749] evdev_events+0x28b/0x3f0 [ 1516.217682][ T9749] input_to_handler+0x2a0/0x4c0 [ 1516.222862][ T9749] input_pass_values.part.0+0x284/0x700 [ 1516.229082][ T9749] input_handle_event+0x373/0x1440 [ 1516.234400][ T9749] input_inject_event+0x2f5/0x310 [ 1516.239625][ T9749] evdev_write+0x430/0x760 [ 1516.244750][ T9749] vfs_write+0x28e/0xa30 [ 1516.249696][ T9749] ksys_write+0x1ee/0x250 [ 1516.255552][ T9749] do_syscall_64+0x2d/0x70 [ 1516.260582][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.267785][ T9749] [ 1516.271251][ T9749] [ 1516.271251][ T9749] the dependencies between the lock to be acquired [ 1516.271264][ T9749] and SOFTIRQ-irq-unsafe lock: [ 1516.285938][ T9749] -> (&new->fa_lock){.+.?}-{2:2} { [ 1516.291268][ T9749] HARDIRQ-ON-R at: [ 1516.296018][ T9749] lock_acquire+0x1a8/0x720 [ 1516.302199][ T9749] _raw_read_lock+0x5b/0x70 [ 1516.309196][ T9749] kill_fasync+0x14b/0x460 [ 1516.316329][ T9749] sock_wake_async+0xd2/0x160 [ 1516.323596][ T9749] sk_wake_async+0x16c/0x280 00:47:58 executing program 0: ppoll(0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) [ 1516.329868][ T9749] tcp_rcv_state_process+0x31ce/0x4cb0 [ 1516.337450][ T9749] tcp_v4_do_rcv+0x320/0x870 [ 1516.344568][ T9749] __release_sock+0x134/0x3a0 [ 1516.351915][ T9749] release_sock+0x54/0x1b0 [ 1516.358868][ T9749] tcp_sendmsg+0x36/0x40 [ 1516.364809][ T9749] inet_sendmsg+0x99/0xe0 [ 1516.371371][ T9749] sock_sendmsg+0xcf/0x120 [ 1516.377468][ T9749] __sys_sendto+0x21c/0x320 [ 1516.383639][ T9749] __x64_sys_sendto+0xdd/0x1b0 [ 1516.394354][ T9749] do_syscall_64+0x2d/0x70 [ 1516.401349][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.409144][ T9749] IN-SOFTIRQ-R at: [ 1516.413831][ T9749] lock_acquire+0x1a8/0x720 [ 1516.420870][ T9749] _raw_read_lock+0x36/0x70 [ 1516.427901][ T9749] kill_fasync+0x14b/0x460 [ 1516.434646][ T9749] sock_wake_async+0xd2/0x160 [ 1516.440990][ T9749] sock_def_readable+0x2cb/0x4c0 [ 1516.448483][ T9749] tcp_data_ready+0xea/0x320 [ 1516.455500][ T9749] tcp_data_queue+0x1a81/0x4b30 [ 1516.462815][ T9749] tcp_rcv_established+0x841/0x1eb0 [ 1516.470116][ T9749] tcp_v4_do_rcv+0x5d1/0x870 [ 1516.476847][ T9749] tcp_v4_rcv+0x2d36/0x3780 [ 1516.483025][ T9749] ip_protocol_deliver_rcu+0x5c/0x8a0 [ 1516.490399][ T9749] ip_local_deliver_finish+0x20a/0x370 [ 1516.498032][ T9749] ip_local_deliver+0x1b3/0x200 [ 1516.505197][ T9749] ip_rcv_finish+0x1da/0x2f0 [ 1516.512347][ T9749] ip_rcv+0xaa/0xd0 [ 1516.519007][ T9749] __netif_receive_skb_one_core+0x114/0x180 [ 1516.527037][ T9749] __netif_receive_skb+0x27/0x1c0 [ 1516.534909][ T9749] process_backlog+0x232/0x6c0 [ 1516.542147][ T9749] net_rx_action+0x461/0xe10 [ 1516.549164][ T9749] __do_softirq+0x29b/0x9f6 [ 1516.556304][ T9749] asm_call_irq_on_stack+0xf/0x20 [ 1516.563520][ T9749] do_softirq_own_stack+0xaa/0xd0 [ 1516.570848][ T9749] irq_exit_rcu+0x134/0x200 [ 1516.578313][ T9749] sysvec_apic_timer_interrupt+0x4d/0x100 [ 1516.586680][ T9749] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1516.594423][ T9749] do_wait+0x354/0xa00 [ 1516.601225][ T9749] kernel_wait4+0x14c/0x260 [ 1516.608291][ T9749] __do_sys_wait4+0x13f/0x150 [ 1516.615334][ T9749] do_syscall_64+0x2d/0x70 [ 1516.622588][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.630163][ T9749] SOFTIRQ-ON-R at: [ 1516.635291][ T9749] lock_acquire+0x1a8/0x720 [ 1516.642603][ T9749] _raw_read_lock+0x5b/0x70 [ 1516.649608][ T9749] kill_fasync+0x14b/0x460 [ 1516.656667][ T9749] sock_wake_async+0xd2/0x160 [ 1516.663741][ T9749] sk_wake_async+0x16c/0x280 [ 1516.670879][ T9749] tcp_rcv_state_process+0x31ce/0x4cb0 [ 1516.678159][ T9749] tcp_v4_do_rcv+0x320/0x870 [ 1516.684415][ T9749] __release_sock+0x134/0x3a0 [ 1516.692052][ T9749] release_sock+0x54/0x1b0 [ 1516.698956][ T9749] tcp_sendmsg+0x36/0x40 [ 1516.706019][ T9749] inet_sendmsg+0x99/0xe0 [ 1516.712923][ T9749] sock_sendmsg+0xcf/0x120 [ 1516.719936][ T9749] __sys_sendto+0x21c/0x320 [ 1516.726869][ T9749] __x64_sys_sendto+0xdd/0x1b0 [ 1516.734072][ T9749] do_syscall_64+0x2d/0x70 [ 1516.740182][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.747746][ T9749] INITIAL USE at: [ 1516.752250][ T9749] lock_acquire+0x1a8/0x720 [ 1516.758346][ T9749] _raw_write_lock_irq+0x32/0x50 [ 1516.766241][ T9749] fasync_remove_entry+0xb6/0x1f0 [ 1516.773469][ T9749] fasync_helper+0x9e/0xb0 [ 1516.780590][ T9749] sock_fasync+0x94/0x140 [ 1516.787380][ T9749] __fput+0x70d/0x920 [ 1516.794238][ T9749] task_work_run+0xdd/0x190 [ 1516.801776][ T9749] exit_to_user_mode_prepare+0x249/0x250 [ 1516.809612][ T9749] syscall_exit_to_user_mode+0x19/0x50 [ 1516.816935][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.824606][ T9749] INITIAL READ USE at: [ 1516.829446][ T9749] lock_acquire+0x1a8/0x720 [ 1516.836566][ T9749] _raw_read_lock+0x5b/0x70 [ 1516.843093][ T9749] kill_fasync+0x14b/0x460 [ 1516.850335][ T9749] sock_wake_async+0xd2/0x160 [ 1516.857554][ T9749] sk_wake_async+0x16c/0x280 [ 1516.865017][ T9749] tcp_rcv_state_process+0x31ce/0x4cb0 [ 1516.872613][ T9749] tcp_v4_do_rcv+0x320/0x870 [ 1516.879709][ T9749] __release_sock+0x134/0x3a0 [ 1516.886968][ T9749] release_sock+0x54/0x1b0 [ 1516.894260][ T9749] tcp_sendmsg+0x36/0x40 [ 1516.901326][ T9749] inet_sendmsg+0x99/0xe0 [ 1516.908570][ T9749] sock_sendmsg+0xcf/0x120 [ 1516.915141][ T9749] __sys_sendto+0x21c/0x320 [ 1516.921667][ T9749] __x64_sys_sendto+0xdd/0x1b0 [ 1516.929225][ T9749] do_syscall_64+0x2d/0x70 [ 1516.936354][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1516.945124][ T9749] } [ 1516.947637][ T9749] ... key at: [] __key.0+0x0/0x40 [ 1516.955198][ T9749] ... acquired at: [ 1516.959802][ T9749] lock_acquire+0x1a8/0x720 [ 1516.964812][ T9749] _raw_read_lock+0x5b/0x70 [ 1516.969867][ T9749] kill_fasync+0x14b/0x460 [ 1516.975286][ T9749] evdev_pass_values.part.0+0x64e/0x970 [ 1516.982345][ T9749] evdev_events+0x28b/0x3f0 [ 1516.987291][ T9749] input_to_handler+0x2a0/0x4c0 [ 1516.992328][ T9749] input_pass_values.part.0+0x284/0x700 [ 1516.999088][ T9749] input_handle_event+0x373/0x1440 [ 1517.004398][ T9749] input_inject_event+0x2f5/0x310 [ 1517.010944][ T9749] evdev_write+0x430/0x760 [ 1517.015888][ T9749] vfs_write+0x28e/0xa30 [ 1517.020729][ T9749] ksys_write+0x1ee/0x250 [ 1517.026497][ T9749] do_syscall_64+0x2d/0x70 [ 1517.031489][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1517.038372][ T9749] [ 1517.040998][ T9749] [ 1517.040998][ T9749] stack backtrace: [ 1517.046918][ T9749] CPU: 1 PID: 9749 Comm: syz-executor.2 Not tainted 5.11.0-rc7-syzkaller #0 [ 1517.057794][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.067909][ T9749] Call Trace: [ 1517.072298][ T9749] dump_stack+0x107/0x163 [ 1517.077101][ T9749] check_irq_usage.cold+0x50d/0x744 [ 1517.082397][ T9749] ? print_shortest_lock_dependencies+0x80/0x80 [ 1517.089879][ T9749] ? print_shortest_lock_dependencies+0x80/0x80 [ 1517.097107][ T9749] ? check_path.constprop.0+0x22/0x40 [ 1517.102515][ T9749] ? check_path.constprop.0+0x22/0x40 [ 1517.109137][ T9749] ? lockdep_lock+0xc6/0x200 [ 1517.114106][ T9749] ? call_rcu_zapped+0xb0/0xb0 [ 1517.119082][ T9749] ? lockdep_lock+0xc6/0x200 [ 1517.124117][ T9749] __lock_acquire+0x2b3e/0x54f0 [ 1517.129253][ T9749] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1517.135931][ T9749] lock_acquire+0x1a8/0x720 [ 1517.140828][ T9749] ? kill_fasync+0x14b/0x460 [ 1517.145780][ T9749] ? lock_release+0x710/0x710 [ 1517.151362][ T9749] ? lock_release+0x710/0x710 [ 1517.156288][ T9749] ? lock_release+0x710/0x710 [ 1517.161381][ T9749] _raw_read_lock+0x5b/0x70 [ 1517.166310][ T9749] ? kill_fasync+0x14b/0x460 [ 1517.171268][ T9749] kill_fasync+0x14b/0x460 [ 1517.176144][ T9749] evdev_pass_values.part.0+0x64e/0x970 [ 1517.182859][ T9749] ? evdev_release+0x410/0x410 [ 1517.187834][ T9749] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1517.193613][ T9749] evdev_events+0x28b/0x3f0 [ 1517.198626][ T9749] ? evdev_pass_values.part.0+0x970/0x970 [ 1517.205437][ T9749] input_to_handler+0x2a0/0x4c0 [ 1517.210456][ T9749] input_pass_values.part.0+0x284/0x700 [ 1517.218317][ T9749] input_handle_event+0x373/0x1440 [ 1517.224815][ T9749] input_inject_event+0x2f5/0x310 [ 1517.229886][ T9749] evdev_write+0x430/0x760 [ 1517.234731][ T9749] ? evdev_read+0xe40/0xe40 [ 1517.239658][ T9749] ? security_file_permission+0x248/0x560 [ 1517.246052][ T9749] ? evdev_read+0xe40/0xe40 [ 1517.251871][ T9749] vfs_write+0x28e/0xa30 [ 1517.256814][ T9749] ksys_write+0x1ee/0x250 [ 1517.261707][ T9749] ? __ia32_sys_read+0xb0/0xb0 [ 1517.266702][ T9749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.273675][ T9749] do_syscall_64+0x2d/0x70 [ 1517.278521][ T9749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1517.285358][ T9749] RIP: 0033:0x465b09 [ 1517.289953][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.311004][ T9749] RSP: 002b:00007fcbbc401188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1517.320366][ T9749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 1517.328361][ T9749] RDX: 0000000000003888 RSI: 0000000020000080 RDI: 0000000000000004 [ 1517.337465][ T9749] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 1517.346658][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1517.356023][ T9749] R13: 0000000000a9fb1f R14: 00007fcbbc401300 R15: 0000000000022000 00:47:59 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f00000000c0), 0x0) 00:48:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 00:48:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000002980)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x5452, &(0x7f0000000100)=0x100004) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1a9402) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) write$hidraw(r1, &(0x7f0000000080)='&', 0x3888) 00:48:00 executing program 3: clone(0x20002044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 00:48:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 00:48:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) 00:48:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1517.668919][ T8551] usb 6-1: new high-speed USB device number 11 using dummy_hcd 00:48:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:48:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x224000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 00:48:00 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) [ 1517.928944][ T8551] usb 6-1: Using ep0 maxpacket: 8 [ 1518.069159][ T8551] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1518.088871][ T8551] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1518.118935][ T8551] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1518.148915][ T8551] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1518.158035][ T8551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.190857][ T8551] usb 6-1: config 0 descriptor?? [ 1518.210986][ T9777] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1518.230102][ T8551] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1518.464113][ T8551] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1518.478880][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1518.504469][ T8551] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1518.549585][ T8551] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1518.599456][ T8551] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1518.707776][T24282] usb 6-1: USB disconnect, device number 11 [ 1518.721062][T24282] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1518.781762][T24282] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1518.818015][T24282] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1518.838133][T24282] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1518.858057][T24282] quatech2 6-1:0.0: device disconnected 00:48:01 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x97, 0xc2, 0xf5, 0x8, 0x61d, 0xc170, 0x40f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdd, 0xc9, 0x90, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8866d98abd"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 00:48:01 executing program 3: r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:48:01 executing program 0: add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3, 0x11}, &(0x7f0000001a80)='\x00', 0x1, 0xfffffffffffffffc) 00:48:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_GET_FD_BY_ID(0x12, &(0x7f00000000c0), 0x70) 00:48:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') read$alg(r0, 0x0, 0x0) 00:48:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f0000000040)="12d9a84d9d04368f5cedbe36d4914d5eca"}) 00:48:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) 00:48:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x401070cd, 0x0) [ 1519.538982][T24282] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1519.778968][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1519.899468][T24282] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1519.910978][T24282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1519.924323][T24282] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1519.937822][T24282] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1519.947054][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.960929][T24282] usb 6-1: config 0 descriptor?? [ 1519.990352][ T9867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1520.010161][T24282] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1520.223759][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1520.238918][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1520.252224][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1520.267648][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1520.298686][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1520.451675][ T8551] usb 6-1: USB disconnect, device number 12 [ 1520.469189][ T8551] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1520.499451][ T8551] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1520.518795][ T8551] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1520.554799][ T8551] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1520.577030][ T8551] quatech2 6-1:0.0: device disconnected 00:48:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:48:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:48:03 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0xfffffd28) lseek(r0, 0x0, 0x4) 00:48:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x401070cd, 0x0) 00:48:03 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x97, 0xc2, 0xf5, 0x8, 0x61d, 0xc170, 0x40f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdd, 0xc9, 0x90, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8866d98abd"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 00:48:03 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) chdir(0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) lseek(r1, 0x71, 0x0) 00:48:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x401070cd, 0x0) 00:48:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x3) keyctl$revoke(0x3, r0) 00:48:03 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000500)) 00:48:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x401070cd, 0x0) 00:48:03 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000500)) 00:48:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x3) keyctl$revoke(0x3, r0) [ 1521.319079][T24282] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1521.558921][T24282] usb 6-1: Using ep0 maxpacket: 8 [ 1521.678996][T24282] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1521.689625][T24282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1521.700125][T24282] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1521.714542][T24282] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1521.725000][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.739330][T24282] usb 6-1: config 0 descriptor?? [ 1521.762739][ T9942] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1521.780200][T24282] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1522.012755][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1522.027938][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1522.037286][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1522.081032][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1522.114900][T24282] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1522.263599][ T34] usb 6-1: USB disconnect, device number 13 [ 1522.282816][ T34] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1522.322532][ T34] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1522.354550][ T34] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1522.381994][ T34] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1522.402509][ T34] quatech2 6-1:0.0: device disconnected 00:48:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd, @volatile, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @var, @func, @int]}, {0x0, [0x0]}}, 0x0, 0x107}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:48:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@fwd, @volatile, @fwd, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @var, @int]}, {0x0, [0x0]}}, 0x0, 0xbf}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:48:06 executing program 3: syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x0) 00:48:06 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000500)) 00:48:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x3) keyctl$revoke(0x3, r0) 00:48:06 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x97, 0xc2, 0xf5, 0x8, 0x61d, 0xc170, 0x40f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdd, 0xc9, 0x90, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "8866d98abd"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 00:48:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x3) keyctl$revoke(0x3, r0) 00:48:06 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) 00:48:06 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000500)) 00:48:06 executing program 2: socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) 00:48:06 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) 00:48:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000200)) [ 1524.180607][ T9631] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1524.418922][ T9631] usb 6-1: Using ep0 maxpacket: 8 [ 1524.539082][ T9631] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1524.549934][ T9631] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 729 [ 1524.566802][ T9631] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.583372][ T9631] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=40.f5 [ 1524.595759][ T9631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.612511][ T9631] usb 6-1: config 0 descriptor?? [ 1524.631041][T10016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1524.650235][ T9631] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1524.862975][ T9631] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1524.878905][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1524.901363][ T9631] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1524.933281][ T9631] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1524.959827][ T9631] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1525.071808][ T9631] usb 6-1: USB disconnect, device number 14 [ 1525.109433][ T9631] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0