86d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c518a25a2b06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)
write$FUSE_LK(r0, 0x0, 0x0)

22:14:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:34 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:14:34 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2875.381807][   T28] audit: type=1804 audit(1598480074.871:103162): pid=8101 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3503/bus" dev="sda1" ino=16268 res=1 errno=0
[ 2875.454550][   T28] audit: type=1804 audit(1598480074.921:103163): pid=8106 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3070/bus" dev="sda1" ino=16261 res=1 errno=0
[ 2875.549266][   T28] audit: type=1804 audit(1598480075.001:103164): pid=8110 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3504/bus" dev="sda1" ino=16320 res=1 errno=0
22:14:35 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2875.589867][T23800] usb 5-1: reset high-speed USB device number 96 using dummy_hcd
[ 2875.621195][T28089] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 2875.692187][   T28] audit: type=1804 audit(1598480075.181:103165): pid=8119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3505/bus" dev="sda1" ino=16320 res=1 errno=0
22:14:35 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2875.842862][   T28] audit: type=1804 audit(1598480075.331:103166): pid=8121 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3506/bus" dev="sda1" ino=16320 res=1 errno=0
[ 2875.867648][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2875.870270][T23800] usb 5-1: Using ep0 maxpacket: 16
22:14:35 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2875.909813][T23800] usb 5-1: device firmware changed
[ 2875.917805][T23800] usb 5-1: USB disconnect, device number 96
[ 2875.990104][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2876.003887][   T28] audit: type=1804 audit(1598480075.481:103167): pid=8129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3507/bus" dev="sda1" ino=16320 res=1 errno=0
[ 2876.039717][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2876.059696][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:14:35 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2876.091662][T28089] usb 1-1: config 0 descriptor??
[ 2876.132052][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:14:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$fuse(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x1020, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8aa010}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)
write$FUSE_LK(r0, 0x0, 0x0)

[ 2876.167331][   T28] audit: type=1804 audit(1598480075.651:103168): pid=8134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3508/bus" dev="sda1" ino=16320 res=1 errno=0
22:14:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:35 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2876.301080][T23800] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2876.331338][T28089] usb 1-1: USB disconnect, device number 59
22:14:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2876.561106][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 2876.709618][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2876.731996][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2876.742091][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2876.751584][T23800] usb 5-1: config 0 descriptor??
[ 2876.792169][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2876.889588][T28089] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 2876.991838][T23800] usb 5-1: USB disconnect, device number 97
[ 2877.129533][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2877.249577][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2877.262622][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2877.272019][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2877.282503][T28089] usb 1-1: config 0 descriptor??
[ 2877.321819][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2877.621327][T23800] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2877.859555][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 2877.999469][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2878.012503][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2878.021589][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2878.030548][T23800] usb 5-1: config 0 descriptor??
[ 2878.069866][T23800] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2878.075801][T23800] hub: probe of 5-1:0.0 failed with error -5
[ 2878.087316][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2878.530765][T28089] usb 1-1: USB disconnect, device number 60
22:14:38 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:38 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$fuse(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x1020, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8aa010}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)
write$FUSE_LK(r0, &(0x7f0000000080)={0x28}, 0x28)

22:14:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:38 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2879.353903][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 2879.353915][   T28] audit: type=1804 audit(1598480078.842:103171): pid=8209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3510/bus" dev="sda1" ino=16097 res=1 errno=0
[ 2879.421424][   T28] audit: type=1804 audit(1598480078.892:103172): pid=8215 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3072/bus" dev="sda1" ino=16113 res=1 errno=0
22:14:38 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2879.537932][   T28] audit: type=1804 audit(1598480079.022:103173): pid=8222 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3511/bus" dev="sda1" ino=16161 res=1 errno=0
[ 2879.570033][T27840] usb 5-1: reset high-speed USB device number 98 using dummy_hcd
[ 2879.599365][T28089] usb 1-1: new high-speed USB device number 61 using dummy_hcd
22:14:39 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2879.711545][   T28] audit: type=1804 audit(1598480079.202:103174): pid=8226 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3512/bus" dev="sda1" ino=16161 res=1 errno=0
22:14:39 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:39 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2879.829336][T27840] usb 5-1: Using ep0 maxpacket: 16
[ 2879.860252][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2879.875933][   T28] audit: type=1804 audit(1598480079.362:103175): pid=8230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3513/bus" dev="sda1" ino=16146 res=1 errno=0
[ 2879.900894][T27840] usb 5-1: device firmware changed
[ 2879.906538][T27840] usb 5-1: USB disconnect, device number 98
22:14:39 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2880.029715][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2880.043115][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2880.053490][   T28] audit: type=1804 audit(1598480079.542:103176): pid=8236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3514/bus" dev="sda1" ino=16119 res=1 errno=0
22:14:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$fuse(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x1020, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8aa010}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)
write$FUSE_LK(r0, &(0x7f0000000080)={0x28}, 0x28)

[ 2880.078726][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2880.091584][T28089] usb 1-1: config 0 descriptor??
[ 2880.142171][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2880.289284][T27840] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2880.340739][T28089] usb 1-1: USB disconnect, device number 61
[ 2880.539274][T27840] usb 5-1: Using ep0 maxpacket: 16
[ 2880.659746][T27840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2880.672805][T27840] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2880.682297][T27840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2880.692302][T27840] usb 5-1: config 0 descriptor??
[ 2880.744164][T27840] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2880.909241][T28089] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 2880.942091][ T5266] usb 5-1: USB disconnect, device number 99
[ 2881.159253][T28089] usb 1-1: Using ep0 maxpacket: 32
[ 2881.279225][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2881.292370][T28089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2881.301757][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2881.311996][T28089] usb 1-1: config 0 descriptor??
[ 2881.349499][T28089] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2881.355447][T28089] hub: probe of 1-1:0.0 failed with error -5
[ 2881.366114][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2881.529308][ T5266] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2881.769209][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2881.889442][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2881.903543][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2881.913221][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2881.924178][ T5266] usb 5-1: config 0 descriptor??
[ 2881.969507][ T5266] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2881.975715][ T5266] hub: probe of 5-1:0.0 failed with error -5
[ 2881.987442][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2882.700007][ T7975] usb 1-1: USB disconnect, device number 62
22:14:42 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:42 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:42 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mount$fuse(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x1020, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8aa010}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020)
write$FUSE_LK(r0, &(0x7f0000000080)={0x28}, 0x28)

22:14:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2883.240543][   T28] audit: type=1804 audit(1598480082.732:103177): pid=8308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3515/bus" dev="sda1" ino=16294 res=1 errno=0
[ 2883.295241][   T28] audit: type=1804 audit(1598480082.782:103178): pid=8314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3073/bus" dev="sda1" ino=16288 res=1 errno=0
22:14:42 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2883.439513][   T28] audit: type=1804 audit(1598480082.932:103179): pid=8318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3516/bus" dev="sda1" ino=16336 res=1 errno=0
[ 2883.463833][ T5266] usb 5-1: reset high-speed USB device number 100 using dummy_hcd
22:14:43 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2883.489423][T23800] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2883.582019][   T28] audit: type=1804 audit(1598480083.072:103180): pid=8322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3517/bus" dev="sda1" ino=16336 res=1 errno=0
22:14:43 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(0x0, &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2883.719109][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2883.729060][T23800] usb 1-1: Using ep0 maxpacket: 16
22:14:43 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2883.759362][ T5266] usb 5-1: device firmware changed
[ 2883.765097][ T5266] usb 5-1: USB disconnect, device number 100
[ 2883.850945][T23800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2883.864138][T23800] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2883.876151][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2883.888473][T23800] usb 1-1: config 0 descriptor??
[ 2883.932864][T23800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:14:43 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2884.133963][T24525] usb 1-1: USB disconnect, device number 63
[ 2884.158934][ T5266] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2884.398934][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2884.519370][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2884.532306][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2884.542235][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2884.551400][ T5266] usb 5-1: config 0 descriptor??
[ 2884.593058][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2884.688923][T24525] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 2884.790991][ T7975] usb 5-1: USB disconnect, device number 101
[ 2884.928903][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 2885.049305][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2885.062225][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2885.071301][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2885.081608][T24525] usb 1-1: config 0 descriptor??
[ 2885.119168][T24525] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2885.125099][T24525] hub: probe of 1-1:0.0 failed with error -5
[ 2885.135217][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2885.368871][ T7975] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2885.618868][ T7975] usb 5-1: Using ep0 maxpacket: 32
[ 2885.739218][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2885.752047][ T7975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2885.761768][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2885.772176][ T7975] usb 5-1: config 0 descriptor??
[ 2885.811556][ T7975] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2885.817469][ T7975] hub: probe of 5-1:0.0 failed with error -5
[ 2885.830465][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2886.448906][ T7975] usb 1-1: USB disconnect, device number 64
22:14:46 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x1a0)

22:14:46 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(0x0, &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2887.092391][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 2887.092402][   T28] audit: type=1804 audit(1598480086.582:103184): pid=8406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3521/bus" dev="sda1" ino=16266 res=1 errno=0
22:14:46 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2887.224870][   T28] audit: type=1804 audit(1598480086.622:103185): pid=8409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3074/bus" dev="sda1" ino=16262 res=1 errno=0
[ 2887.298977][T27964] usb 5-1: reset high-speed USB device number 102 using dummy_hcd
[ 2887.338976][T24525] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 2887.383034][   T28] audit: type=1804 audit(1598480086.872:103186): pid=8418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3522/bus" dev="sda1" ino=16257 res=1 errno=0
22:14:47 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2887.568710][T27964] usb 5-1: Using ep0 maxpacket: 16
[ 2887.588109][   T28] audit: type=1804 audit(1598480087.072:103187): pid=8420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3523/bus" dev="sda1" ino=16266 res=1 errno=0
[ 2887.619125][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 2887.639381][T27964] usb 5-1: device firmware changed
[ 2887.646439][T27964] usb 5-1: USB disconnect, device number 102
22:14:47 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2887.750467][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2887.764909][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2887.777398][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2887.790007][T24525] usb 1-1: config 0 descriptor??
[ 2887.790870][   T28] audit: type=1804 audit(1598480087.282:103188): pid=8428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3524/bus" dev="sda1" ino=16274 res=1 errno=0
22:14:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(0x0, &(0x7f00000003c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2887.851813][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:14:47 executing program 2:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

22:14:47 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(0x0, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2888.028709][T27964] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 2888.053216][T24525] usb 1-1: USB disconnect, device number 65
[ 2888.268799][T27964] usb 5-1: Using ep0 maxpacket: 16
[ 2888.429113][T27964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2888.442304][T27964] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2888.452155][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2888.461596][T27964] usb 5-1: config 0 descriptor??
[ 2888.502666][T27964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2888.648639][T24525] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 2888.703153][T27964] usb 5-1: USB disconnect, device number 103
[ 2888.898582][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 2889.028609][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2889.041408][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2889.050548][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2889.061292][T24525] usb 1-1: config 0 descriptor??
[ 2889.098784][T24525] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2889.104757][T24525] hub: probe of 1-1:0.0 failed with error -5
[ 2889.116628][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2889.288625][T27964] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 2889.568511][T27964] usb 5-1: Using ep0 maxpacket: 32
[ 2889.698596][T27964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2889.711403][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2889.720453][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2889.730742][T27964] usb 5-1: config 0 descriptor??
[ 2889.781157][T27964] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2889.787402][T27964] hub: probe of 5-1:0.0 failed with error -5
[ 2889.799812][T27964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2890.439334][T24525] usb 1-1: USB disconnect, device number 66
22:14:50 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:14:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000300)={0x2024, 0x9bd, 0x0, 0xf0a})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000080)='y\x00', 0x2, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:50 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(0x0, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:50 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2891.122120][   T28] audit: type=1804 audit(1598480090.613:103189): pid=8499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3075/bus" dev="sda1" ino=16261 res=1 errno=0
[ 2891.258819][T23800] usb 5-1: reset high-speed USB device number 104 using dummy_hcd
[ 2891.310705][ T7975] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2891.498654][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 2891.538512][T23800] usb 5-1: device firmware changed
[ 2891.543900][T23800] usb 5-1: USB disconnect, device number 104
[ 2891.578482][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 2891.730311][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2891.764768][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2891.804384][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2891.836969][ T7975] usb 1-1: config 0 descriptor??
22:14:51 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(0x0, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2891.910770][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2891.918385][T23800] usb 5-1: new high-speed USB device number 105 using dummy_hcd
22:14:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2892.083472][   T28] audit: type=1804 audit(1598480091.573:103190): pid=8520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3076/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2892.111778][ T7975] usb 1-1: USB disconnect, device number 67
[ 2892.168317][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 2892.288892][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2892.321155][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2892.348106][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2892.381273][T23800] usb 5-1: config 0 descriptor??
22:14:51 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000300)={0x0, 0x1, 0x1, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}}})

[ 2892.434147][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:14:52 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
inotify_init1(0x0)

22:14:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x4001, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2892.630670][T23800] usb 5-1: USB disconnect, device number 105
[ 2892.678572][ T7975] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 2892.938380][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2893.079832][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2893.092901][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2893.103465][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2893.114289][ T7975] usb 1-1: config 0 descriptor??
[ 2893.168549][ T7975] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2893.177709][ T7975] hub: probe of 1-1:0.0 failed with error -5
[ 2893.186449][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2893.208243][T23800] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 2893.468225][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 2893.618650][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2893.631481][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2893.641144][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2893.650120][T23800] usb 5-1: config 0 descriptor??
[ 2893.690460][T23800] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2893.696403][T23800] hub: probe of 5-1:0.0 failed with error -5
[ 2893.708716][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2894.498213][ T7975] usb 1-1: USB disconnect, device number 68
22:14:54 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:14:54 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x4001, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:54 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2894.953168][   T28] audit: type=1804 audit(1598480094.443:103191): pid=8581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3528/bus" dev="sda1" ino=16274 res=1 errno=0
[ 2895.009127][   T28] audit: type=1804 audit(1598480094.473:103192): pid=8586 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3077/bus" dev="sda1" ino=16263 res=1 errno=0
22:14:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2895.188236][T28089] usb 5-1: reset high-speed USB device number 106 using dummy_hcd
22:14:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x4001, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

[ 2895.238585][ T7975] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 2895.448134][T28089] usb 5-1: Using ep0 maxpacket: 16
22:14:55 executing program 2:

[ 2895.498520][T28089] usb 5-1: device firmware changed
[ 2895.505117][T28089] usb 5-1: USB disconnect, device number 106
[ 2895.538174][ T7975] usb 1-1: Using ep0 maxpacket: 16
22:14:55 executing program 2:

22:14:55 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x20000000102, 0x0)
semop(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1)

22:14:55 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x20000000102, 0x0)
semop(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1)

[ 2895.668871][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2895.684507][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2895.702060][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2895.711630][ T7975] usb 1-1: config 0 descriptor??
[ 2895.762020][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2895.879401][T28089] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 2895.959701][ T7975] usb 1-1: USB disconnect, device number 69
[ 2896.148008][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2896.278034][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2896.291007][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2896.300559][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2896.309387][T28089] usb 5-1: config 0 descriptor??
[ 2896.351597][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2896.549930][T24525] usb 5-1: USB disconnect, device number 107
[ 2896.558073][ T7975] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 2896.807965][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2896.927963][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2896.940841][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2896.950606][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2896.961151][ T7975] usb 1-1: config 0 descriptor??
[ 2896.998257][ T7975] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2897.004178][ T7975] hub: probe of 1-1:0.0 failed with error -5
[ 2897.015864][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2897.138006][T24525] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 2897.407912][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 2897.548320][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2897.561204][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2897.570806][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2897.579586][T24525] usb 5-1: config 0 descriptor??
[ 2897.630272][T24525] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2897.636298][T24525] hub: probe of 5-1:0.0 failed with error -5
[ 2897.647720][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2898.337909][T24525] usb 1-1: USB disconnect, device number 70
22:14:58 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:14:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0)

22:14:58 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:14:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:14:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:14:58 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000000001090224000100"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:14:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2898.885523][   T28] audit: type=1804 audit(1598480098.373:103193): pid=8671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3529/bus" dev="sda1" ino=16288 res=1 errno=0
[ 2898.969523][   T28] audit: type=1804 audit(1598480098.373:103194): pid=8673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3078/bus" dev="sda1" ino=16269 res=1 errno=0
22:14:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:14:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2899.118816][T24525] usb 5-1: reset high-speed USB device number 108 using dummy_hcd
[ 2899.137889][ T7975] usb 1-1: new high-speed USB device number 71 using dummy_hcd
22:14:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:14:58 executing program 2:
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:14:58 executing program 2:
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2899.377896][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 2899.417804][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2899.468048][T24525] usb 5-1: device firmware changed
[ 2899.476970][T24525] usb 5-1: USB disconnect, device number 108
[ 2899.497777][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2899.527539][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2899.547787][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2899.556914][ T7975] usb 1-1: config 0 descriptor??
[ 2899.604211][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2899.799081][T27964] usb 1-1: USB disconnect, device number 71
[ 2899.857746][T24525] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2900.107695][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2900.227764][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2900.240687][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2900.249813][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2900.258664][T24525] usb 5-1: config 0 descriptor??
[ 2900.309884][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2900.387672][T27964] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 2900.522651][T24525] usb 5-1: USB disconnect, device number 109
[ 2900.647670][T27964] usb 1-1: Using ep0 maxpacket: 32
[ 2900.777706][T27964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2900.790577][T27964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2900.800280][T27964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2900.809285][T27964] usb 1-1: config 0 descriptor??
[ 2900.849441][T27964] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2900.855372][T27964] hub: probe of 1-1:0.0 failed with error -5
[ 2900.866406][T27964] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2901.117619][T24525] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2901.357587][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 2901.498173][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2901.510986][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2901.520045][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2901.530050][T24525] usb 5-1: config 0 descriptor??
[ 2901.577912][T24525] hub 5-1:0.0: bad descriptor, ignoring hub
[ 2901.583996][T24525] hub: probe of 5-1:0.0 failed with error -5
[ 2901.595997][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2902.187649][T27964] usb 1-1: USB disconnect, device number 72
22:15:02 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:02 executing program 2:
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:15:02 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:02 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:02 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2902.847389][   T28] audit: type=1804 audit(1598480102.334:103195): pid=8774 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3530/bus" dev="sda1" ino=16270 res=1 errno=0
[ 2902.918916][   T28] audit: type=1804 audit(1598480102.384:103196): pid=8776 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3079/bus" dev="sda1" ino=16262 res=1 errno=0
22:15:02 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2903.057601][ T7975] usb 5-1: reset high-speed USB device number 110 using dummy_hcd
22:15:02 executing program 2:
r0 = socket$inet(0x2, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:02 executing program 2:
socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2903.157575][T27964] usb 1-1: new high-speed USB device number 73 using dummy_hcd
22:15:02 executing program 2:
socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:02 executing program 2:
socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2903.307449][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 2903.347921][ T7975] usb 5-1: device firmware changed
[ 2903.353382][ T7975] usb 5-1: USB disconnect, device number 110
[ 2903.418217][T27964] usb 1-1: Using ep0 maxpacket: 16
[ 2903.567760][T27964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2903.580718][T27964] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2903.589846][T27964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2903.598742][T27964] usb 1-1: config 0 descriptor??
[ 2903.639630][T27964] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2903.718736][ T7975] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2903.838869][T28089] usb 1-1: USB disconnect, device number 73
[ 2903.957395][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 2904.077433][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2904.091383][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2904.101076][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2904.111614][ T7975] usb 5-1: config 0 descriptor??
[ 2904.151718][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2904.307390][ T7975] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 2904.349488][T24525] usb 5-1: USB disconnect, device number 111
[ 2904.547354][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2904.667347][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2904.680337][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2904.689637][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2904.699586][ T7975] usb 1-1: config 0 descriptor??
[ 2904.737896][ T7975] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2904.743901][ T7975] hub: probe of 1-1:0.0 failed with error -5
[ 2904.752506][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2904.927391][T24525] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2905.167300][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 2905.287579][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2905.298481][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2905.308947][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2905.318300][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2905.330045][T24525] usb 5-1: config 0 descriptor??
[ 2905.369523][T24525] hub 5-1:0.0: USB hub found
[ 2905.667302][T24525] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2905.679269][T24525] usbhid 5-1:0.0: can't add hid device: -22
[ 2905.685262][T24525] usbhid: probe of 5-1:0.0 failed with error -22
[ 2906.067352][ T5266] usb 1-1: USB disconnect, device number 74
22:15:06 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

22:15:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f00000002c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:06 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

[ 2906.725422][   T28] audit: type=1804 audit(1598480106.214:103197): pid=8875 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3531/bus" dev="sda1" ino=16269 res=1 errno=0
22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180), 0x0, 0x0)

[ 2906.845885][   T28] audit: type=1804 audit(1598480106.254:103198): pid=8873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3080/bus" dev="sda1" ino=16268 res=1 errno=0
22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180), 0x0, 0x0)

22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180), 0x0, 0x0)

[ 2906.957283][T28089] usb 5-1: reset high-speed USB device number 112 using dummy_hcd
[ 2906.987564][ T7975] usb 1-1: new high-speed USB device number 75 using dummy_hcd
22:15:06 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2907.217214][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2907.267355][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 2907.272997][T28089] usb 5-1: device firmware changed
[ 2907.278624][T28089] usb 5-1: USB disconnect, device number 112
[ 2907.407481][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2907.420540][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2907.430465][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2907.439843][ T7975] usb 1-1: config 0 descriptor??
[ 2907.490048][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2907.667171][T28089] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 2907.688412][ T7975] usb 1-1: USB disconnect, device number 75
[ 2907.927095][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2908.067440][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2908.080408][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2908.090027][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2908.099395][T28089] usb 5-1: config 0 descriptor??
[ 2908.140812][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2908.257055][ T7975] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2908.340584][T28089] usb 5-1: USB disconnect, device number 113
[ 2908.497105][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2908.617102][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2908.630046][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2908.639831][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2908.649018][ T7975] usb 1-1: config 0 descriptor??
[ 2908.689445][ T7975] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2908.695474][ T7975] hub: probe of 1-1:0.0 failed with error -5
[ 2908.708686][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2908.897292][T28089] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2909.137143][T28089] usb 5-1: Using ep0 maxpacket: 32
[ 2909.257030][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2909.268580][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2909.280485][T28089] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2909.289580][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2909.300023][T28089] usb 5-1: config 0 descriptor??
[ 2909.337533][T28089] hub 5-1:0.0: USB hub found
[ 2909.646973][T28089] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2909.660406][T28089] usbhid 5-1:0.0: can't add hid device: -22
[ 2909.666343][T28089] usbhid: probe of 5-1:0.0 failed with error -22
[ 2910.026979][T28089] usb 1-1: USB disconnect, device number 76
22:15:10 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:10 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:10 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2910.684186][   T28] audit: type=1804 audit(1598480110.174:103199): pid=8959 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3532/bus" dev="sda1" ino=16065 res=1 errno=0
22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2910.759133][   T28] audit: type=1804 audit(1598480110.214:103200): pid=8964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3081/bus" dev="sda1" ino=16145 res=1 errno=0
22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x14, 0x3, 0x0, [{@dev}, {@dev, 0x1}, {@loopback}]}]}}}], 0x30}}], 0x1, 0x0)

[ 2910.907047][T24525] usb 5-1: reset high-speed USB device number 114 using dummy_hcd
[ 2910.946895][T28089] usb 1-1: new high-speed USB device number 77 using dummy_hcd
22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x0)

22:15:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x0)

[ 2911.156834][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2911.197229][T24525] usb 5-1: device firmware changed
[ 2911.202625][T24525] usb 5-1: USB disconnect, device number 114
[ 2911.217021][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2911.357236][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2911.382663][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2911.398809][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2911.409722][T28089] usb 1-1: config 0 descriptor??
[ 2911.470992][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2911.576794][T24525] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 2911.670748][T28089] usb 1-1: USB disconnect, device number 77
[ 2911.816767][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2911.938751][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2911.952740][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2911.962068][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2911.973724][T24525] usb 5-1: config 0 descriptor??
[ 2912.019316][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2912.232328][T24525] usb 5-1: USB disconnect, device number 115
[ 2912.258158][T28089] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2912.536744][T28089] usb 1-1: Using ep0 maxpacket: 32
[ 2912.667222][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2912.681326][T28089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2912.690548][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2912.700466][T28089] usb 1-1: config 0 descriptor??
[ 2912.737065][T28089] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2912.743037][T28089] hub: probe of 1-1:0.0 failed with error -5
[ 2912.756556][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2912.786714][T24525] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2913.026710][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 2913.176754][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2913.187673][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2913.198303][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2913.207685][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2913.220606][T24525] usb 5-1: config 0 descriptor??
[ 2913.258497][T24525] hub 5-1:0.0: USB hub found
[ 2913.556667][T24525] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2913.566523][T24525] usbhid 5-1:0.0: can't add hid device: -22
[ 2913.572714][T24525] usbhid: probe of 5-1:0.0 failed with error -22
[ 2914.056718][T24525] usb 1-1: USB disconnect, device number 78
22:15:14 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x0)

22:15:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:14 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0)

[ 2914.605203][   T28] audit: type=1804 audit(1598480114.094:103201): pid=9049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3533/bus" dev="sda1" ino=16320 res=1 errno=0
22:15:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0)

[ 2914.679733][   T28] audit: type=1804 audit(1598480114.134:103202): pid=9047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3082/bus" dev="sda1" ino=16294 res=1 errno=0
22:15:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0)

[ 2914.816987][T24525] usb 5-1: reset high-speed USB device number 116 using dummy_hcd
[ 2914.866570][T28089] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2915.086533][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2915.106493][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2915.128832][T24525] usb 5-1: device firmware changed
[ 2915.134125][T24525] usb 5-1: USB disconnect, device number 116
[ 2915.227140][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2915.240484][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2915.250481][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2915.260222][T28089] usb 1-1: config 0 descriptor??
[ 2915.299762][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2915.499409][ T5266] usb 1-1: USB disconnect, device number 79
[ 2915.506970][T24525] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2915.776459][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2915.917257][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2915.930024][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2915.939284][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2915.948176][T24525] usb 5-1: config 0 descriptor??
[ 2915.998972][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2916.106440][ T5266] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2916.208507][T24525] usb 5-1: USB disconnect, device number 117
[ 2916.346424][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 2916.466463][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2916.479291][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2916.488349][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2916.497078][ T5266] usb 1-1: config 0 descriptor??
[ 2916.556733][ T5266] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2916.562909][ T5266] hub: probe of 1-1:0.0 failed with error -5
[ 2916.571386][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2916.796374][T24525] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2917.036369][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 2917.166376][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2917.177661][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2917.187628][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2917.196913][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2917.207101][T24525] usb 5-1: config 0 descriptor??
[ 2917.258775][T24525] hub 5-1:0.0: USB hub found
[ 2917.546315][T24525] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2917.555954][T24525] usbhid 5-1:0.0: can't add hid device: -22
[ 2917.562156][T24525] usbhid: probe of 5-1:0.0 failed with error -22
[ 2917.886409][T24525] usb 1-1: USB disconnect, device number 80
22:15:18 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:18 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0)

22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:18 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:18 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0)

22:15:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2918.600095][   T28] audit: type=1804 audit(1598480118.095:103203): pid=9138 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3534/bus" dev="sda1" ino=16268 res=1 errno=0
22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0xffffff7f, 0x0)

[ 2918.685020][   T28] audit: type=1804 audit(1598480118.095:103204): pid=9140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3083/bus" dev="sda1" ino=16265 res=1 errno=0
22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0xffffff7f, 0x0)

[ 2918.776121][   T28] audit: type=1804 audit(1598480118.235:103205): pid=9151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3108/bus" dev="sda1" ino=16263 res=1 errno=0
[ 2918.806609][ T5266] usb 5-1: reset high-speed USB device number 118 using dummy_hcd
22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0xffffff7f, 0x0)

[ 2918.846248][T24525] usb 1-1: new high-speed USB device number 81 using dummy_hcd
22:15:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2919.056739][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2919.096305][ T5266] usb 5-1: device firmware changed
[ 2919.101501][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 2919.107126][ T5266] usb 5-1: USB disconnect, device number 118
[ 2919.226256][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2919.239265][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2919.248442][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2919.257808][T24525] usb 1-1: config 0 descriptor??
[ 2919.312196][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2919.486177][ T5266] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2919.509633][T23800] usb 1-1: USB disconnect, device number 81
[ 2919.726166][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2919.846917][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2919.859744][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2919.869465][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2919.878276][ T5266] usb 5-1: config 0 descriptor??
[ 2919.920202][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2920.066124][T23800] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2920.119685][ T5266] usb 5-1: USB disconnect, device number 119
[ 2920.306099][T23800] usb 1-1: Using ep0 maxpacket: 32
[ 2920.446153][T23800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2920.459046][T23800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2920.468767][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2920.478903][T23800] usb 1-1: config 0 descriptor??
[ 2920.538408][T23800] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2920.544339][T23800] hub: probe of 1-1:0.0 failed with error -5
[ 2920.557239][T23800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2920.716151][ T5266] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2920.977062][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2921.106410][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2921.117351][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2921.127376][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2921.136657][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2921.145307][ T5266] usb 5-1: config 0 descriptor??
[ 2921.188395][ T5266] hub 5-1:0.0: USB hub found
[ 2921.486013][ T5266] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2921.495883][ T5266] usbhid 5-1:0.0: can't add hid device: -22
[ 2921.502094][ T5266] usbhid: probe of 5-1:0.0 failed with error -22
[ 2921.866171][ T5177] usb 1-1: USB disconnect, device number 82
22:15:21 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:21 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:21 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2922.533443][   T28] audit: type=1804 audit(1598480122.025:103206): pid=9229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3109/bus" dev="sda1" ino=16316 res=1 errno=0
[ 2922.560948][   T28] audit: type=1804 audit(1598480122.025:103207): pid=9227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3084/bus" dev="sda1" ino=16320 res=1 errno=0
[ 2922.594643][   T28] audit: type=1804 audit(1598480122.085:103208): pid=9230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3535/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2922.766136][ T5177] usb 5-1: reset high-speed USB device number 120 using dummy_hcd
[ 2922.806030][ T5266] usb 1-1: new high-speed USB device number 83 using dummy_hcd
22:15:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2923.015903][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 2923.056051][ T5177] usb 5-1: device firmware changed
[ 2923.061353][ T5177] usb 5-1: USB disconnect, device number 120
[ 2923.086345][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2923.226125][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2923.257656][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2923.267632][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2923.278047][ T5266] usb 1-1: config 0 descriptor??
22:15:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2923.348302][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:15:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:22 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

[ 2923.425866][ T5177] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2923.438143][   T28] audit: type=1804 audit(1598480122.935:103209): pid=9259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3085/bus" dev="sda1" ino=15909 res=1 errno=0
[ 2923.497950][   T28] audit: type=1804 audit(1598480122.995:103210): pid=9262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3536/bus" dev="sda1" ino=16167 res=1 errno=0
[ 2923.549753][ T5266] usb 1-1: USB disconnect, device number 83
[ 2923.675825][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 2923.796159][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2923.809622][ T5177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2923.819333][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2923.829033][ T5177] usb 5-1: config 0 descriptor??
[ 2923.870154][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2924.068915][T27964] usb 5-1: USB disconnect, device number 121
[ 2924.155819][ T5266] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2924.405780][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 2924.535855][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2924.548655][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2924.557751][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2924.568328][ T5266] usb 1-1: config 0 descriptor??
[ 2924.606205][ T5266] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2924.612127][ T5266] hub: probe of 1-1:0.0 failed with error -5
[ 2924.624896][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2924.655993][T27964] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2924.935739][T27964] usb 5-1: Using ep0 maxpacket: 32
[ 2925.096174][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2925.107160][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2925.117572][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2925.126913][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2925.138731][T27964] usb 5-1: config 0 descriptor??
[ 2925.196108][T27964] hub 5-1:0.0: USB hub found
[ 2925.505700][T27964] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2925.515495][T27964] usbhid 5-1:0.0: can't add hid device: -22
[ 2925.521610][T27964] usbhid: probe of 5-1:0.0 failed with error -22
[ 2925.935804][ T5266] usb 1-1: USB disconnect, device number 84
22:15:25 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:25 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:25 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2926.556550][   T28] audit: type=1804 audit(1598480126.055:103211): pid=9311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3537/bus" dev="sda1" ino=16316 res=1 errno=0
[ 2926.605256][   T28] audit: type=1804 audit(1598480126.055:103212): pid=9319 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3110/bus" dev="sda1" ino=16185 res=1 errno=0
[ 2926.706752][   T28] audit: type=1804 audit(1598480126.085:103213): pid=9326 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3086/bus" dev="sda1" ino=16274 res=1 errno=0
[ 2926.776041][ T5177] usb 5-1: reset high-speed USB device number 122 using dummy_hcd
[ 2926.815735][ T7975] usb 1-1: new high-speed USB device number 85 using dummy_hcd
22:15:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getpid()
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2927.025614][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 2927.065959][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 2927.071356][ T5177] usb 5-1: device firmware changed
[ 2927.078938][ T5177] usb 5-1: USB disconnect, device number 122
22:15:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2927.195744][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2927.225593][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2927.254015][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2927.283619][ T7975] usb 1-1: config 0 descriptor??
22:15:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2927.347778][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:15:26 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2927.465634][ T5177] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2927.473792][   T28] audit: type=1804 audit(1598480126.965:103214): pid=9354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3538/bus" dev="sda1" ino=15973 res=1 errno=0
[ 2927.548460][ T7975] usb 1-1: USB disconnect, device number 85
[ 2927.565634][   T28] audit: type=1804 audit(1598480127.055:103215): pid=9359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3087/bus" dev="sda1" ino=16185 res=1 errno=0
[ 2927.735537][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 2927.855900][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2927.871639][ T5177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2927.881322][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2927.892148][ T5177] usb 5-1: config 0 descriptor??
[ 2927.938791][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2928.115548][ T7975] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2928.138819][ T5177] usb 5-1: USB disconnect, device number 123
[ 2928.355472][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2928.475549][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2928.488376][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2928.498325][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2928.508140][ T7975] usb 1-1: config 0 descriptor??
[ 2928.547739][ T7975] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2928.553669][ T7975] hub: probe of 1-1:0.0 failed with error -5
[ 2928.565068][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2928.695522][ T5177] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2928.935433][ T5177] usb 5-1: Using ep0 maxpacket: 32
[ 2929.056002][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2929.066892][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2929.076647][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2929.085697][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2929.094705][ T5177] usb 5-1: config 0 descriptor??
[ 2929.135777][ T5177] hub 5-1:0.0: USB hub found
[ 2929.435390][ T5177] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2929.446023][ T5177] usbhid 5-1:0.0: can't add hid device: -22
[ 2929.452076][ T5177] usbhid: probe of 5-1:0.0 failed with error -22
[ 2929.875503][ T5266] usb 1-1: USB disconnect, device number 86
22:15:29 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:29 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:29 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2930.489234][   T28] audit: type=1804 audit(1598480129.986:103216): pid=9412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3539/bus" dev="sda1" ino=16265 res=1 errno=0
[ 2930.550790][   T28] audit: type=1804 audit(1598480130.026:103217): pid=9417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3111/bus" dev="sda1" ino=16262 res=1 errno=0
[ 2930.643570][   T28] audit: type=1804 audit(1598480130.036:103218): pid=9419 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3088/bus" dev="sda1" ino=16261 res=1 errno=0
[ 2930.685761][ T7975] usb 5-1: reset high-speed USB device number 124 using dummy_hcd
22:15:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2930.755404][ T5266] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2930.935415][ T7975] usb 5-1: Using ep0 maxpacket: 16
22:15:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2930.975645][ T7975] usb 5-1: device firmware changed
[ 2930.981019][ T7975] usb 5-1: USB disconnect, device number 124
[ 2931.005281][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2931.135609][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2931.170203][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2931.179399][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2931.188551][ T5266] usb 1-1: config 0 descriptor??
22:15:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2931.248436][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:15:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2931.335249][ T7975] usb 5-1: new high-speed USB device number 125 using dummy_hcd
22:15:30 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

[ 2931.437856][ T5177] usb 1-1: USB disconnect, device number 87
[ 2931.477227][   T28] audit: type=1804 audit(1598480130.976:103219): pid=9454 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3540/bus" dev="sda1" ino=16294 res=1 errno=0
[ 2931.563796][   T28] audit: type=1804 audit(1598480131.056:103220): pid=9457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3089/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2931.575295][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 2931.715284][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2931.728276][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2931.738178][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2931.748320][ T7975] usb 5-1: config 0 descriptor??
[ 2931.798413][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2931.995385][ T5177] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2932.006311][ T5266] usb 5-1: USB disconnect, device number 125
[ 2932.245166][ T5177] usb 1-1: Using ep0 maxpacket: 32
[ 2932.366256][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2932.387915][ T5177] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2932.399705][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2932.409173][ T5177] usb 1-1: config 0 descriptor??
[ 2932.447578][ T5177] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2932.453609][ T5177] hub: probe of 1-1:0.0 failed with error -5
[ 2932.466900][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2932.645198][ T5266] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2932.915242][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2933.065162][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2933.076348][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2933.086685][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2933.096193][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2933.106268][ T5266] usb 5-1: config 0 descriptor??
[ 2933.147451][ T5266] hub 5-1:0.0: USB hub found
[ 2933.445085][ T5266] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2933.455446][ T5266] usbhid 5-1:0.0: can't add hid device: -22
[ 2933.461377][ T5266] usbhid: probe of 5-1:0.0 failed with error -22
[ 2933.775162][T28089] usb 1-1: USB disconnect, device number 88
22:15:33 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:33 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:33 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:33 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

[ 2934.485234][   T28] audit: type=1804 audit(1598480133.986:103221): pid=9507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3113/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2934.514251][   T28] audit: type=1804 audit(1598480134.006:103222): pid=9508 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3541/bus" dev="sda1" ino=16265 res=1 errno=0
[ 2934.621677][   T28] audit: type=1804 audit(1598480134.046:103223): pid=9516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3090/bus" dev="sda1" ino=16262 res=1 errno=0
22:15:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2934.715436][T28089] usb 5-1: reset high-speed USB device number 126 using dummy_hcd
[ 2934.745490][T23800] usb 1-1: new high-speed USB device number 89 using dummy_hcd
22:15:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2934.954936][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2934.996063][T28089] usb 5-1: device firmware changed
[ 2935.001825][T28089] usb 5-1: USB disconnect, device number 126
[ 2935.035674][T23800] usb 1-1: Using ep0 maxpacket: 16
22:15:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2935.175888][T23800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2935.203471][T23800] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2935.234642][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2935.250839][T23800] usb 1-1: config 0 descriptor??
22:15:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:34 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

[ 2935.300232][T23800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:15:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2935.366617][T28089] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 2935.415981][   T28] audit: type=1804 audit(1598480134.916:103224): pid=9541 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3542/bus" dev="sda1" ino=16336 res=1 errno=0
[ 2935.487103][   T28] audit: type=1804 audit(1598480134.956:103225): pid=9544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3091/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2935.515406][ T5177] usb 1-1: USB disconnect, device number 89
[ 2935.604895][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2935.724969][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2935.738067][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2935.748931][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2935.758298][T28089] usb 5-1: config 0 descriptor??
[ 2935.807990][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2936.007565][T23800] usb 5-1: USB disconnect, device number 127
[ 2936.084890][ T5177] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2936.334849][ T5177] usb 1-1: Using ep0 maxpacket: 32
[ 2936.455024][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2936.467842][ T5177] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2936.477203][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2936.487800][ T5177] usb 1-1: config 0 descriptor??
[ 2936.525195][ T5177] hub 1-1:0.0: bad descriptor, ignoring hub
[ 2936.531216][ T5177] hub: probe of 1-1:0.0 failed with error -5
[ 2936.541631][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2936.584844][T23800] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2936.834838][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 2936.955050][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2936.965946][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2936.976009][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2936.985095][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2936.993749][T23800] usb 5-1: config 0 descriptor??
[ 2937.047673][T23800] hub 5-1:0.0: USB hub found
[ 2937.364787][T23800] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2937.378350][T23800] usbhid 5-1:0.0: can't add hid device: -22
[ 2937.384266][T23800] usbhid: probe of 5-1:0.0 failed with error -22
[ 2937.854899][ T5177] usb 1-1: USB disconnect, device number 90
22:15:37 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:37 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:37 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, 0x0, 0x8080ffffff7e)

22:15:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:37 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2938.426324][   T28] audit: type=1804 audit(1598480137.926:103226): pid=9601 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3114/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2938.494276][   T28] audit: type=1804 audit(1598480137.956:103227): pid=9607 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3092/bus" dev="sda1" ino=16262 res=1 errno=0
22:15:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2938.590631][   T28] audit: type=1804 audit(1598480137.966:103228): pid=9599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3543/bus" dev="sda1" ino=16268 res=1 errno=0
[ 2938.624928][T24525] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
22:15:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2938.664757][T28089] usb 1-1: new high-speed USB device number 91 using dummy_hcd
22:15:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:38 executing program 3:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:38 executing program 3:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:38 executing program 3:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2938.904640][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 2938.906216][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2938.954992][T24525] usb 5-1: device firmware changed
[ 2938.960411][T24525] usb 5-1: USB disconnect, device number 2
[ 2939.024960][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2939.038107][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2939.048942][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2939.060841][T28089] usb 1-1: config 0 descriptor??
[ 2939.107647][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2939.317440][ T5266] usb 1-1: USB disconnect, device number 91
[ 2939.329998][T24525] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2939.584580][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2939.714611][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2939.727388][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2939.736926][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2939.745801][T24525] usb 5-1: config 0 descriptor??
[ 2939.799381][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2939.924555][ T5266] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 2939.996611][ T7975] usb 5-1: USB disconnect, device number 3
[ 2940.184537][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 2940.314783][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2940.326652][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2940.336709][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2940.346658][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2940.358326][ T5266] usb 1-1: config 0 descriptor??
[ 2940.404833][ T5266] hub 1-1:0.0: USB hub found
[ 2940.464538][T28089] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2940.704490][T28089] usb 5-1: Using ep0 maxpacket: 32
[ 2940.724503][ T5266] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2940.738252][ T5266] usbhid 1-1:0.0: can't add hid device: -22
[ 2940.744156][ T5266] usbhid: probe of 1-1:0.0 failed with error -22
[ 2940.824957][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2940.835988][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2940.846006][T28089] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2940.855206][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2940.866083][T28089] usb 5-1: config 0 descriptor??
[ 2940.906655][T28089] hub 5-1:0.0: USB hub found
[ 2941.124485][T28089] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2941.135231][T28089] usbhid 5-1:0.0: can't add hid device: -22
[ 2941.141231][T28089] usbhid: probe of 5-1:0.0 failed with error -22
[ 2941.825366][ T5266] usb 1-1: USB disconnect, device number 92
22:15:41 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:41 executing program 3:
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:41 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, 0x0, 0x8080ffffff7e)

22:15:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:41 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x8080ffffff7e)

22:15:41 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2942.376762][   T28] audit: type=1804 audit(1598480141.877:103229): pid=9692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3544/bus" dev="sda1" ino=16069 res=1 errno=0
[ 2942.438742][   T28] audit: type=1804 audit(1598480141.907:103230): pid=9691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3115/bus" dev="sda1" ino=16017 res=1 errno=0
22:15:42 executing program 3:
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2942.482332][   T28] audit: type=1804 audit(1598480141.977:103231): pid=9701 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3093/bus" dev="sda1" ino=16133 res=1 errno=0
22:15:42 executing program 3:
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2942.624875][ T5266] usb 5-1: reset high-speed USB device number 4 using dummy_hcd
[ 2942.674749][T28089] usb 1-1: new high-speed USB device number 93 using dummy_hcd
22:15:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2942.884378][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2942.924849][ T5266] usb 5-1: device firmware changed
[ 2942.930155][ T5266] usb 5-1: USB disconnect, device number 4
[ 2942.944306][T28089] usb 1-1: Using ep0 maxpacket: 16
22:15:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2943.074447][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2943.094422][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2943.106048][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2943.117067][T28089] usb 1-1: config 0 descriptor??
[ 2943.177139][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2943.294306][ T5266] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 2943.378739][T24525] usb 1-1: USB disconnect, device number 93
[ 2943.534273][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2943.654295][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2943.667247][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2943.677219][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2943.686434][ T5266] usb 5-1: config 0 descriptor??
[ 2943.726580][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2943.925984][ T5266] usb 5-1: USB disconnect, device number 5
[ 2943.934382][T24525] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 2944.184254][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 2944.304290][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2944.315228][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2944.325303][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2944.334571][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2944.343353][T24525] usb 1-1: config 0 descriptor??
[ 2944.387030][T24525] hub 1-1:0.0: USB hub found
[ 2944.398694][ T5266] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 2944.644240][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2944.684226][T24525] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2944.697221][T24525] usbhid 1-1:0.0: can't add hid device: -22
[ 2944.703129][T24525] usbhid: probe of 1-1:0.0 failed with error -22
[ 2944.764239][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2944.775186][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2944.785531][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2944.794898][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2944.807773][ T5266] usb 5-1: config 0 descriptor??
[ 2944.844600][ T5266] hub 5-1:0.0: USB hub found
[ 2945.064190][ T5266] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2945.074483][ T5266] usbhid 5-1:0.0: can't add hid device: -22
[ 2945.080449][ T5266] usbhid: probe of 5-1:0.0 failed with error -22
[ 2945.784250][T24525] usb 1-1: USB disconnect, device number 94
22:15:45 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:45 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, 0x0, 0x8080ffffff7e)

22:15:45 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

22:15:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:45 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2946.371352][   T28] audit: type=1804 audit(1598480145.867:103232): pid=9783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3545/bus" dev="sda1" ino=16294 res=1 errno=0
[ 2946.439748][   T28] audit: type=1804 audit(1598480145.897:103233): pid=9782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3116/bus" dev="sda1" ino=16288 res=1 errno=0
[ 2946.554253][ T5266] usb 5-1: reset high-speed USB device number 6 using dummy_hcd
[ 2946.612521][   T28] audit: type=1804 audit(1598480145.917:103234): pid=9789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3094/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2946.614073][T24525] usb 1-1: new high-speed USB device number 95 using dummy_hcd
22:15:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2946.804269][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2946.844033][ T5266] usb 5-1: device firmware changed
[ 2946.849619][ T5266] usb 5-1: USB disconnect, device number 6
22:15:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2946.974027][T24525] usb 1-1: Using ep0 maxpacket: 16
22:15:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2947.094094][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2947.121759][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2947.164836][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2947.185055][T24525] usb 1-1: config 0 descriptor??
22:15:46 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x0)

22:15:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:46 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

[ 2947.216136][ T5266] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 2947.238350][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2947.340312][   T28] audit: type=1804 audit(1598480146.837:103235): pid=9812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3546/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2947.437822][T27964] usb 1-1: USB disconnect, device number 95
[ 2947.477780][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2947.594403][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2947.607297][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2947.616653][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2947.627046][ T5266] usb 5-1: config 0 descriptor??
[ 2947.668022][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2947.868427][ T5266] usb 5-1: USB disconnect, device number 7
[ 2948.003939][T27964] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 2948.243929][T27964] usb 1-1: Using ep0 maxpacket: 32
[ 2948.364123][T27964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2948.375017][T27964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2948.385080][T27964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2948.394228][T27964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2948.404287][T27964] usb 1-1: config 0 descriptor??
[ 2948.424922][ T5266] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 2948.446434][T27964] hub 1-1:0.0: USB hub found
[ 2948.663954][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2948.744330][T27964] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2948.757971][T27964] usbhid 1-1:0.0: can't add hid device: -22
[ 2948.763913][T27964] usbhid: probe of 1-1:0.0 failed with error -22
[ 2948.793904][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2948.805147][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2948.815472][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2948.824842][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2948.835000][ T5266] usb 5-1: config 0 descriptor??
[ 2948.876479][ T5266] hub 5-1:0.0: USB hub found
[ 2949.093861][ T5266] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2949.104860][ T5266] usbhid 5-1:0.0: can't add hid device: -22
[ 2949.110833][ T5266] usbhid: probe of 5-1:0.0 failed with error -22
[ 2949.853928][ T7975] usb 1-1: USB disconnect, device number 96
22:15:49 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:49 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

22:15:49 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x0)

22:15:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2950.371211][   T28] audit: type=1804 audit(1598480149.867:103236): pid=9873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3547/bus" dev="sda1" ino=16268 res=1 errno=0
[ 2950.423105][   T28] audit: type=1804 audit(1598480149.917:103237): pid=9879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3095/bus" dev="sda1" ino=16266 res=1 errno=0
22:15:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:50 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

22:15:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2950.614142][ T5266] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[ 2950.633741][T27964] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2950.863730][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2950.914257][T27964] usb 1-1: Using ep0 maxpacket: 16
[ 2950.921621][ T5266] usb 5-1: device firmware changed
[ 2950.929935][ T5266] usb 5-1: USB disconnect, device number 8
[ 2951.043744][T27964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2951.056852][T27964] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2951.066789][T27964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2951.078493][T27964] usb 1-1: config 0 descriptor??
[ 2951.126542][T27964] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2951.303750][ T5266] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 2951.327807][T27964] usb 1-1: USB disconnect, device number 97
[ 2951.583741][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 2951.733878][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2951.746765][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2951.756439][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2951.765646][ T5266] usb 5-1: config 0 descriptor??
[ 2951.808613][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2951.903660][T27964] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 2952.005666][ T7975] usb 5-1: USB disconnect, device number 9
[ 2952.163617][T27964] usb 1-1: Using ep0 maxpacket: 32
[ 2952.313615][T27964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2952.324593][T27964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2952.334638][T27964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2952.343731][T27964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2952.352515][T27964] usb 1-1: config 0 descriptor??
[ 2952.396107][T27964] hub 1-1:0.0: USB hub found
[ 2952.473565][ T7975] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 2952.693581][T27964] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2952.706705][T27964] usbhid 1-1:0.0: can't add hid device: -22
[ 2952.712619][T27964] usbhid: probe of 1-1:0.0 failed with error -22
[ 2952.724870][ T7975] usb 5-1: Using ep0 maxpacket: 32
[ 2952.853666][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2952.865588][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2952.875957][ T7975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2952.885361][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2952.894250][ T7975] usb 5-1: config 0 descriptor??
[ 2952.957189][ T7975] hub 5-1:0.0: USB hub found
[ 2953.173615][ T7975] hub 5-1:0.0: 1 port detected
[ 2953.803551][ T7975] usb 1-1: USB disconnect, device number 98
[ 2953.943520][ T5177] hub 5-1:0.0: activate --> -90
[ 2954.263529][ T5177] usb 5-1: USB disconnect, device number 10
22:15:54 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:54 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffb)

22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:54 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)
sendfile(r0, r0, &(0x7f0000000100), 0x0)

22:15:54 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2954.700429][   T28] audit: type=1804 audit(1598480154.198:103238): pid=9962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3548/bus" dev="sda1" ino=16288 res=1 errno=0
22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2954.731608][   T28] audit: type=1804 audit(1598480154.228:103239): pid=9963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3120/bus" dev="sda1" ino=16268 res=1 errno=0
22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2954.791744][   T28] audit: type=1804 audit(1598480154.258:103240): pid=9966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3096/bus" dev="sda1" ino=16262 res=1 errno=0
22:15:54 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffb)

22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2954.930618][   T28] audit: type=1804 audit(1598480154.428:103241): pid=9980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3121/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2954.963375][ T7975] usb 1-1: new high-speed USB device number 99 using dummy_hcd
22:15:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

[ 2955.003389][T27964] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2955.233409][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 2955.253427][T27964] usb 5-1: Using ep0 maxpacket: 16
[ 2955.364228][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2955.376645][T27964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2955.377589][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2955.391817][T27964] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2955.401194][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2955.410077][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2955.419415][ T7975] usb 1-1: config 0 descriptor??
[ 2955.432309][T27964] usb 5-1: config 0 descriptor??
[ 2955.477249][T27964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2955.485722][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2955.675602][T27964] usb 5-1: USB disconnect, device number 11
[ 2955.687093][ T5266] usb 1-1: USB disconnect, device number 99
[ 2956.233265][T27964] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2956.243366][ T5266] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 2956.483285][T27964] usb 5-1: Using ep0 maxpacket: 32
[ 2956.489029][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 2956.613586][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2956.624543][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2956.634603][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2956.645466][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2956.654561][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2956.664436][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2956.672709][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2956.682155][T27964] usb 5-1: config 0 descriptor??
[ 2956.687165][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2956.698148][ T5266] usb 1-1: config 0 descriptor??
[ 2956.723574][T27964] hub 5-1:0.0: USB hub found
[ 2956.733760][ T5266] hub 1-1:0.0: USB hub found
[ 2956.943315][T27964] hub 5-1:0.0: 1 port detected
[ 2957.033251][ T5266] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2957.043668][ T5266] usbhid 1-1:0.0: can't add hid device: -22
[ 2957.049598][ T5266] usbhid: probe of 1-1:0.0 failed with error -22
[ 2957.753180][ T5266] hub 5-1:0.0: activate --> -90
[ 2958.073392][T23800] usb 5-1: USB disconnect, device number 12
[ 2958.153212][ T5266] usb 1-1: USB disconnect, device number 100
22:15:57 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:15:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0)

22:15:57 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffb)

22:15:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:15:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:15:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[ 2958.518520][   T28] audit: type=1804 audit(1598480158.018:103242): pid=10049 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3122/bus" dev="sda1" ino=16268 res=1 errno=0
[ 2958.569319][   T28] audit: type=1804 audit(1598480158.058:103243): pid=10059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3097/bus" dev="sda1" ino=16259 res=1 errno=0
22:15:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

22:15:58 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

[ 2958.620985][   T28] audit: type=1804 audit(1598480158.058:103244): pid=10058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3549/bus" dev="sda1" ino=16266 res=1 errno=0
22:15:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

22:15:58 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

[ 2958.720231][   T28] audit: type=1804 audit(1598480158.218:103245): pid=10067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3123/bus" dev="sda1" ino=16265 res=1 errno=0
22:15:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[ 2958.773972][ T5266] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2958.784198][T23800] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2958.834741][   T28] audit: type=1804 audit(1598480158.338:103246): pid=10073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3124/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2959.033237][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 2959.038582][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2959.163110][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2959.176176][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2959.189086][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2959.198349][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2959.207916][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2959.216154][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2959.226864][ T5266] usb 1-1: config 0 descriptor??
[ 2959.237231][T23800] usb 5-1: config 0 descriptor??
[ 2959.266332][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2959.288996][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2959.464824][ T7975] usb 1-1: USB disconnect, device number 101
[ 2959.484783][T23800] usb 5-1: USB disconnect, device number 13
[ 2959.952992][T23800] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2959.953000][ T7975] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 2960.192976][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 2960.203040][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 2960.323018][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2960.324423][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2960.335578][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2960.345090][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2960.356639][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2960.364675][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2960.375390][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2960.382661][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2960.394554][ T7975] usb 1-1: config 0 descriptor??
[ 2960.413054][T23800] usb 5-1: config 0 descriptor??
[ 2960.443423][ T7975] hub 1-1:0.0: USB hub found
[ 2960.453375][T23800] hub 5-1:0.0: USB hub found
[ 2960.672953][T23800] hub 5-1:0.0: 1 port detected
[ 2960.752943][ T7975] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2960.762841][ T7975] usbhid 1-1:0.0: can't add hid device: -22
[ 2960.769072][ T7975] usbhid: probe of 1-1:0.0 failed with error -22
[ 2961.442990][T23800] hub 5-1:0.0: activate --> -90
[ 2961.772956][ T7975] usb 5-1: USB disconnect, device number 14
[ 2961.872992][ T5177] usb 1-1: USB disconnect, device number 102
22:16:01 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:01 executing program 3:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

22:16:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:01 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

22:16:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:01 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:01 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2962.191684][   T28] audit: type=1804 audit(1598480161.688:103247): pid=10136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3573/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2962.237550][   T28] audit: type=1804 audit(1598480161.738:103248): pid=10144 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3550/bus" dev="sda1" ino=16371 res=1 errno=0
22:16:01 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

[ 2962.307525][   T28] audit: type=1804 audit(1598480161.768:103249): pid=10140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3125/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2962.335911][   T28] audit: type=1804 audit(1598480161.788:103250): pid=10150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3098/bus" dev="sda1" ino=16261 res=1 errno=0
[ 2962.399251][   T28] audit: type=1804 audit(1598480161.898:103251): pid=10157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3126/bus" dev="sda1" ino=16365 res=1 errno=0
22:16:02 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

[ 2962.483020][T23800] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2962.512810][ T5177] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 2962.573344][ T7975] usb 4-1: new high-speed USB device number 57 using dummy_hcd
22:16:02 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x8400fffffffb)

[ 2962.722763][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 2962.752776][ T5177] usb 1-1: Using ep0 maxpacket: 16
22:16:02 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2962.832793][ T7975] usb 4-1: Using ep0 maxpacket: 16
[ 2962.843569][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2962.857821][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2962.867929][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2962.879132][T23800] usb 5-1: config 0 descriptor??
[ 2962.883065][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2962.899863][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2962.909960][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2962.920271][ T5177] usb 1-1: config 0 descriptor??
22:16:02 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2962.927913][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2962.976044][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2962.994272][ T7975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2963.016128][ T7975] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2963.030022][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2963.040432][ T7975] usb 4-1: config 0 descriptor??
[ 2963.085530][ T7975] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2963.124685][ T5266] usb 5-1: USB disconnect, device number 15
[ 2963.164432][ T5177] usb 1-1: USB disconnect, device number 103
[ 2963.328242][ T7975] usb 4-1: USB disconnect, device number 57
[ 2963.702703][ T5266] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2963.722784][ T5177] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 2963.882708][ T7975] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2963.962693][ T5177] usb 1-1: Using ep0 maxpacket: 32
[ 2963.962711][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 2964.092767][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2964.093560][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2964.105464][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2964.114840][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2964.125671][ T5177] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2964.134287][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2964.145379][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2964.152376][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2964.160999][ T7975] usb 4-1: Using ep0 maxpacket: 32
[ 2964.175011][ T5266] usb 5-1: config 0 descriptor??
[ 2964.176361][ T5177] usb 1-1: config 0 descriptor??
[ 2964.213131][ T5266] hub 5-1:0.0: USB hub found
[ 2964.243450][ T5177] hub 1-1:0.0: USB hub found
[ 2964.302701][ T7975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2964.313634][ T7975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2964.324257][ T7975] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2964.333643][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2964.346148][ T7975] usb 4-1: config 0 descriptor??
[ 2964.395517][ T7975] hub 4-1:0.0: USB hub found
[ 2964.432667][ T5266] hub 5-1:0.0: 1 port detected
[ 2964.562658][ T5177] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2964.573234][ T5177] usbhid 1-1:0.0: can't add hid device: -22
[ 2964.579167][ T5177] usbhid: probe of 1-1:0.0 failed with error -22
[ 2964.602667][ T7975] hub 4-1:0.0: 1 port detected
[ 2965.242715][ T5266] hub 5-1:0.0: activate --> -90
[ 2965.412619][ T7975] hub 4-1:0.0: activate --> -90
[ 2965.562665][ T5266] usb 5-1: USB disconnect, device number 16
[ 2965.682643][ T7975] usb 1-1: USB disconnect, device number 104
[ 2965.732698][ T5266] usb 4-1: USB disconnect, device number 58
22:16:05 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:05 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

22:16:05 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2965.989354][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2965.989367][   T28] audit: type=1804 audit(1598480165.488:103256): pid=10251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3131/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2966.053616][   T28] audit: type=1804 audit(1598480165.558:103257): pid=10263 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3551/bus" dev="sda1" ino=16263 res=1 errno=0
22:16:05 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:05 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2966.089159][   T28] audit: type=1804 audit(1598480165.588:103258): pid=10264 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3099/bus" dev="sda1" ino=16261 res=1 errno=0
[ 2966.208464][   T28] audit: type=1804 audit(1598480165.708:103259): pid=10270 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3132/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2966.272519][ T5266] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 2966.302550][T15202] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2966.452529][T23800] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2966.522506][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2966.542534][T15202] usb 5-1: Using ep0 maxpacket: 16
[ 2966.643051][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2966.656733][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2966.666429][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2966.680512][ T5266] usb 1-1: config 0 descriptor??
[ 2966.682782][T15202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2966.702890][T23800] usb 4-1: Using ep0 maxpacket: 16
[ 2966.727816][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2966.728980][T15202] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2966.781497][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2966.797268][T15202] usb 5-1: config 0 descriptor??
[ 2966.824255][T23800] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2966.837277][T23800] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2966.848262][T23800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2966.857612][T23800] usb 4-1: config 0 descriptor??
22:16:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2966.874708][T15202] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2966.904932][T23800] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
22:16:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2966.924216][T23800] usb 1-1: USB disconnect, device number 105
[ 2967.041033][   T28] audit: type=1804 audit(1598480166.539:103260): pid=10297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3100/bus" dev="sda1" ino=16320 res=1 errno=0
[ 2967.078162][T15202] usb 5-1: USB disconnect, device number 17
[ 2967.119007][ T5177] usb 4-1: USB disconnect, device number 59
22:16:06 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2967.252471][ T5266] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2967.419216][   T28] audit: type=1804 audit(1598480166.919:103261): pid=10317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3133/bus" dev="sda1" ino=16328 res=1 errno=0
[ 2967.492533][ T5266] usb 6-1: Using ep0 maxpacket: 16
[ 2967.512579][T23800] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 2967.612419][ T5266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2967.633420][ T5266] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2967.642823][ T5266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2967.653889][ T5266] usb 6-1: config 0 descriptor??
[ 2967.697828][ T5266] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2967.722455][T15202] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2967.730153][ T5177] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2967.762986][T23800] usb 1-1: Using ep0 maxpacket: 32
22:16:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2967.882786][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2967.894676][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2967.908979][T28089] usb 6-1: USB disconnect, device number 14
[ 2967.909334][T23800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2967.954295][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2967.975562][T23800] usb 1-1: config 0 descriptor??
[ 2967.994365][ T5177] usb 4-1: Using ep0 maxpacket: 32
[ 2967.994414][T15202] usb 5-1: Using ep0 maxpacket: 32
[ 2968.015020][T23800] hub 1-1:0.0: USB hub found
[ 2968.022700][   T28] audit: type=1804 audit(1598480167.529:103262): pid=10333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3101/bus" dev="sda1" ino=16320 res=1 errno=0
[ 2968.152744][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2968.163741][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2968.180133][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2968.190411][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2968.200635][ T5177] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2968.218073][T15202] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2968.238239][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2968.247204][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2968.270694][ T5177] usb 4-1: config 0 descriptor??
[ 2968.280061][T15202] usb 5-1: config 0 descriptor??
[ 2968.313364][T23800] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2968.329151][T23800] usbhid 1-1:0.0: can't add hid device: -22
[ 2968.342752][T15202] hub 5-1:0.0: USB hub found
[ 2968.347704][ T5177] hub 4-1:0.0: USB hub found
[ 2968.375107][T23800] usbhid: probe of 1-1:0.0 failed with error -22
[ 2968.552400][T15202] hub 5-1:0.0: 1 port detected
[ 2968.557206][ T5177] hub 4-1:0.0: 1 port detected
[ 2968.561972][T28089] usb 6-1: new high-speed USB device number 15 using dummy_hcd
22:16:08 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2968.832410][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 2968.906487][   T28] audit: type=1804 audit(1598480168.409:103263): pid=10353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3134/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2968.982355][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2968.994890][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2969.005536][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2969.016932][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2969.026598][T28089] usb 6-1: config 0 descriptor??
[ 2969.074289][T28089] hub 6-1:0.0: USB hub found
[ 2969.383032][T28089] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2969.395458][T28089] usbhid 6-1:0.0: can't add hid device: -22
[ 2969.401506][T28089] usbhid: probe of 6-1:0.0 failed with error -22
[ 2969.413809][T15202] hub 4-1:0.0: activate --> -90
[ 2969.418695][ T5177] hub 5-1:0.0: activate --> -90
[ 2969.444143][ T7975] usb 1-1: USB disconnect, device number 106
[ 2969.732359][T15202] usb 5-1: USB disconnect, device number 18
[ 2969.738391][ T5177] usb 4-1: USB disconnect, device number 60
22:16:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:09 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:09 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:09 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2970.281353][   T28] audit: type=1804 audit(1598480169.779:103264): pid=10403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3102/bus" dev="sda1" ino=15987 res=1 errno=0
22:16:09 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2970.453592][T15202] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2970.462938][ T5266] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 2970.474010][ T5177] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2970.652357][T24524] usb 6-1: reset high-speed USB device number 15 using dummy_hcd
[ 2970.702196][T15202] usb 5-1: Using ep0 maxpacket: 16
[ 2970.712547][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2970.732357][ T5177] usb 4-1: Using ep0 maxpacket: 16
22:16:10 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2970.832299][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2970.833185][T15202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2970.852424][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2970.858939][ T5177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2970.883251][ T5177] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2970.887445][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2970.893697][T15202] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2970.900440][T24524] usb 6-1: Using ep0 maxpacket: 16
[ 2970.913990][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2970.923490][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2970.924607][ T5266] usb 1-1: config 0 descriptor??
[ 2970.932980][ T5177] usb 4-1: config 0 descriptor??
[ 2970.947979][T15202] usb 5-1: config 0 descriptor??
[ 2970.992468][T24524] usb 6-1: device firmware changed
[ 2970.995996][T15202] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2970.997673][T24524] usb 6-1: USB disconnect, device number 15
[ 2971.007445][ T5177] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2971.074418][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:16:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(0x0, 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2971.196085][ T5177] usb 5-1: USB disconnect, device number 19
[ 2971.222135][T15202] usb 4-1: USB disconnect, device number 61
[ 2971.248425][   T28] audit: type=1804 audit(1598480170.749:103265): pid=10444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3103/bus" dev="sda1" ino=15987 res=1 errno=0
[ 2971.282677][ T5266] usb 1-1: USB disconnect, device number 107
[ 2971.322698][   T28] audit: type=1804 audit(1598480170.819:103266): pid=10450 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3135/bus" dev="sda1" ino=16103 res=1 errno=0
[ 2971.432946][T24524] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2971.672074][T24524] usb 6-1: Using ep0 maxpacket: 16
[ 2971.772105][ T5177] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 2971.792582][T24524] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2971.805575][T24524] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2971.815109][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2971.822457][T15202] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2971.825853][T24524] usb 6-1: config 0 descriptor??
[ 2971.842061][ T5266] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 2971.885156][T24524] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2972.032103][ T5177] usb 5-1: Using ep0 maxpacket: 32
22:16:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(0x0, 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2972.062498][T15202] usb 4-1: Using ep0 maxpacket: 32
[ 2972.082037][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 2972.107730][T24524] usb 6-1: USB disconnect, device number 16
[ 2972.179590][   T28] audit: type=1804 audit(1598480171.679:103267): pid=10471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3104/bus" dev="sda1" ino=15987 res=1 errno=0
[ 2972.212593][T15202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:16:11 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 2972.212603][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2972.212692][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2972.223505][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2972.223522][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2972.240581][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2972.249391][T15202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2972.257907][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2972.269803][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2972.279923][ T5266] usb 1-1: config 0 descriptor??
[ 2972.287039][T15202] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2972.318726][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2972.327152][T15202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2972.333445][ T5266] hub 1-1:0.0: USB hub found
[ 2972.335639][ T5177] usb 5-1: config 0 descriptor??
[ 2972.356520][   T28] audit: type=1804 audit(1598480171.859:103268): pid=10474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3136/bus" dev="sda1" ino=16103 res=1 errno=0
[ 2972.357685][T15202] usb 4-1: config 0 descriptor??
[ 2972.392338][ T5177] hub 5-1:0.0: USB hub found
[ 2972.443803][T15202] hub 4-1:0.0: USB hub found
22:16:12 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 2972.515548][   T28] audit: type=1804 audit(1598480172.019:103269): pid=10491 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3137/bus" dev="sda1" ino=16165 res=1 errno=0
[ 2972.612047][ T5177] hub 5-1:0.0: 1 port detected
[ 2972.632013][ T5266] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2972.648786][ T5266] usbhid 1-1:0.0: can't add hid device: -22
22:16:12 executing program 2:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 2972.661794][ T5266] usbhid: probe of 1-1:0.0 failed with error -22
[ 2972.692068][   T28] audit: type=1804 audit(1598480172.189:103270): pid=10494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3138/bus" dev="sda1" ino=16165 res=1 errno=0
[ 2972.693553][T24524] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 2972.752079][T15202] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
22:16:12 executing program 2:
getpid()
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2972.764195][T15202] usbhid 4-1:0.0: can't add hid device: -22
[ 2972.770242][T15202] usbhid: probe of 4-1:0.0 failed with error -22
[ 2972.826003][   T28] audit: type=1804 audit(1598480172.329:103271): pid=10497 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3139/bus" dev="sda1" ino=16165 res=1 errno=0
[ 2972.961980][T24524] usb 6-1: Using ep0 maxpacket: 32
22:16:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(0x0, 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2973.082010][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2973.093244][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2973.104143][T24524] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2973.113843][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2973.124217][   T28] audit: type=1804 audit(1598480172.629:103272): pid=10502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3105/bus" dev="sda1" ino=15987 res=1 errno=0
[ 2973.125899][T24524] usb 6-1: config 0 descriptor??
[ 2973.215187][T24524] hub 6-1:0.0: USB hub found
[ 2973.462239][ T5177] hub 5-1:0.0: activate --> -90
[ 2973.472016][T24524] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2973.483457][T24524] usbhid 6-1:0.0: can't add hid device: -22
[ 2973.489563][T24524] usbhid: probe of 6-1:0.0 failed with error -22
[ 2973.522540][T24524] usb 6-1: USB disconnect, device number 17
22:16:13 executing program 5:
getpid()
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x46000)
lseek(r1, 0x4200, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x8400fffffffb)

[ 2973.654749][   T28] audit: type=1804 audit(1598480173.159:103273): pid=10523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3554/bus" dev="sda1" ino=16189 res=1 errno=0
22:16:13 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2973.742037][T24525] usb 1-1: USB disconnect, device number 108
[ 2973.792948][ T5177] usb 5-1: USB disconnect, device number 20
[ 2973.881986][T28089] usb 4-1: USB disconnect, device number 62
[ 2974.061953][T15202] usb 1-1: new high-speed USB device number 109 using dummy_hcd
22:16:13 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:13 executing program 2:
getpid()
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:13 executing program 3:
getpid()
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2974.224139][   T28] audit: type=1804 audit(1598480173.729:103274): pid=10548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3140/bus" dev="sda1" ino=16145 res=1 errno=0
[ 2974.331881][T15202] usb 1-1: Using ep0 maxpacket: 16
[ 2974.462096][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2974.478649][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2974.487844][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2974.498919][T15202] usb 1-1: config 0 descriptor??
[ 2974.502493][T24525] usb 5-1: new high-speed USB device number 21 using dummy_hcd
22:16:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2974.555832][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2974.751834][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 2974.758747][T28089] usb 1-1: USB disconnect, device number 109
[ 2974.861877][T27964] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2974.872298][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2974.885335][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2974.895028][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2974.904384][T24525] usb 5-1: config 0 descriptor??
[ 2974.954678][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:16:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:14 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2975.101817][T27964] usb 6-1: Using ep0 maxpacket: 16
22:16:14 executing program 3:
getpid()
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2975.156444][T24525] usb 5-1: USB disconnect, device number 21
[ 2975.222153][T27964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2975.235697][T27964] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2975.245978][T27964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2975.256208][T27964] usb 6-1: config 0 descriptor??
[ 2975.306437][T27964] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2975.341814][T28089] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 2975.511287][ T5177] usb 6-1: USB disconnect, device number 18
[ 2975.592170][T28089] usb 1-1: Using ep0 maxpacket: 32
[ 2975.711815][T24525] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2975.722891][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2975.740042][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2975.754871][T28089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2975.764933][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2975.777137][T28089] usb 1-1: config 0 descriptor??
[ 2975.822159][T28089] hub 1-1:0.0: USB hub found
[ 2975.951744][T24525] usb 5-1: Using ep0 maxpacket: 32
22:16:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2976.051796][T28089] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2976.065923][T28089] usbhid 1-1:0.0: can't add hid device: -22
[ 2976.071795][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2976.072078][T28089] usbhid: probe of 1-1:0.0 failed with error -22
[ 2976.086715][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
22:16:15 executing program 2:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:15 executing program 3:
getpid()
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2976.101785][ T5177] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2976.115897][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2976.143077][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2976.156337][T24525] usb 5-1: config 0 descriptor??
[ 2976.202343][T24525] hub 5-1:0.0: USB hub found
[ 2976.371715][ T5177] usb 6-1: Using ep0 maxpacket: 32
[ 2976.421763][T24525] hub 5-1:0.0: 1 port detected
[ 2976.501792][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2976.512881][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2976.523516][ T5177] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2976.533296][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2976.542911][ T5177] usb 6-1: config 0 descriptor??
[ 2976.596210][ T5177] hub 6-1:0.0: USB hub found
[ 2976.811749][ T5177] hub 6-1:0.0: 1 port detected
[ 2977.231686][T24525] hub 5-1:0.0: activate --> -90
[ 2977.551683][T24525] usb 5-1: USB disconnect, device number 22
[ 2977.641636][ T5177] hub 6-1:0.0: activate --> -90
22:16:17 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:17 executing program 2:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:17 executing program 3:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:17 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2977.961668][ T5177] usb 6-1: USB disconnect, device number 19
[ 2978.011453][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 2978.011465][   T28] audit: type=1804 audit(1598480177.509:103283): pid=10669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3580/bus" dev="sda1" ino=16288 res=1 errno=0
[ 2978.070236][   T28] audit: type=1804 audit(1598480177.519:103284): pid=10670 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3143/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2978.095743][   T28] audit: type=1804 audit(1598480177.549:103285): pid=10675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3109/bus" dev="sda1" ino=16274 res=1 errno=0
[ 2978.231908][ T5266] usb 1-1: reset high-speed USB device number 110 using dummy_hcd
[ 2978.281620][ T5177] usb 5-1: new high-speed USB device number 23 using dummy_hcd
22:16:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:17 executing program 2:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:17 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2978.371217][   T28] audit: type=1804 audit(1598480177.869:103286): pid=10682 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3144/bus" dev="sda1" ino=15789 res=1 errno=0
22:16:18 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2978.471589][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2978.512562][ T5266] usb 1-1: device firmware changed
[ 2978.519008][ T5266] usb 1-1: USB disconnect, device number 110
[ 2978.522103][   T28] audit: type=1804 audit(1598480178.019:103287): pid=10691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3145/bus" dev="sda1" ino=16269 res=1 errno=0
[ 2978.549118][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 2978.671581][T15202] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2978.671739][T24525] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2978.691678][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2978.712771][ T5177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2978.732202][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2978.750908][ T5177] usb 5-1: config 0 descriptor??
[ 2978.813856][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:16:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2978.881564][ T5266] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2978.911542][T15202] usb 4-1: Using ep0 maxpacket: 16
[ 2978.921874][T24525] usb 6-1: Using ep0 maxpacket: 16
[ 2978.984043][   T28] audit: type=1804 audit(1598480178.489:103288): pid=10703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3110/bus" dev="sda1" ino=16274 res=1 errno=0
[ 2979.014077][ T5177] usb 5-1: USB disconnect, device number 23
[ 2979.042331][T24525] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2979.061992][T15202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2979.064266][T24525] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2979.085386][T15202] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2979.086379][T24525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2979.103314][T15202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2979.106748][T24525] usb 6-1: config 0 descriptor??
[ 2979.120146][T15202] usb 4-1: config 0 descriptor??
[ 2979.131872][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 2979.175266][T15202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2979.186416][T24525] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2979.252015][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2979.267391][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2979.276956][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2979.290030][ T5266] usb 1-1: config 0 descriptor??
[ 2979.334128][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2979.397691][ T5266] usb 4-1: USB disconnect, device number 63
[ 2979.418786][T24525] usb 6-1: USB disconnect, device number 20
[ 2979.534243][T15202] usb 1-1: USB disconnect, device number 111
[ 2979.581524][ T5177] usb 5-1: new high-speed USB device number 24 using dummy_hcd
22:16:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:19 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2979.853656][ T5177] usb 5-1: Using ep0 maxpacket: 32
[ 2979.890256][   T28] audit: type=1804 audit(1598480179.390:103289): pid=10752 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3111/bus" dev="sda1" ino=16270 res=1 errno=0
[ 2979.951497][ T5266] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 2979.981439][T24525] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2980.002022][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2980.019660][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2980.039905][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2980.058622][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2980.068470][ T5177] usb 5-1: config 0 descriptor??
[ 2980.098211][   T28] audit: type=1804 audit(1598480179.600:103290): pid=10757 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3146/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2980.131978][ T5177] hub 5-1:0.0: USB hub found
[ 2980.136615][T15202] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 2980.191423][ T5266] usb 4-1: Using ep0 maxpacket: 32
[ 2980.241427][T24525] usb 6-1: Using ep0 maxpacket: 32
[ 2980.311840][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2980.325546][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2980.337200][ T5266] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2980.347665][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2980.351447][ T5177] hub 5-1:0.0: 1 port detected
[ 2980.359516][ T5266] usb 4-1: config 0 descriptor??
[ 2980.366975][T24525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2980.378399][T24525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2980.388884][T24525] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2980.391537][T15202] usb 1-1: Using ep0 maxpacket: 32
[ 2980.398667][T24525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2980.416826][T24525] usb 6-1: config 0 descriptor??
[ 2980.422658][ T5266] hub 4-1:0.0: USB hub found
[ 2980.462888][T24525] hub 6-1:0.0: USB hub found
[ 2980.541436][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2980.558678][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2980.579833][T15202] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2980.598179][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2980.607455][T15202] usb 1-1: config 0 descriptor??
[ 2980.641541][ T5266] hub 4-1:0.0: 1 port detected
[ 2980.657531][T15202] hub 1-1:0.0: USB hub found
[ 2980.761407][T24525] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2980.791750][T24525] usbhid 6-1:0.0: can't add hid device: -22
[ 2980.797830][T24525] usbhid: probe of 6-1:0.0 failed with error -22
[ 2980.861398][T15202] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2980.881943][T15202] usbhid 1-1:0.0: can't add hid device: -22
[ 2980.888051][T15202] usbhid: probe of 1-1:0.0 failed with error -22
[ 2981.171448][T15202] hub 5-1:0.0: activate --> -90
[ 2981.451380][ T5266] hub 4-1:0.0: activate --> -90
[ 2981.491416][T24525] usb 5-1: USB disconnect, device number 24
[ 2981.772353][ T5266] usb 4-1: USB disconnect, device number 64
[ 2981.881375][T15202] usb 6-1: USB disconnect, device number 21
22:16:22 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:22 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:22 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:22 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:22 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2982.815891][   T28] audit: type=1804 audit(1598480182.320:103291): pid=10820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3147/bus" dev="sda1" ino=16266 res=1 errno=0
[ 2982.873932][   T28] audit: type=1804 audit(1598480182.320:103292): pid=10819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3557/bus" dev="sda1" ino=16268 res=1 errno=0
[ 2983.061200][T27964] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2983.061833][ T5177] usb 1-1: reset high-speed USB device number 112 using dummy_hcd
[ 2983.071351][ T5266] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2983.321991][T27964] usb 5-1: Using ep0 maxpacket: 16
[ 2983.342756][ T5266] usb 4-1: Using ep0 maxpacket: 16
[ 2983.351323][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 2983.401443][ T5177] usb 1-1: device firmware changed
[ 2983.406905][ T5177] usb 1-1: USB disconnect, device number 112
[ 2983.442637][T27964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2983.461880][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2983.495876][T27964] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2983.507588][ T5266] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2983.528931][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2983.540648][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2983.564757][T27964] usb 5-1: config 0 descriptor??
[ 2983.578502][ T5266] usb 4-1: config 0 descriptor??
[ 2983.623433][T27964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2983.635631][ T5266] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
22:16:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2983.811168][ T5177] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 2983.823112][T27964] usb 5-1: USB disconnect, device number 25
[ 2983.869284][ T5266] usb 4-1: USB disconnect, device number 65
[ 2983.886333][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 2983.886415][   T28] audit: type=1804 audit(1598480183.390:103294): pid=10854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3113/bus" dev="sda1" ino=16288 res=1 errno=0
22:16:23 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2984.081164][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 2984.213033][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2984.237702][   T28] audit: type=1804 audit(1598480183.740:103295): pid=10862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3148/bus" dev="sda1" ino=16328 res=1 errno=0
[ 2984.251124][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2984.301887][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2984.336316][ T5177] usb 1-1: config 0 descriptor??
[ 2984.403656][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2984.412551][T27964] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2984.421267][ T5266] usb 4-1: new high-speed USB device number 66 using dummy_hcd
22:16:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2984.606917][ T5177] usb 1-1: USB disconnect, device number 113
22:16:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2984.671128][T27964] usb 5-1: Using ep0 maxpacket: 32
[ 2984.676286][ T5266] usb 4-1: Using ep0 maxpacket: 32
[ 2984.787088][   T28] audit: type=1804 audit(1598480184.290:103296): pid=10876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3114/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2984.813907][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2984.825199][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2984.847053][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2984.857802][T27964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2984.879043][ T5266] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2984.890210][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2984.907075][   T28] audit: type=1804 audit(1598480184.410:103297): pid=10881 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3558/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2984.909470][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2984.942100][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2984.955401][T27964] usb 5-1: config 0 descriptor??
[ 2984.983327][ T5266] usb 4-1: config 0 descriptor??
[ 2985.011890][T27964] hub 5-1:0.0: USB hub found
[ 2985.031887][ T5266] hub 4-1:0.0: USB hub found
[ 2985.181069][ T5177] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2985.231628][T27964] hub 5-1:0.0: 1 port detected
[ 2985.261085][ T5266] hub 4-1:0.0: 1 port detected
[ 2985.441027][ T5177] usb 1-1: Using ep0 maxpacket: 32
22:16:25 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2985.571493][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2985.584527][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2985.595475][ T5177] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2985.607304][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:16:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2985.627715][ T5177] usb 1-1: config 0 descriptor??
[ 2985.681500][ T5177] hub 1-1:0.0: USB hub found
[ 2985.686586][   T28] audit: type=1804 audit(1598480185.190:103298): pid=10896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3149/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2985.721950][   T28] audit: type=1804 audit(1598480185.220:103299): pid=10900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3115/bus" dev="sda1" ino=16285 res=1 errno=0
22:16:25 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2985.891938][ T5177] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2985.907413][ T5177] usbhid 1-1:0.0: can't add hid device: -22
[ 2985.915312][ T5177] usbhid: probe of 1-1:0.0 failed with error -22
[ 2986.031015][ T5266] hub 5-1:0.0: activate --> -90
[ 2986.071000][T23800] hub 4-1:0.0: activate --> -90
[ 2986.121040][T27964] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2986.131510][ T5177] usb 1-1: reset high-speed USB device number 114 using dummy_hcd
[ 2986.350997][T23800] usb 5-1: USB disconnect, device number 26
[ 2986.361196][T27964] usb 6-1: Using ep0 maxpacket: 16
[ 2986.391073][T24525] usb 4-1: USB disconnect, device number 66
[ 2986.410953][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 2986.460967][ T5177] usb 1-1: device firmware changed
[ 2986.466289][ T5177] usb 1-1: USB disconnect, device number 114
[ 2986.480995][T27964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2986.508782][T27964] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2986.533784][T27964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2986.556102][T27964] usb 6-1: config 0 descriptor??
22:16:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2986.603365][T27964] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2986.685992][   T28] audit: type=1804 audit(1598480186.190:103300): pid=10942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3116/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2986.880998][ T5177] usb 1-1: new high-speed USB device number 115 using dummy_hcd
22:16:26 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:26 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2986.994426][T15202] usb 6-1: USB disconnect, device number 22
[ 2987.162346][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 2987.301609][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2987.339950][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2987.350112][T28089] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2987.357852][ T7975] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2987.384050][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2987.407210][ T5177] usb 1-1: config 0 descriptor??
[ 2987.484989][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2987.600866][T15202] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2987.622922][T28089] usb 4-1: Using ep0 maxpacket: 16
[ 2987.628077][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 2987.687871][ T5177] usb 1-1: USB disconnect, device number 115
[ 2987.763024][T28089] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2987.784292][T28089] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2987.796178][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2987.819786][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2987.832011][T28089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2987.850617][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2987.862968][T28089] usb 4-1: config 0 descriptor??
[ 2987.872106][T15202] usb 6-1: Using ep0 maxpacket: 32
[ 2987.906185][ T7975] usb 5-1: config 0 descriptor??
[ 2987.947739][T28089] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2987.976236][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2988.023128][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2988.047675][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2988.084731][T15202] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2988.106985][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2988.129760][T15202] usb 6-1: config 0 descriptor??
[ 2988.165853][T28089] usb 4-1: USB disconnect, device number 67
[ 2988.280841][ T5177] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2988.296003][T15202] hub 6-1:0.0: USB hub found
[ 2988.374134][ T7975] usb 5-1: USB disconnect, device number 27
[ 2988.422536][T15202] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2988.445641][T15202] usbhid 6-1:0.0: can't add hid device: -22
[ 2988.454245][T15202] usbhid: probe of 6-1:0.0 failed with error -22
[ 2988.610837][ T5177] usb 1-1: Using ep0 maxpacket: 32
[ 2988.750757][ T7975] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2988.758341][T28089] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 2988.767045][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2988.781870][ T5177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2988.794090][ T5177] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2988.804109][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2988.843160][ T5177] usb 1-1: config 0 descriptor??
22:16:28 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2988.912627][ T5177] usb 1-1: can't set config #0, error -71
[ 2988.924599][ T5177] usb 1-1: USB disconnect, device number 116
[ 2989.010748][ T7975] usb 5-1: Using ep0 maxpacket: 32
[ 2989.031253][T28089] usb 4-1: Using ep0 maxpacket: 32
[ 2989.170818][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2989.181981][T28089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2989.192919][T28089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2989.202696][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2989.212503][T28089] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2989.223088][ T7975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2989.232155][T28089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2989.240564][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2989.251024][ T7975] usb 5-1: config 0 descriptor??
[ 2989.253294][T28089] usb 4-1: config 0 descriptor??
[ 2989.311258][ T7975] hub 5-1:0.0: USB hub found
[ 2989.332840][T28089] hub 4-1:0.0: USB hub found
[ 2989.362344][ T5177] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 2989.530748][ T7975] hub 5-1:0.0: 1 port detected
22:16:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:29 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2989.561796][T28089] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 2989.583278][T28089] usbhid 4-1:0.0: can't add hid device: -22
[ 2989.589265][T28089] usbhid: probe of 4-1:0.0 failed with error -22
[ 2989.631153][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 2989.761042][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2989.790618][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2989.801030][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2989.809957][ T5177] usb 1-1: config 0 descriptor??
[ 2989.853005][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2989.939241][   T28] audit: type=1804 audit(1598480189.440:103301): pid=11048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3150/bus" dev="sda1" ino=16269 res=1 errno=0
[ 2990.052400][ T7975] usb 1-1: USB disconnect, device number 117
[ 2990.061676][   T28] audit: type=1804 audit(1598480189.570:103302): pid=11054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3117/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2990.300817][ T5177] hub 5-1:0.0: activate --> -90
22:16:29 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2990.507562][   T28] audit: type=1804 audit(1598480190.010:103303): pid=11068 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3560/bus" dev="sda1" ino=16365 res=1 errno=0
[ 2990.551603][ T5177] usb 6-1: USB disconnect, device number 23
[ 2990.621870][T28089] usb 5-1: USB disconnect, device number 28
[ 2990.630985][ T7975] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 2990.920618][ T7975] usb 1-1: Using ep0 maxpacket: 32
22:16:30 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2991.061039][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2991.096862][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2991.152041][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2991.196589][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2991.239520][ T7975] usb 1-1: config 0 descriptor??
[ 2991.352437][ T7975] hub 1-1:0.0: USB hub found
[ 2991.571703][T28089] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2991.590893][ T7975] hub 1-1:0.0: 1 port detected
22:16:31 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2991.832136][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 2991.921131][T15202] usb 4-1: reset high-speed USB device number 68 using dummy_hcd
[ 2991.992885][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2992.027757][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2992.061084][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2992.093543][T28089] usb 5-1: config 0 descriptor??
[ 2992.181006][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2992.220605][T15202] usb 4-1: Using ep0 maxpacket: 16
[ 2992.262413][T15202] usb 4-1: device firmware changed
[ 2992.267825][T15202] usb 4-1: USB disconnect, device number 68
[ 2992.352559][ T7975] usb 5-1: USB disconnect, device number 29
[ 2992.407893][ T5177] usb 1-1: USB disconnect, device number 118
[ 2992.447495][T28089] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 2992.681787][T15202] usb 4-1: new high-speed USB device number 69 using dummy_hcd
22:16:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:32 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2992.961842][T15202] usb 4-1: Using ep0 maxpacket: 16
[ 2992.992316][ T7975] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2993.100747][T15202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2993.122451][T15202] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2993.153517][T15202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2993.181561][T15202] usb 4-1: config 0 descriptor??
[ 2993.234498][T15202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2993.240538][T24525] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 2993.241886][ T7975] usb 5-1: Using ep0 maxpacket: 32
[ 2993.423429][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2993.465274][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2993.480413][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 2993.502962][ T7975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2993.513192][   T28] audit: type=1804 audit(1598480193.011:103304): pid=11138 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3118/bus" dev="sda1" ino=16323 res=1 errno=0
[ 2993.563484][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2993.573833][ T7975] usb 5-1: config 0 descriptor??
[ 2993.579376][T15202] usb 4-1: USB disconnect, device number 69
[ 2993.640760][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2993.664058][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2993.686101][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2993.785593][ T7975] hub 5-1:0.0: USB hub found
[ 2993.786134][T24525] usb 1-1: config 0 descriptor??
[ 2993.857112][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2993.932496][ T7975] hub 5-1:0.0: 1 port detected
22:16:33 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 2994.058938][T24525] usb 1-1: USB disconnect, device number 119
22:16:34 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2994.752222][T24525] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2994.895973][   T28] audit: type=1804 audit(1598480194.391:103305): pid=11170 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3151/bus" dev="sda1" ino=16266 res=1 errno=0
[ 2994.946720][T15202] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 2995.000280][T24525] usb 1-1: Using ep0 maxpacket: 32
22:16:34 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2995.174862][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2995.200693][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2995.219088][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2995.223918][   T28] audit: type=1804 audit(1598480194.721:103306): pid=11182 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3152/bus" dev="sda1" ino=16328 res=1 errno=0
[ 2995.228590][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2995.253575][ T7975] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2995.268824][T24525] usb 1-1: config 0 descriptor??
[ 2995.291347][T11171] hub 5-1:0.0: activate --> -90
[ 2995.310698][T24525] hub 1-1:0.0: USB hub found
[ 2995.450296][T15202] usb 4-1: device descriptor read/64, error -71
22:16:35 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2995.530404][T24525] hub 1-1:0.0: 1 port detected
[ 2995.540267][ T7975] usb 6-1: Using ep0 maxpacket: 16
22:16:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2995.576144][   T28] audit: type=1804 audit(1598480195.071:103307): pid=11191 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3153/bus" dev="sda1" ino=16328 res=1 errno=0
[ 2995.610696][T11171] usb 5-1: USB disconnect, device number 30
22:16:35 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2995.720318][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2995.746483][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2995.756610][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2995.769573][ T7975] usb 6-1: config 0 descriptor??
[ 2995.772684][   T28] audit: type=1804 audit(1598480195.271:103308): pid=11198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3154/bus" dev="sda1" ino=16285 res=1 errno=0
22:16:35 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2995.822637][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2995.860271][T15202] usb 4-1: Using ep0 maxpacket: 16
[ 2995.919871][   T28] audit: type=1804 audit(1598480195.411:103309): pid=11205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3155/bus" dev="sda1" ino=16285 res=1 errno=0
[ 2995.986046][   T28] audit: type=1804 audit(1598480195.481:103310): pid=11208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3119/bus" dev="sda1" ino=16328 res=1 errno=0
[ 2996.020259][T15202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
22:16:35 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:35 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2996.128039][T15202] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2996.147263][T15202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2996.247257][T15202] usb 4-1: config 0 descriptor??
[ 2996.259659][ T7975] usb 6-1: USB disconnect, device number 24
[ 2996.309526][T15202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2996.375179][T15202] usb 1-1: USB disconnect, device number 120
[ 2996.443499][   T28] audit: type=1804 audit(1598480195.941:103311): pid=11227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3156/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2996.516554][T10366] usb 4-1: USB disconnect, device number 70
[ 2996.541261][T11171] usb 5-1: new high-speed USB device number 31 using dummy_hcd
22:16:36 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2996.628829][   T28] audit: type=1804 audit(1598480196.121:103312): pid=11239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3157/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2996.690171][ T7975] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2996.980113][T24525] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
22:16:36 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:36 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2997.200093][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 2997.251567][   T28] audit: type=1804 audit(1598480196.731:103313): pid=11252 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3158/bus" dev="sda1" ino=16371 res=1 errno=0
[ 2997.450137][ T7975] usb 6-1: Using ep0 maxpacket: 32
[ 2997.510161][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2997.523654][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2997.533458][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2997.542921][T11171] usb 5-1: config 0 descriptor??
[ 2997.583003][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2997.610519][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2997.621617][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2997.631579][T10366] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 2997.639412][ T7975] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2997.650595][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2997.659351][ T7975] usb 6-1: config 0 descriptor??
[ 2997.732353][ T7975] hub 6-1:0.0: USB hub found
[ 2997.741458][T15202] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 2997.783533][T11171] usb 5-1: USB disconnect, device number 31
[ 2997.940175][ T7975] hub 6-1:0.0: 1 port detected
[ 2998.000078][T15202] usb 1-1: Using ep0 maxpacket: 16
[ 2998.120089][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2998.132946][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2998.143250][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2998.154041][T15202] usb 1-1: config 0 descriptor??
[ 2998.215611][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2998.370030][T11171] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2998.413114][T15202] usb 1-1: USB disconnect, device number 121
[ 2998.629993][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 2998.710774][T11179] usb 6-1: USB disconnect, device number 25
[ 2998.730033][ T7975] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 2998.780021][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2998.791063][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2998.801564][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2998.811166][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2998.822622][T11171] usb 5-1: config 0 descriptor??
[ 2998.862284][T11171] hub 5-1:0.0: USB hub found
[ 2998.999982][T15202] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2999.079989][T11171] hub 5-1:0.0: 1 port detected
22:16:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:38 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:38 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 2999.241519][T15202] usb 1-1: Using ep0 maxpacket: 32
[ 2999.256211][   T28] audit: type=1804 audit(1598480198.751:103314): pid=11304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3159/bus" dev="sda1" ino=16280 res=1 errno=0
[ 2999.305427][   T28] audit: type=1804 audit(1598480198.801:103315): pid=11311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3120/bus" dev="sda1" ino=16261 res=1 errno=0
22:16:38 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2999.460460][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2999.471588][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2999.494062][T15202] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
22:16:39 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 2999.507160][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:16:39 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3000.013708][T10366] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 3000.022029][ T7975] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 3000.035509][T15202] usb 1-1: config 0 descriptor??
[ 3000.311464][T15202] usb 1-1: can't set config #0, error -71
[ 3000.325548][T15202] usb 1-1: USB disconnect, device number 122
[ 3000.411474][ T7975] usb 4-1: Using ep0 maxpacket: 16
[ 3000.416631][T10366] usb 6-1: Using ep0 maxpacket: 16
[ 3000.441786][T11171] hub 5-1:0.0: activate --> -90
[ 3000.739887][ T7975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3000.752846][T10366] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3000.776207][T10366] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3000.790000][ T7975] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3000.799063][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3000.810380][ T7975] usb 4-1: config 0 descriptor??
[ 3000.815781][T10366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3000.836867][T10366] usb 6-1: config 0 descriptor??
[ 3000.863044][ T7975] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3000.893730][ T7975] usb 5-1: USB disconnect, device number 32
[ 3000.922442][T10366] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
22:16:40 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:40 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3001.069264][T10366] usb 4-1: USB disconnect, device number 72
22:16:40 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3001.134576][T11179] usb 6-1: USB disconnect, device number 26
[ 3001.142549][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 3001.142560][   T28] audit: type=1804 audit(1598480200.651:103319): pid=11357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3163/bus" dev="sda1" ino=15958 res=1 errno=0
[ 3001.244177][   T28] audit: type=1804 audit(1598480200.741:103320): pid=11370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3164/bus" dev="sda1" ino=15958 res=1 errno=0
[ 3001.419793][T15202] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 3001.427536][ T7975] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 3001.539585][   T28] audit: type=1804 audit(1598480201.031:103321): pid=11376 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3121/bus" dev="sda1" ino=15970 res=1 errno=0
[ 3001.699790][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 3001.704974][T15202] usb 1-1: Using ep0 maxpacket: 16
[ 3001.710146][T10366] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 3001.869979][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3001.883153][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3001.898007][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3001.908695][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3001.921110][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3001.929389][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3001.940288][ T7975] usb 5-1: config 0 descriptor??
[ 3001.946251][T15202] usb 1-1: config 0 descriptor??
[ 3001.969786][T10366] usb 4-1: Using ep0 maxpacket: 32
[ 3001.997583][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3002.006206][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3002.129810][T10366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3002.142978][T10366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3002.154325][T10366] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3002.165852][T10366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3002.177434][T10366] usb 4-1: config 0 descriptor??
[ 3002.194053][T15202] usb 5-1: USB disconnect, device number 33
[ 3002.216779][ T7975] usb 1-1: USB disconnect, device number 123
[ 3002.225205][T10366] hub 4-1:0.0: USB hub found
22:16:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:41 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:41 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3002.479764][T10366] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3002.507140][T10366] usbhid 4-1:0.0: can't add hid device: -22
[ 3002.551526][   T28] audit: type=1804 audit(1598480202.051:103322): pid=11409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3165/bus" dev="sda1" ino=16102 res=1 errno=0
[ 3002.605939][T10366] usbhid: probe of 4-1:0.0 failed with error -22
22:16:42 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3002.684969][   T28] audit: type=1804 audit(1598480202.181:103323): pid=11416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3166/bus" dev="sda1" ino=16102 res=1 errno=0
[ 3002.799884][ T7975] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 3002.807583][T15202] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 3002.830151][T10366] usb 4-1: reset high-speed USB device number 73 using dummy_hcd
22:16:42 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3003.096161][T15202] usb 5-1: Using ep0 maxpacket: 32
[ 3003.101336][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 3003.119892][T10366] usb 4-1: Using ep0 maxpacket: 16
[ 3003.139732][   T28] audit: type=1804 audit(1598480202.631:103324): pid=11420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3167/bus" dev="sda1" ino=16102 res=1 errno=0
22:16:42 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3003.189679][T11179] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 3003.189713][T10366] usb 4-1: device firmware changed
[ 3003.219672][T10366] usb 4-1: USB disconnect, device number 73
[ 3003.249901][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3003.260829][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3003.269922][   T28] audit: type=1804 audit(1598480202.771:103325): pid=11426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3168/bus" dev="sda1" ino=16102 res=1 errno=0
[ 3003.274519][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3003.308089][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3003.318206][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3003.331972][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3003.367231][ T7975] usb 1-1: config 0 descriptor??
[ 3003.377458][T15202] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3003.399685][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:16:42 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3003.417771][T15202] usb 5-1: config 0 descriptor??
[ 3003.423861][ T7975] hub 1-1:0.0: USB hub found
[ 3003.429717][T11179] usb 6-1: Using ep0 maxpacket: 16
[ 3003.479932][   T28] audit: type=1804 audit(1598480202.981:103326): pid=11435 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3169/bus" dev="sda1" ino=16102 res=1 errno=0
[ 3003.512231][T15202] hub 5-1:0.0: USB hub found
[ 3003.559651][T11179] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3003.584073][T11179] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3003.597167][T11179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3003.607344][T11179] usb 6-1: config 0 descriptor??
[ 3003.629622][T10366] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 3003.640872][ T7975] hub 1-1:0.0: 1 port detected
[ 3003.662680][T11179] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3003.719639][T15202] hub 5-1:0.0: 1 port detected
[ 3003.868857][T11179] usb 6-1: USB disconnect, device number 27
[ 3003.910298][T10366] usb 4-1: Using ep0 maxpacket: 16
[ 3004.030329][T10366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3004.043191][T10366] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3004.052259][T10366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3004.062369][T10366] usb 4-1: config 0 descriptor??
[ 3004.102544][T10366] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3004.311886][T24525] usb 4-1: USB disconnect, device number 74
[ 3004.419672][T11179] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 3004.451868][ T7975] usb 1-1: USB disconnect, device number 124
[ 3004.479584][T15202] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3004.519548][T10366] hub 5-1:0.0: activate --> -90
[ 3004.659564][T11179] usb 6-1: Using ep0 maxpacket: 32
[ 3004.779610][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3004.790940][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3004.801059][T11179] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3004.810234][T11179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3004.819238][T11179] usb 6-1: config 0 descriptor??
[ 3004.842047][T28702] usb 5-1: USB disconnect, device number 34
[ 3004.869960][T11179] hub 6-1:0.0: USB hub found
[ 3004.874635][T24525] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 3005.079512][T11179] hub 6-1:0.0: 1 port detected
[ 3005.119532][T24525] usb 4-1: Using ep0 maxpacket: 32
22:16:44 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:44 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:44 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3005.240001][T24525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3005.275249][T24525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3005.294282][   T28] audit: type=1804 audit(1598480204.792:103327): pid=11495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3170/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3005.309273][T24525] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3005.335650][T24525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3005.350259][   T28] audit: type=1804 audit(1598480204.852:103328): pid=11502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3122/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3005.370542][T24525] usb 4-1: config 0 descriptor??
22:16:44 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3005.420699][T24525] hub 4-1:0.0: USB hub found
[ 3005.559472][ T7975] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 3005.567053][T10366] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 3005.579895][T24525] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3005.590217][T24525] usbhid 4-1:0.0: can't add hid device: -22
[ 3005.596153][T24525] usbhid: probe of 4-1:0.0 failed with error -22
[ 3005.630077][T24525] usb 4-1: USB disconnect, device number 75
[ 3005.829460][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 3005.829514][T11179] hub 6-1:0.0: activate --> -90
[ 3005.834752][T10366] usb 1-1: Using ep0 maxpacket: 16
[ 3005.979929][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3005.993572][T10366] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3006.006440][T10366] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3006.015570][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3006.024808][T10366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3006.032809][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3006.042611][T10366] usb 1-1: config 0 descriptor??
[ 3006.047966][ T7975] usb 5-1: config 0 descriptor??
[ 3006.083032][T10366] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3006.102315][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3006.165569][T24524] usb 6-1: USB disconnect, device number 28
[ 3006.281019][T24524] usb 1-1: USB disconnect, device number 125
[ 3006.302324][T11179] usb 5-1: USB disconnect, device number 35
22:16:46 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:46 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3006.575949][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 3006.575961][   T28] audit: type=1804 audit(1598480206.072:103330): pid=11555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3172/bus" dev="sda1" ino=16320 res=1 errno=0
22:16:46 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3006.623969][   T28] audit: type=1804 audit(1598480206.122:103331): pid=11563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3123/bus" dev="sda1" ino=16280 res=1 errno=0
[ 3006.695670][   T28] audit: type=1804 audit(1598480206.192:103332): pid=11565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3173/bus" dev="sda1" ino=16371 res=1 errno=0
22:16:46 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3006.749373][T24525] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 3006.789393][T11179] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 3006.826039][   T28] audit: type=1804 audit(1598480206.322:103333): pid=11567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3174/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3006.869481][T24524] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 3006.879364][ T7975] usb 4-1: new high-speed USB device number 76 using dummy_hcd
22:16:46 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3006.976251][   T28] audit: type=1804 audit(1598480206.472:103334): pid=11569 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3175/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3006.989352][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 3007.029372][T11179] usb 5-1: Using ep0 maxpacket: 32
[ 3007.119343][ T7975] usb 4-1: Using ep0 maxpacket: 16
[ 3007.119370][T24524] usb 6-1: Using ep0 maxpacket: 16
[ 3007.130280][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3007.141193][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3007.151687][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3007.163033][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3007.172764][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3007.183302][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3007.191680][T11179] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3007.201713][T11179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3007.210265][T24525] usb 1-1: config 0 descriptor??
[ 3007.223493][T11179] usb 5-1: config 0 descriptor??
[ 3007.259449][T24524] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3007.260992][ T7975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3007.272733][T24525] hub 1-1:0.0: USB hub found
[ 3007.289935][T11179] hub 5-1:0.0: USB hub found
[ 3007.296106][T24524] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3007.311958][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3007.321477][T24524] usb 6-1: config 0 descriptor??
[ 3007.325008][ T7975] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3007.354736][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3007.367249][ T7975] usb 4-1: config 0 descriptor??
[ 3007.372140][T24524] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3007.421723][ T7975] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3007.489343][T24525] hub 1-1:0.0: 1 port detected
[ 3007.509345][T11179] hub 5-1:0.0: 1 port detected
[ 3007.578986][T24524] usb 6-1: USB disconnect, device number 29
[ 3007.631142][ T7975] usb 4-1: USB disconnect, device number 76
[ 3008.139275][T24524] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 3008.199281][ T7975] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 3008.300095][T10366] usb 1-1: USB disconnect, device number 126
[ 3008.320082][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3008.326882][T11179] hub 5-1:0.0: activate --> -90
[ 3008.409251][T24524] usb 6-1: Using ep0 maxpacket: 32
[ 3008.439249][ T7975] usb 4-1: Using ep0 maxpacket: 32
[ 3008.539716][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3008.550684][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3008.559619][ T7975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3008.561389][T24524] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3008.573032][ T7975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3008.580983][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3008.593278][ T7975] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3008.604724][T24524] usb 6-1: config 0 descriptor??
[ 3008.623852][ T7975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3008.636675][ T7975] usb 4-1: config 0 descriptor??
[ 3008.649739][T24524] hub 6-1:0.0: USB hub found
[ 3008.655994][T11179] usb 5-1: USB disconnect, device number 36
[ 3008.679615][ T7975] hub 4-1:0.0: USB hub found
[ 3008.879238][T24524] hub 6-1:0.0: 1 port detected
[ 3008.899310][ T7975] hub 4-1:0.0: 1 port detected
22:16:48 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:48 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:48 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3009.073692][   T28] audit: type=1804 audit(1598480208.572:103335): pid=11637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3176/bus" dev="sda1" ino=16270 res=1 errno=0
[ 3009.103352][   T28] audit: type=1804 audit(1598480208.602:103336): pid=11646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3124/bus" dev="sda1" ino=16269 res=1 errno=0
22:16:48 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3009.207357][   T28] audit: type=1804 audit(1598480208.702:103337): pid=11648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3177/bus" dev="sda1" ino=16270 res=1 errno=0
[ 3009.319194][T10366] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 3009.330972][T15202] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 3009.559157][T10366] usb 5-1: Using ep0 maxpacket: 16
[ 3009.579163][T15202] usb 1-1: Using ep0 maxpacket: 16
[ 3009.669152][ T7975] hub 4-1:0.0: activate --> -90
[ 3009.669165][T28702] hub 6-1:0.0: activate --> -90
[ 3009.679472][T10366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3009.692451][T10366] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3009.702133][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3009.714925][T10366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3009.723858][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3009.733828][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3009.742314][T10366] usb 5-1: config 0 descriptor??
[ 3009.751580][T15202] usb 1-1: config 0 descriptor??
[ 3009.795735][T10366] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3009.803447][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3009.990818][T28702] usb 4-1: USB disconnect, device number 77
[ 3009.991000][T10366] usb 5-1: USB disconnect, device number 37
[ 3009.998392][T24524] usb 6-1: USB disconnect, device number 30
[ 3010.018854][T28702] usb 1-1: USB disconnect, device number 127
22:16:49 executing program 3:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

22:16:49 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:49 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3010.419273][   T28] audit: type=1804 audit(1598480209.922:103338): pid=11696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3589/bus" dev="sda1" ino=16266 res=1 errno=0
[ 3010.443459][   T28] audit: type=1804 audit(1598480209.922:103339): pid=11699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3565/bus" dev="sda1" ino=16263 res=1 errno=0
22:16:50 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:50 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:50 executing program 3:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3010.569204][T10366] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 3010.619094][T28702] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 3010.819054][T10366] usb 5-1: Using ep0 maxpacket: 32
[ 3010.849072][T11179] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 3010.879405][T28702] usb 1-1: Using ep0 maxpacket: 32
[ 3010.939095][T10366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3010.950996][T10366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3010.960873][T10366] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3010.971217][T10366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3010.980623][T10366] usb 5-1: config 0 descriptor??
[ 3011.021292][T10366] hub 5-1:0.0: USB hub found
[ 3011.039318][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3011.050333][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3011.060760][T28702] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3011.070226][T28702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3011.081874][T28702] usb 1-1: config 0 descriptor??
[ 3011.129073][T11179] usb 6-1: Using ep0 maxpacket: 16
[ 3011.136413][T28702] hub 1-1:0.0: USB hub found
[ 3011.239082][T10366] hub 5-1:0.0: 1 port detected
[ 3011.259095][T11179] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3011.272046][T11179] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3011.281310][T11179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3011.291597][T11179] usb 6-1: config 0 descriptor??
[ 3011.339076][T28702] hub 1-1:0.0: 1 port detected
[ 3011.346501][T11179] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3011.547642][T15202] usb 6-1: USB disconnect, device number 31
[ 3012.009032][T10366] hub 5-1:0.0: activate --> -90
[ 3012.098962][T15202] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 3012.159599][T28702] usb 1-1: USB disconnect, device number 2
[ 3012.178960][T11179] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3012.329091][ T7975] usb 5-1: USB disconnect, device number 38
[ 3012.339315][T15202] usb 6-1: Using ep0 maxpacket: 32
[ 3012.459228][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3012.470209][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3012.480704][T15202] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3012.490220][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3012.504005][T15202] usb 6-1: config 0 descriptor??
[ 3012.551161][T15202] hub 6-1:0.0: USB hub found
22:16:52 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:52 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:52 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3012.758897][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 3012.758909][   T28] audit: type=1804 audit(1598480212.252:103344): pid=11761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3180/bus" dev="sda1" ino=16268 res=1 errno=0
[ 3012.770370][T15202] hub 6-1:0.0: 1 port detected
22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3012.846863][   T28] audit: type=1804 audit(1598480212.342:103345): pid=11773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3126/bus" dev="sda1" ino=16266 res=1 errno=0
[ 3012.892424][   T28] audit: type=1804 audit(1598480212.392:103346): pid=11775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3181/bus" dev="sda1" ino=16320 res=1 errno=0
22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3013.028914][ T7975] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 3013.036537][T11171] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 3013.044066][   T28] audit: type=1804 audit(1598480212.532:103347): pid=11777 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3182/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3013.069121][T28702] usb 4-1: new high-speed USB device number 78 using dummy_hcd
22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffb)

[ 3013.136767][   T28] audit: type=1804 audit(1598480212.632:103348): pid=11779 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3183/bus" dev="sda1" ino=16320 res=1 errno=0
22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3013.246005][   T28] audit: type=1804 audit(1598480212.742:103349): pid=11781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3184/bus" dev="sda1" ino=16320 res=1 errno=0
22:16:52 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3013.308904][T11171] usb 1-1: Using ep0 maxpacket: 16
[ 3013.314094][ T7975] usb 5-1: Using ep0 maxpacket: 16
[ 3013.328975][T28702] usb 4-1: Using ep0 maxpacket: 16
[ 3013.365650][   T28] audit: type=1804 audit(1598480212.862:103350): pid=11785 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3185/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3013.439003][ T7975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3013.451865][T11171] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3013.464773][T11171] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3013.475009][ T7975] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3013.488956][T28702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3013.494623][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3013.503896][T28702] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3013.511046][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3013.519073][T28702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3013.532101][T11171] usb 1-1: config 0 descriptor??
[ 3013.542561][ T7975] usb 5-1: config 0 descriptor??
[ 3013.543954][T28702] usb 4-1: config 0 descriptor??
[ 3013.569801][T15202] usb 6-1: USB disconnect, device number 32
[ 3013.588925][T28089] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3013.597887][ T7975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3013.607690][T11171] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3013.624265][T28702] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3013.791828][T28702] usb 1-1: USB disconnect, device number 3
[ 3013.794307][T11171] usb 5-1: USB disconnect, device number 39
[ 3013.841647][T15202] usb 4-1: USB disconnect, device number 78
22:16:53 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:53 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3014.096417][   T28] audit: type=1804 audit(1598480213.592:103351): pid=11832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3186/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3014.368779][T11171] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 3014.368787][T28702] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 3014.384015][ T7975] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 3014.398879][T15202] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 3014.618836][T28702] usb 1-1: Using ep0 maxpacket: 32
[ 3014.638785][T15202] usb 4-1: Using ep0 maxpacket: 32
[ 3014.643967][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3014.649118][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3014.738856][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3014.749904][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3014.760415][T28702] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3014.769779][T28702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3014.778348][T28702] usb 1-1: config 0 descriptor??
[ 3014.782402][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3014.794275][T15202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3014.806140][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3014.818982][T15202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3014.819145][T28702] hub 1-1:0.0: USB hub found
[ 3014.832452][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3014.843559][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3014.853303][T15202] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3014.862769][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3014.871151][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3014.880701][T15202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3014.889885][ T7975] usb 6-1: config 0 descriptor??
[ 3014.894858][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3014.906986][T15202] usb 4-1: config 0 descriptor??
[ 3014.916361][T11171] usb 5-1: config 0 descriptor??
[ 3014.931605][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3014.959283][T15202] hub 4-1:0.0: USB hub found
[ 3014.964376][T11171] hub 5-1:0.0: USB hub found
[ 3015.038824][T28702] hub 1-1:0.0: 1 port detected
[ 3015.137436][T24524] usb 6-1: USB disconnect, device number 33
[ 3015.168775][T11171] hub 5-1:0.0: 1 port detected
[ 3015.173715][T15202] hub 4-1:0.0: 1 port detected
[ 3015.688709][T24524] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 3015.830431][ T7975] usb 1-1: USB disconnect, device number 4
[ 3015.848782][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3015.928652][T24524] usb 6-1: Using ep0 maxpacket: 32
[ 3015.948707][T11171] hub 4-1:0.0: activate --> -90
[ 3015.988696][T15202] hub 5-1:0.0: activate --> -90
[ 3016.048940][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3016.060991][T24524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3016.070728][T24524] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3016.079805][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3016.088977][T24524] usb 6-1: config 0 descriptor??
[ 3016.128993][T24524] hub 6-1:0.0: USB hub found
[ 3016.268691][T28702] usb 4-1: USB disconnect, device number 79
[ 3016.308688][ T7975] usb 5-1: USB disconnect, device number 40
[ 3016.348672][T24524] hub 6-1:0.0: 1 port detected
22:16:56 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:16:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(0x0, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:16:56 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3016.776864][   T28] audit: type=1804 audit(1598480216.272:103352): pid=11913 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3127/bus" dev="sda1" ino=16262 res=1 errno=0
22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(0x0, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(0x0, 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 3016.988607][T11179] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 3016.999054][T28702] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 3017.009022][T24525] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 3017.056211][   T28] audit: type=1804 audit(1598480216.552:103353): pid=11921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3190/bus" dev="sda1" ino=16371 res=1 errno=0
22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 3017.158630][T24524] hub 6-1:0.0: activate --> -90
22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb)

[ 3017.228566][T11179] usb 1-1: Using ep0 maxpacket: 16
[ 3017.238679][T28702] usb 4-1: Using ep0 maxpacket: 16
[ 3017.248799][T24525] usb 5-1: Using ep0 maxpacket: 16
22:16:56 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

[ 3017.348604][T11179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3017.362504][T28702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3017.375392][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3017.388995][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3017.398139][T11179] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3017.408670][T28702] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3017.417841][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3017.426325][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3017.434657][T28702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3017.444517][T11179] usb 1-1: config 0 descriptor??
[ 3017.451273][T28702] usb 4-1: config 0 descriptor??
[ 3017.463776][T24525] usb 5-1: config 0 descriptor??
[ 3017.478886][T11171] usb 6-1: USB disconnect, device number 34
[ 3017.517194][T28702] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3017.526753][T11179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3017.534449][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3017.712098][T24525] usb 5-1: USB disconnect, device number 41
[ 3017.723081][T11171] usb 4-1: USB disconnect, device number 80
[ 3017.723758][T11179] usb 1-1: USB disconnect, device number 5
22:16:57 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3018.158572][T15202] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 3018.278499][T24525] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 3018.298846][T11179] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 3018.308494][T11171] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 3018.398475][T15202] usb 6-1: Using ep0 maxpacket: 16
[ 3018.518481][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 3018.538837][T11179] usb 1-1: Using ep0 maxpacket: 32
[ 3018.550006][T15202] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3018.563052][T11171] usb 4-1: Using ep0 maxpacket: 32
[ 3018.568238][T15202] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3018.577677][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3018.588065][T15202] usb 6-1: config 0 descriptor??
[ 3018.632967][T15202] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3018.638828][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3018.656008][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3018.666132][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3018.677062][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3018.686148][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3018.695902][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3018.698959][T11171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3018.703912][T11179] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3018.718149][T11171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3018.724059][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3018.737111][T11171] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3018.742325][T24525] usb 5-1: config 0 descriptor??
[ 3018.753956][T11171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3018.762113][T11179] usb 1-1: config 0 descriptor??
[ 3018.776200][T11171] usb 4-1: config 0 descriptor??
[ 3018.798940][T24525] hub 5-1:0.0: USB hub found
[ 3018.810157][T11179] hub 1-1:0.0: USB hub found
[ 3018.828797][T11171] hub 4-1:0.0: USB hub found
[ 3018.845357][T15202] usb 6-1: USB disconnect, device number 35
[ 3019.018446][T24525] hub 5-1:0.0: 1 port detected
[ 3019.032277][T11179] hub 1-1:0.0: 1 port detected
[ 3019.038448][T11171] hub 4-1:0.0: 1 port detected
[ 3019.428400][T15202] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 3019.668385][T15202] usb 6-1: Using ep0 maxpacket: 32
[ 3019.788708][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3019.799941][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3019.811032][T15202] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3019.819164][T24525] usb 1-1: USB disconnect, device number 6
[ 3019.825667][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3019.828461][T11179] hub 5-1:0.0: activate --> -90
[ 3019.837638][T11171] hub 4-1:0.0: activate --> -90
[ 3019.838922][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3019.863144][T15202] usb 6-1: config 0 descriptor??
[ 3019.918728][T15202] hub 6-1:0.0: USB hub found
[ 3020.148426][T15202] hub 6-1:0.0: 1 port detected
[ 3020.148442][T11179] usb 5-1: USB disconnect, device number 42
[ 3020.168384][T11171] usb 4-1: USB disconnect, device number 81
22:17:00 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:00 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

22:17:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3020.620097][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 3020.620108][   T28] audit: type=1804 audit(1598480220.123:103357): pid=12043 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3194/bus" dev="sda1" ino=16274 res=1 errno=0
[ 3020.702901][   T28] audit: type=1804 audit(1598480220.153:103358): pid=12047 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3128/bus" dev="sda1" ino=16263 res=1 errno=0
[ 3020.738561][   T28] audit: type=1804 audit(1598480220.153:103359): pid=12048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3593/bus" dev="sda1" ino=16269 res=1 errno=0
22:17:00 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb)

[ 3020.864979][   T28] audit: type=1804 audit(1598480220.363:103360): pid=12054 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3195/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3020.889181][T15202] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 3020.898498][T28089] usb 5-1: new high-speed USB device number 43 using dummy_hcd
22:17:00 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x0)

[ 3021.039663][ T7975] hub 6-1:0.0: activate --> -90
[ 3021.064679][   T28] audit: type=1804 audit(1598480220.563:103361): pid=12056 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3196/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3021.238985][T15202] usb 1-1: Using ep0 maxpacket: 16
22:17:00 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x0)

[ 3021.298533][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 3021.350268][   T28] audit: type=1804 audit(1598480220.853:103362): pid=12060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3197/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3021.377899][T11179] usb 6-1: USB disconnect, device number 36
[ 3021.607778][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3021.647087][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3021.669563][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3021.700261][T15202] usb 1-1: config 0 descriptor??
22:17:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3021.719944][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3021.776553][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3021.790704][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3021.880900][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3021.922425][   T28] audit: type=1804 audit(1598480221.403:103363): pid=12074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3129/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3021.964608][T28089] usb 5-1: config 0 descriptor??
22:17:01 executing program 2:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(r0, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x0)

[ 3022.015293][T11179] usb 1-1: USB disconnect, device number 7
22:17:01 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3022.184826][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3022.278030][   T28] audit: type=1804 audit(1598480221.753:103364): pid=12086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3569/bus" dev="sda1" ino=16274 res=1 errno=0
[ 3022.305178][T24525] usb 5-1: USB disconnect, device number 43
[ 3022.447568][   T28] audit: type=1804 audit(1598480221.943:103365): pid=12095 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir582567716/syzkaller.ZJjvkq/3198/bus" dev="sda1" ino=16258 res=1 errno=0
22:17:02 executing program 5:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46000)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffb)

[ 3022.583106][   T28] audit: type=1804 audit(1598480222.083:103366): pid=12099 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3570/bus" dev="sda1" ino=16262 res=1 errno=0
[ 3022.598197][T11179] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 3022.868130][T11179] usb 1-1: Using ep0 maxpacket: 32
[ 3022.873301][T24525] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 3022.998438][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3023.009452][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3023.019899][T11179] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3023.029366][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3023.038028][T11179] usb 1-1: config 0 descriptor??
[ 3023.078484][T11179] hub 1-1:0.0: USB hub found
[ 3023.128110][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 3023.248595][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3023.259553][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3023.270140][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3023.279639][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3023.289789][T24525] usb 5-1: config 0 descriptor??
[ 3023.298120][T11179] hub 1-1:0.0: 1 port detected
[ 3023.328500][T24525] hub 5-1:0.0: USB hub found
[ 3023.548123][T24525] hub 5-1:0.0: 1 port detected
[ 3024.048667][T24524] usb 1-1: USB disconnect, device number 8
[ 3024.068067][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3024.368069][T28702] hub 5-1:0.0: activate --> -90
[ 3024.698082][T28702] usb 5-1: USB disconnect, device number 44
22:17:04 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:04 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:04 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(0x0, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:04 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3025.427963][T24524] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 3025.435756][T28702] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 3025.449428][T11179] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 3025.457124][T24525] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 3025.707927][T24525] usb 3-1: Using ep0 maxpacket: 16
[ 3025.713094][T24524] usb 6-1: Using ep0 maxpacket: 16
[ 3025.718245][T28702] usb 5-1: Using ep0 maxpacket: 16
[ 3025.724477][T11179] usb 1-1: Using ep0 maxpacket: 16
[ 3025.847987][T28702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3025.861160][T11179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3025.874157][T24525] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3025.888066][T24524] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3026.641482][T11179] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3026.651743][T24524] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3026.651762][T24525] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3026.670551][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3026.684221][T28702] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3026.704513][T24524] usb 6-1: config 0 descriptor??
[ 3026.710287][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3026.730919][T28702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3026.744679][T11179] usb 1-1: config 0 descriptor??
[ 3026.778872][T28702] usb 5-1: config 0 descriptor??
[ 3026.784131][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3026.822088][T24524] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3026.832449][T28702] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3026.879427][T24525] usb 3-1: config 0 descriptor??
[ 3026.912439][T11179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3026.940313][T24525] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3026.977165][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 3026.977177][   T28] audit: type=1804 audit(1598480226.473:103369): pid=12171 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3131/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3027.027285][T28089] usb 5-1: USB disconnect, device number 45
[ 3027.111278][T15202] usb 1-1: USB disconnect, device number 9
[ 3027.131063][ T7975] usb 6-1: USB disconnect, device number 37
[ 3027.157609][T24525] usb 3-1: USB disconnect, device number 27
22:17:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3027.597773][T11179] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 3027.597812][T28089] usb 5-1: new high-speed USB device number 46 using dummy_hcd
22:17:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3027.697789][ T7975] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 3027.747782][T24525] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 3027.787555][   T28] audit: type=1804 audit(1598480227.283:103370): pid=12206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3132/bus" dev="sda1" ino=16274 res=1 errno=0
[ 3027.813506][   T28] audit: type=1804 audit(1598480227.293:103371): pid=12205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3595/bus" dev="sda1" ino=16280 res=1 errno=0
[ 3027.868217][T11179] usb 1-1: Using ep0 maxpacket: 32
[ 3027.878427][T28089] usb 5-1: Using ep0 maxpacket: 32
[ 3027.960790][ T7975] usb 6-1: Using ep0 maxpacket: 32
[ 3028.008541][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3028.020232][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3028.020846][T24525] usb 3-1: Using ep0 maxpacket: 32
[ 3028.037135][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3028.038952][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3028.060300][T11179] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3028.069496][T28089] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3028.073863][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.087049][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.103204][T28089] usb 5-1: config 0 descriptor??
[ 3028.108411][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3028.124138][T11179] usb 1-1: config 0 descriptor??
[ 3028.129329][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3028.139886][ T7975] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3028.149186][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.168376][T28089] hub 5-1:0.0: USB hub found
[ 3028.175558][ T7975] usb 6-1: config 0 descriptor??
22:17:07 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3028.180304][T11179] hub 1-1:0.0: USB hub found
22:17:07 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:07 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3028.208243][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:17:07 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3028.208259][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3028.208276][T24525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3028.208290][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.209934][ T7975] hub 6-1:0.0: USB hub found
[ 3028.210934][T24525] usb 3-1: config 0 descriptor??
[ 3028.258759][T24525] hub 3-1:0.0: USB hub found
[ 3028.308295][T28089] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3028.311158][T28089] usbhid 5-1:0.0: can't add hid device: -22
[ 3028.311204][T28089] usbhid: probe of 5-1:0.0 failed with error -22
[ 3028.344611][T28089] usb 5-1: USB disconnect, device number 46
[ 3028.488065][T11179] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3028.491721][T11179] usbhid 1-1:0.0: can't add hid device: -22
[ 3028.491757][T11179] usbhid: probe of 1-1:0.0 failed with error -22
[ 3028.507717][T24525] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3028.516113][T24525] usbhid 3-1:0.0: can't add hid device: -22
[ 3028.516146][T24525] usbhid: probe of 3-1:0.0 failed with error -22
[ 3028.528241][ T7975] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3028.531511][ T7975] usbhid 6-1:0.0: can't add hid device: -22
[ 3028.531569][ T7975] usbhid: probe of 6-1:0.0 failed with error -22
[ 3028.754916][ T7975] usb 6-1: USB disconnect, device number 38
[ 3029.037669][T28089] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 3029.147761][   T28] audit: type=1804 audit(1598480228.603:103372): pid=12254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3133/bus" dev="sda1" ino=16285 res=1 errno=0
[ 3029.297677][ T7975] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 3029.318049][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 3029.394581][T11179] usb 1-1: USB disconnect, device number 10
[ 3029.508126][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3029.549001][T24525] usb 3-1: reset high-speed USB device number 28 using dummy_hcd
[ 3029.607637][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3029.629204][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3029.641915][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3029.653393][T28089] usb 5-1: config 0 descriptor??
[ 3029.702185][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3029.728174][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3029.741074][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
22:17:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3029.750680][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3029.761421][ T7975] usb 6-1: config 0 descriptor??
[ 3029.801479][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3029.844965][   T28] audit: type=1804 audit(1598480229.343:103373): pid=12277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3134/bus" dev="sda1" ino=16288 res=1 errno=0
[ 3029.878571][T11179] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 3029.886194][T24525] usb 3-1: Using ep0 maxpacket: 16
[ 3029.901543][ T7975] usb 5-1: USB disconnect, device number 47
[ 3029.928105][T24525] usb 3-1: device firmware changed
[ 3029.933330][T24525] usb 3-1: USB disconnect, device number 28
[ 3030.012998][T28089] usb 6-1: USB disconnect, device number 39
[ 3030.127579][T11179] usb 1-1: Using ep0 maxpacket: 16
[ 3030.174107][   T28] audit: type=1804 audit(1598480229.673:103374): pid=12298 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3596/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3030.287640][T11179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3030.300527][T11179] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3030.310284][T24525] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 3030.317899][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3030.331973][T11179] usb 1-1: config 0 descriptor??
[ 3030.382966][T11179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3030.457570][ T7975] usb 5-1: new high-speed USB device number 48 using dummy_hcd
22:17:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3030.557547][T24525] usb 3-1: Using ep0 maxpacket: 16
[ 3030.567589][T28089] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 3030.580933][T11179] usb 1-1: USB disconnect, device number 11
[ 3030.671041][   T28] audit: type=1804 audit(1598480230.173:103375): pid=12314 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3135/bus" dev="sda1" ino=15841 res=1 errno=0
[ 3030.697568][T24525] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3030.697614][ T7975] usb 5-1: Using ep0 maxpacket: 32
[ 3030.711413][T24525] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3030.724620][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3030.735318][T24525] usb 3-1: config 0 descriptor??
[ 3030.792760][T24525] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3030.808696][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3030.827648][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3030.838733][ T7975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3030.848531][ T7975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3030.858219][ T7975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3030.866945][ T7975] usb 5-1: config 0 descriptor??
[ 3030.908039][ T7975] hub 5-1:0.0: USB hub found
[ 3030.937908][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3030.948915][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3030.959086][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3030.968546][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3030.977195][T28089] usb 6-1: config 0 descriptor??
22:17:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3031.011305][T24525] usb 3-1: USB disconnect, device number 29
[ 3031.019210][T28089] hub 6-1:0.0: USB hub found
[ 3031.090769][   T28] audit: type=1804 audit(1598480230.594:103376): pid=12340 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3597/bus" dev="sda1" ino=15908 res=1 errno=0
[ 3031.115007][ T7975] hub 5-1:0.0: 1 port detected
[ 3031.197510][T11179] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 3031.227513][T28089] hub 6-1:0.0: 1 port detected
22:17:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3031.457493][T11179] usb 1-1: Using ep0 maxpacket: 32
[ 3031.493592][   T28] audit: type=1804 audit(1598480230.994:103377): pid=12345 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3136/bus" dev="sda1" ino=15841 res=1 errno=0
[ 3031.587494][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3031.599933][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3031.610018][T11179] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3031.620121][T24525] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 3031.627698][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3031.641327][T11179] usb 1-1: config 0 descriptor??
[ 3031.697941][T11179] hub 1-1:0.0: USB hub found
[ 3031.867450][T24525] usb 3-1: Using ep0 maxpacket: 32
22:17:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3031.907475][T11179] hub 1-1:0.0: 1 port detected
[ 3031.907480][T11171] hub 5-1:0.0: activate --> -90
[ 3031.991376][   T28] audit: type=1804 audit(1598480231.494:103378): pid=12357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3598/bus" dev="sda1" ino=15908 res=1 errno=0
[ 3032.017821][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3032.028842][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3032.038751][T24525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3032.047438][T28089] hub 6-1:0.0: activate --> -90
[ 3032.048165][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3032.063453][T24525] usb 3-1: config 0 descriptor??
[ 3032.111053][T24525] hub 3-1:0.0: USB hub found
22:17:11 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3032.237508][T28089] usb 5-1: USB disconnect, device number 48
[ 3032.287499][T24525] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3032.298062][T24525] usbhid 3-1:0.0: can't add hid device: -22
[ 3032.304220][T24525] usbhid: probe of 3-1:0.0 failed with error -22
[ 3032.367512][T28089] usb 6-1: USB disconnect, device number 40
[ 3032.497578][T24525] usb 3-1: reset high-speed USB device number 30 using dummy_hcd
22:17:12 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3032.649135][ T7975] usb 1-1: USB disconnect, device number 12
[ 3032.667377][T11179] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3032.747382][T24525] usb 3-1: Using ep0 maxpacket: 16
[ 3032.798182][T24525] usb 3-1: device firmware changed
[ 3032.803404][T24525] usb 3-1: USB disconnect, device number 30
[ 3032.927383][T28702] usb 5-1: new high-speed USB device number 49 using dummy_hcd
22:17:12 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:12 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:12 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3033.168805][T28702] usb 5-1: Using ep0 maxpacket: 16
[ 3033.197338][T24525] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 3033.239847][   T28] audit: type=1804 audit(1598480232.744:103379): pid=12418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3137/bus" dev="sda1" ino=16135 res=1 errno=0
[ 3033.317436][T28702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3033.330470][T28702] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3033.339773][T28702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3033.350029][T28702] usb 5-1: config 0 descriptor??
[ 3033.391695][T28702] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3033.447343][T24525] usb 3-1: Using ep0 maxpacket: 16
[ 3033.447379][ T7975] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 3033.477548][T11179] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 3033.591207][T28702] usb 5-1: USB disconnect, device number 49
[ 3033.597316][T24525] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3033.612728][T24525] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3033.623709][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3033.633427][T24525] usb 3-1: config 0 descriptor??
[ 3033.681486][T24525] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3033.697402][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3033.737314][T11179] usb 1-1: Using ep0 maxpacket: 16
[ 3033.817358][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3033.830335][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3033.839909][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3033.850606][ T7975] usb 6-1: config 0 descriptor??
[ 3033.859422][T11179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3033.878210][T11179] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3033.889235][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3033.891554][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3033.905193][T11179] usb 1-1: config 0 descriptor??
[ 3033.925440][T24525] usb 3-1: USB disconnect, device number 31
[ 3033.961493][T11179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:17:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3034.104468][T11179] usb 6-1: USB disconnect, device number 41
[ 3034.147930][   T28] audit: type=1804 audit(1598480233.654:103380): pid=12464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3138/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3034.176195][ T5266] usb 1-1: USB disconnect, device number 13
[ 3034.198239][T28702] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 3034.457238][T28702] usb 5-1: Using ep0 maxpacket: 32
[ 3034.517255][T24525] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 3034.577695][T28702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3034.588808][T28702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3034.598744][T28702] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3034.608100][T28702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3034.616926][T28702] usb 5-1: config 0 descriptor??
[ 3034.687290][T11179] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 3034.695361][T28702] hub 5-1:0.0: USB hub found
[ 3034.747283][ T5266] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 3034.777205][T24525] usb 3-1: Using ep0 maxpacket: 32
[ 3034.897221][T28702] hub 5-1:0.0: 1 port detected
[ 3034.917511][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3034.928477][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3034.939044][T24525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3034.948513][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3034.967199][T11179] usb 6-1: Using ep0 maxpacket: 32
[ 3034.972648][T24525] usb 3-1: config 0 descriptor??
22:17:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3035.017304][ T5266] usb 1-1: Using ep0 maxpacket: 32
[ 3035.028174][T24525] hub 3-1:0.0: USB hub found
[ 3035.052040][   T28] audit: type=1804 audit(1598480234.554:103381): pid=12490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3139/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3035.117374][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3035.128596][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3035.138751][T11179] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3035.148080][T11179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3035.156661][T11179] usb 6-1: config 0 descriptor??
[ 3035.167528][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3035.183610][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3035.193802][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3035.203368][T11179] hub 6-1:0.0: USB hub found
[ 3035.208384][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3035.217663][ T5266] usb 1-1: config 0 descriptor??
[ 3035.237250][T24525] hub 3-1:0.0: 1 port detected
[ 3035.267939][ T5266] hub 1-1:0.0: USB hub found
[ 3035.417214][T11179] hub 6-1:0.0: 1 port detected
[ 3035.487217][ T5266] hub 1-1:0.0: 1 port detected
[ 3035.767235][T23800] hub 5-1:0.0: activate --> -90
22:17:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3035.968584][   T28] audit: type=1804 audit(1598480235.474:103382): pid=12514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3140/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3035.998546][T11171] usb 3-1: USB disconnect, device number 32
[ 3036.006037][   T28] audit: type=1804 audit(1598480235.504:103383): pid=12517 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3602/bus" dev="sda1" ino=16135 res=1 errno=0
[ 3036.037220][T23800] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3036.087349][T11179] usb 5-1: USB disconnect, device number 50
[ 3036.127130][T23800] hub 1-1:0.0: activate --> -90
[ 3036.277118][ T5266] hub 6-1:0.0: activate --> -90
22:17:16 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3036.489419][T11179] usb 1-1: USB disconnect, device number 14
[ 3036.508023][T23800] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3036.597953][T11171] usb 6-1: USB disconnect, device number 42
[ 3036.837141][T23800] usb 5-1: new high-speed USB device number 51 using dummy_hcd
22:17:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:16 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3037.082376][   T28] audit: type=1804 audit(1598480236.584:103384): pid=12566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3574/bus" dev="sda1" ino=16135 res=1 errno=0
[ 3037.107566][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 3037.113270][   T28] audit: type=1804 audit(1598480236.584:103385): pid=12565 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3603/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3037.137759][   T28] audit: type=1804 audit(1598480236.584:103386): pid=12567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3141/bus" dev="sda1" ino=16146 res=1 errno=0
[ 3037.277056][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3037.290024][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3037.299761][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3037.309023][T23800] usb 5-1: config 0 descriptor??
[ 3037.327035][ T5266] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 3037.351432][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:17:16 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3037.549083][T11171] usb 5-1: USB disconnect, device number 51
[ 3037.587013][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 3037.716990][ T7975] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 3037.727097][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3037.741125][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3037.750338][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3037.760262][ T5266] usb 1-1: config 0 descriptor??
[ 3037.809572][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:17:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3037.956987][ T7975] usb 3-1: Using ep0 maxpacket: 16
[ 3037.981901][   T28] audit: type=1804 audit(1598480237.484:103387): pid=12599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3604/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3038.011514][   T28] audit: type=1804 audit(1598480237.514:103388): pid=12600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3142/bus" dev="sda1" ino=16135 res=1 errno=0
[ 3038.012305][T28089] usb 1-1: USB disconnect, device number 15
[ 3038.041733][T11171] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 3038.106981][ T7975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3038.120147][ T7975] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3038.129494][ T7975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3038.139998][ T7975] usb 3-1: config 0 descriptor??
[ 3038.180831][ T7975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3038.206962][T15202] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 3038.286973][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3038.385038][ T7975] usb 3-1: USB disconnect, device number 33
[ 3038.407382][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3038.418477][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3038.428995][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3038.438623][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3038.446992][T15202] usb 6-1: Using ep0 maxpacket: 16
[ 3038.452796][T11171] usb 5-1: config 0 descriptor??
[ 3038.497422][T11171] hub 5-1:0.0: USB hub found
[ 3038.566976][T15202] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3038.582787][T15202] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3038.593392][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3038.602551][T28089] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 3038.612628][T15202] usb 6-1: config 0 descriptor??
[ 3038.660754][T15202] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3038.716934][T11171] hub 5-1:0.0: 1 port detected
22:17:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f0000000540))
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3038.849205][T28089] usb 1-1: Using ep0 maxpacket: 32
[ 3038.865671][T23800] usb 6-1: USB disconnect, device number 43
[ 3038.904840][   T28] audit: type=1804 audit(1598480238.404:103389): pid=12644 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3605/bus" dev="sda1" ino=16133 res=1 errno=0
[ 3038.934005][   T28] audit: type=1804 audit(1598480238.434:103390): pid=12645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3143/bus" dev="sda1" ino=16135 res=1 errno=0
[ 3038.967620][ T5266] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 3038.996932][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3039.009573][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3039.020074][T28089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3039.030811][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3039.040061][T28089] usb 1-1: config 0 descriptor??
[ 3039.079033][T28089] hub 1-1:0.0: USB hub found
[ 3039.226924][ T5266] usb 3-1: Using ep0 maxpacket: 32
[ 3039.296905][T28089] hub 1-1:0.0: 1 port detected
[ 3039.356900][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3039.367950][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3039.378490][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3039.386881][T11171] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[ 3039.391926][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3039.404982][ T5266] usb 3-1: config 0 descriptor??
[ 3039.459235][ T5266] hub 3-1:0.0: USB hub found
[ 3039.476855][T23800] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 3039.666892][ T5266] hub 3-1:0.0: 1 port detected
[ 3039.726855][T23800] usb 6-1: Using ep0 maxpacket: 32
[ 3039.857305][T23800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3039.868454][T23800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3039.879124][T23800] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3039.888257][T23800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3039.899264][T23800] usb 6-1: config 0 descriptor??
[ 3039.946875][T28089] hub 1-1:0.0: activate --> -90
[ 3039.947184][T23800] hub 6-1:0.0: USB hub found
[ 3040.156820][T23800] hub 6-1:0.0: 1 port detected
[ 3040.267319][ T5266] usb 1-1: USB disconnect, device number 16
[ 3040.286820][T28089] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3040.316873][T11179] hub 3-1:0.0: activate --> -90
22:17:20 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f0000000540))
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3040.629493][ T7975] usb 3-1: USB disconnect, device number 34
[ 3040.646799][T11179] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3040.695897][   T28] audit: type=1804 audit(1598480240.194:103391): pid=12698 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3144/bus" dev="sda1" ino=16243 res=1 errno=0
22:17:20 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3040.727489][   T28] audit: type=1804 audit(1598480240.194:103392): pid=12699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3606/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3040.806749][T11179] hub 6-1:0.0: activate --> -90
[ 3040.867018][T28089] usb 5-1: reset high-speed USB device number 52 using dummy_hcd
[ 3041.076731][ T5266] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 3041.106738][T28089] usb 5-1: Using ep0 maxpacket: 16
22:17:20 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3041.129470][T23800] usb 6-1: USB disconnect, device number 44
[ 3041.146749][T11179] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3041.147007][T28089] usb 5-1: device firmware changed
[ 3041.175345][T28089] usb 5-1: USB disconnect, device number 52
[ 3041.336728][ T5266] usb 1-1: Using ep0 maxpacket: 16
22:17:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3041.476739][T11179] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 3041.484376][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3041.497252][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3041.506275][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f0000000540))
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3041.518883][   T28] audit: type=1804 audit(1598480241.024:103393): pid=12724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3607/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3041.536862][T28089] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 3041.545215][ T5266] usb 1-1: config 0 descriptor??
[ 3041.589267][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:17:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3041.786686][T11179] usb 3-1: Using ep0 maxpacket: 16
[ 3041.793539][T11171] usb 1-1: USB disconnect, device number 17
[ 3041.807760][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 3041.926784][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3041.936697][T11179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3041.942520][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3041.952405][ T5266] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 3041.963230][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3041.971245][T11179] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3041.979690][T28089] usb 5-1: config 0 descriptor??
[ 3041.990729][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3042.005016][T11179] usb 3-1: config 0 descriptor??
[ 3042.042020][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3042.069369][T11179] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3042.236644][ T5266] usb 6-1: Using ep0 maxpacket: 16
[ 3042.244041][T28089] usb 5-1: USB disconnect, device number 53
22:17:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3042.285669][T11179] usb 3-1: USB disconnect, device number 35
[ 3042.356693][T11171] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 3042.367541][ T5266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3042.381007][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 3042.381019][   T28] audit: type=1804 audit(1598480241.884:103395): pid=12769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3608/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3042.382606][ T5266] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3042.420965][ T5266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3042.431241][ T5266] usb 6-1: config 0 descriptor??
22:17:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[0x0])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3042.468968][ T5266] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3042.568714][   T28] audit: type=1804 audit(1598480242.074:103396): pid=12781 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3146/bus" dev="sda1" ino=16243 res=1 errno=0
[ 3042.606621][T11171] usb 1-1: Using ep0 maxpacket: 32
[ 3042.677768][ T5266] usb 6-1: USB disconnect, device number 45
[ 3042.726651][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3042.738031][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3042.748075][T11171] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3042.757636][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3042.766393][T11171] usb 1-1: config 0 descriptor??
[ 3042.806734][T28089] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 3042.814756][T11171] hub 1-1:0.0: USB hub found
[ 3042.916673][T11179] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 3043.016675][T11171] hub 1-1:0.0: 1 port detected
[ 3043.056631][T28089] usb 5-1: Using ep0 maxpacket: 32
22:17:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3043.166572][T11179] usb 3-1: Using ep0 maxpacket: 32
[ 3043.176694][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3043.187716][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3043.198678][T28089] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3043.217273][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3043.230970][T28089] usb 5-1: config 0 descriptor??
[ 3043.256702][ T5266] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 3043.273143][   T28] audit: type=1804 audit(1598480242.774:103397): pid=12801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3609/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3043.273749][T28089] hub 5-1:0.0: USB hub found
[ 3043.316971][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3043.329105][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3043.338899][T11179] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3043.348059][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3043.357978][T11179] usb 3-1: config 0 descriptor??
22:17:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[0x0])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3043.399022][T11179] hub 3-1:0.0: USB hub found
[ 3043.476627][T28089] hub 5-1:0.0: 1 port detected
[ 3043.486177][   T28] audit: type=1804 audit(1598480242.984:103398): pid=12812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3147/bus" dev="sda1" ino=16243 res=1 errno=0
[ 3043.556562][ T5266] usb 6-1: Using ep0 maxpacket: 32
[ 3043.616582][T11179] hub 3-1:0.0: 1 port detected
[ 3043.666974][T11171] hub 1-1:0.0: activate --> -90
[ 3043.686608][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3043.697626][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3043.707757][ T5266] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3043.717059][ T5266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3043.728416][ T5266] usb 6-1: config 0 descriptor??
[ 3043.776983][ T5266] hub 6-1:0.0: USB hub found
[ 3043.988241][T28702] usb 1-1: USB disconnect, device number 18
[ 3043.996596][ T5266] hub 6-1:0.0: 1 port detected
[ 3044.007037][T11171] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3044.116544][T11171] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[ 3044.246672][T11179] hub 3-1:0.0: activate --> -90
[ 3044.577453][T11171] usb 3-1: USB disconnect, device number 36
[ 3044.596492][T11179] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3044.666475][T23800] hub 6-1:0.0: hub_ext_port_status failed (err = 0)
22:17:24 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[0x0])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:24 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:24 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3045.404398][   T28] audit: type=1804 audit(1598480244.905:103399): pid=12867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3148/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3045.433539][   T28] audit: type=1804 audit(1598480244.935:103400): pid=12868 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3610/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3045.606607][T11179] usb 5-1: reset high-speed USB device number 54 using dummy_hcd
[ 3045.626727][T23800] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 3045.634407][ T5266] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 3045.846400][T11179] usb 5-1: Using ep0 maxpacket: 16
22:17:25 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3045.876361][ T5266] usb 1-1: Using ep0 maxpacket: 16
[ 3045.887736][T23800] usb 3-1: Using ep0 maxpacket: 16
[ 3045.896025][T11179] usb 5-1: device firmware changed
[ 3045.901376][T11179] usb 5-1: USB disconnect, device number 54
[ 3046.016469][ T5266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3046.029336][T23800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3046.042275][ T5266] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3046.052192][T23800] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3046.061682][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3046.070137][T23800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3046.079424][T23800] usb 3-1: config 0 descriptor??
[ 3046.085009][ T5266] usb 1-1: config 0 descriptor??
[ 3046.141845][ T5266] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3046.149961][T23800] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3046.157336][ T7975] usb 6-1: reset high-speed USB device number 46 using dummy_hcd
22:17:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3046.267598][T11179] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 3046.303252][   T28] audit: type=1804 audit(1598480245.805:103401): pid=12901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3149/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3046.332708][   T28] audit: type=1804 audit(1598480245.835:103402): pid=12902 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3611/bus" dev="sda1" ino=16328 res=1 errno=0
[ 3046.361761][T28089] usb 1-1: USB disconnect, device number 19
[ 3046.376218][T11171] usb 3-1: USB disconnect, device number 37
[ 3046.417199][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3046.467900][ T7975] usb 6-1: device firmware changed
[ 3046.473097][ T7975] usb 6-1: USB disconnect, device number 46
[ 3046.526352][T11179] usb 5-1: Using ep0 maxpacket: 16
[ 3046.646394][T11179] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3046.659601][T11179] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3046.668697][T11179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3046.679848][T11179] usb 5-1: config 0 descriptor??
[ 3046.719825][T11179] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3046.846357][ T7975] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 3046.918358][T15202] usb 5-1: USB disconnect, device number 55
[ 3046.966304][T28089] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 3046.973950][T11171] usb 3-1: new high-speed USB device number 38 using dummy_hcd
22:17:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3047.116273][ T7975] usb 6-1: Using ep0 maxpacket: 16
22:17:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3047.212719][   T28] audit: type=1804 audit(1598480246.715:103403): pid=12941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3150/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3047.244286][   T28] audit: type=1804 audit(1598480246.745:103404): pid=12942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3612/bus" dev="sda1" ino=16328 res=1 errno=0
[ 3047.276350][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3047.289194][T28089] usb 1-1: Using ep0 maxpacket: 32
[ 3047.294321][T11171] usb 3-1: Using ep0 maxpacket: 32
[ 3047.299499][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3047.308576][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3047.318556][ T7975] usb 6-1: config 0 descriptor??
[ 3047.369038][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3047.436408][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3047.447379][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3047.458301][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3047.468217][T28089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3047.478035][T11171] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3047.487107][T28089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3047.496236][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3047.504327][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3047.512360][T15202] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 3047.522402][T11171] usb 3-1: config 0 descriptor??
[ 3047.530445][T28089] usb 1-1: config 0 descriptor??
[ 3047.579068][T11179] usb 6-1: USB disconnect, device number 47
[ 3047.593753][T28089] hub 1-1:0.0: USB hub found
[ 3047.598518][T11171] hub 3-1:0.0: USB hub found
[ 3047.766263][T15202] usb 5-1: Using ep0 maxpacket: 32
[ 3047.797353][T28089] hub 1-1:0.0: 1 port detected
[ 3047.802313][T11171] hub 3-1:0.0: 1 port detected
[ 3047.916297][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3047.928439][T15202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3047.938976][T15202] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3047.949335][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3047.960429][T15202] usb 5-1: config 0 descriptor??
22:17:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3048.018304][T15202] hub 5-1:0.0: USB hub found
22:17:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3048.120892][   T28] audit: type=1804 audit(1598480247.625:103405): pid=12974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3151/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3048.145079][T11179] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 3048.157645][   T28] audit: type=1804 audit(1598480247.665:103406): pid=12975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3613/bus" dev="sda1" ino=16328 res=1 errno=0
[ 3048.226268][T15202] hub 5-1:0.0: 1 port detected
[ 3048.396162][T11179] usb 6-1: Using ep0 maxpacket: 32
[ 3048.436226][T28089] hub 1-1:0.0: activate --> -90
[ 3048.441159][T11171] hub 3-1:0.0: activate --> -90
[ 3048.516533][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3048.528816][T11179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3048.538607][T11179] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3048.549029][T11179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3048.560098][T11179] usb 6-1: config 0 descriptor??
[ 3048.606785][T11179] hub 6-1:0.0: USB hub found
[ 3048.747450][T15202] usb 3-1: USB disconnect, device number 38
[ 3048.766220][T28089] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3048.767009][T23800] usb 1-1: USB disconnect, device number 20
[ 3048.786172][T11171] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3048.826151][T11179] hub 6-1:0.0: 1 port detected
[ 3048.886175][T11171] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[ 3049.476156][T23800] hub 6-1:0.0: hub_ext_port_status failed (err = 0)
22:17:29 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:17:29 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:29 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3050.188344][   T28] audit: type=1804 audit(1598480249.695:103407): pid=13024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3152/bus" dev="sda1" ino=16274 res=1 errno=0
[ 3050.227371][   T28] audit: type=1804 audit(1598480249.725:103408): pid=13025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3614/bus" dev="sda1" ino=16270 res=1 errno=0
[ 3050.376695][T15202] usb 5-1: reset high-speed USB device number 56 using dummy_hcd
[ 3050.406641][T11171] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 3050.414451][T23800] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 3050.666006][T11171] usb 3-1: Using ep0 maxpacket: 16
[ 3050.671393][T15202] usb 5-1: Using ep0 maxpacket: 16
22:17:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3050.736998][T15202] usb 5-1: device firmware changed
[ 3050.746513][T15202] usb 5-1: USB disconnect, device number 56
[ 3050.766019][T23800] usb 1-1: Using ep0 maxpacket: 16
[ 3050.827131][T11171] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3050.859372][T11171] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3050.876364][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3050.886009][T23800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3050.901334][T11171] usb 3-1: config 0 descriptor??
[ 3050.923079][T23800] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3051.154859][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3051.160164][T11171] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3051.163918][T23800] usb 1-1: config 0 descriptor??
[ 3051.196108][T28089] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 3051.325939][T15202] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 3051.370664][T11171] usb 3-1: USB disconnect, device number 39
[ 3051.495951][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3051.546515][T28089] usb 6-1: device firmware changed
[ 3051.553528][T28089] usb 6-1: USB disconnect, device number 48
[ 3051.585902][T15202] usb 5-1: Using ep0 maxpacket: 16
[ 3051.716315][T15202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3051.766407][T23800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3051.776800][T23800] usb 1-1: USB disconnect, device number 21
22:17:31 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3051.859710][T15202] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3051.890587][T15202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3051.913756][T15202] usb 5-1: config 0 descriptor??
[ 3051.935569][   T28] audit: type=1804 audit(1598480251.435:103409): pid=13077 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3153/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3051.967150][T28089] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 3051.988802][T15202] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3051.996151][T11171] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 3052.165888][T23800] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 3052.188392][ T5266] usb 5-1: USB disconnect, device number 57
22:17:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3052.237715][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3052.265867][T11171] usb 3-1: Using ep0 maxpacket: 32
[ 3052.366644][T28089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3052.381199][T28089] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3052.390900][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3052.403679][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3052.405868][T23800] usb 1-1: Using ep0 maxpacket: 32
[ 3052.412191][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3052.428655][T11171] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3052.438288][T28089] usb 6-1: config 0 descriptor??
[ 3052.443465][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3052.457723][T11171] usb 3-1: config 0 descriptor??
[ 3052.488904][T28089] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3052.496764][T11171] hub 3-1:0.0: USB hub found
[ 3052.545921][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3052.562046][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3052.582259][T23800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3052.591413][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3052.600264][T23800] usb 1-1: config 0 descriptor??
[ 3052.646329][T23800] hub 1-1:0.0: USB hub found
[ 3052.674109][   T28] audit: type=1804 audit(1598480252.175:103410): pid=13104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3615/bus" dev="sda1" ino=16288 res=1 errno=0
[ 3052.715356][T28089] usb 6-1: USB disconnect, device number 49
[ 3052.722426][T11171] hub 3-1:0.0: 1 port detected
22:17:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3052.755857][ T5266] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 3052.848877][   T28] audit: type=1804 audit(1598480252.355:103411): pid=13113 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3154/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3052.873063][T23800] hub 1-1:0.0: 1 port detected
[ 3052.995854][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 3053.115855][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3053.126897][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3053.138068][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3053.147485][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3053.157180][ T5266] usb 5-1: config 0 descriptor??
[ 3053.199198][ T5266] hub 5-1:0.0: USB hub found
[ 3053.315911][T28089] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 3053.355858][T11171] hub 3-1:0.0: activate --> -90
22:17:32 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3053.455818][ T5266] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3053.475445][ T5266] usbhid 5-1:0.0: can't add hid device: -22
[ 3053.481626][ T5266] usbhid: probe of 5-1:0.0 failed with error -22
[ 3053.525864][T11179] hub 1-1:0.0: activate --> -90
[ 3053.565821][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3053.575401][   T28] audit: type=1804 audit(1598480253.075:103412): pid=13135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3616/bus" dev="sda1" ino=16320 res=1 errno=0
22:17:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3053.665944][ T5266] usb 5-1: reset high-speed USB device number 58 using dummy_hcd
[ 3053.690867][T23800] usb 3-1: USB disconnect, device number 40
[ 3053.706862][T11171] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3053.713677][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3053.738947][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3053.749347][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3053.758691][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3053.768226][T28089] usb 6-1: config 0 descriptor??
[ 3053.787475][   T28] audit: type=1804 audit(1598480253.295:103413): pid=13149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3155/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3053.812058][T28089] hub 6-1:0.0: USB hub found
[ 3053.847512][T11171] usb 1-1: USB disconnect, device number 22
[ 3053.865783][T11179] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
22:17:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3053.905829][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 3053.946145][ T5266] usb 5-1: device firmware changed
[ 3053.951562][ T5266] usb 5-1: USB disconnect, device number 58
[ 3053.997390][T28089] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3054.007802][   T28] audit: type=1804 audit(1598480253.515:103414): pid=13168 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3579/bus" dev="sda1" ino=16269 res=1 errno=0
[ 3054.009790][T28089] usbhid 6-1:0.0: can't add hid device: -22
[ 3054.038193][T28089] usbhid: probe of 6-1:0.0 failed with error -22
[ 3054.066340][T28089] usb 6-1: USB disconnect, device number 50
22:17:33 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:33 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3054.325719][ T5266] usb 5-1: new high-speed USB device number 59 using dummy_hcd
22:17:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
lseek(0xffffffffffffffff, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3054.470318][   T28] audit: type=1804 audit(1598480253.975:103415): pid=13184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3617/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3054.496269][T11171] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 3054.565715][ T5266] usb 5-1: Using ep0 maxpacket: 16
22:17:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3054.655787][T28089] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 3054.685752][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3054.698741][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3054.711434][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3054.720315][   T28] audit: type=1804 audit(1598480254.225:103416): pid=13187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3156/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3054.723894][ T5266] usb 5-1: config 0 descriptor??
[ 3054.785723][T11171] usb 3-1: Using ep0 maxpacket: 16
22:17:34 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3054.809058][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3054.915736][T11171] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3054.928567][T28089] usb 1-1: Using ep0 maxpacket: 16
[ 3054.935233][T11171] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3054.944601][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3054.956106][T11171] usb 3-1: config 0 descriptor??
[ 3054.998923][T11171] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3055.010302][T11171] usb 5-1: USB disconnect, device number 59
[ 3055.055922][T28089] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3055.068801][T28089] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3055.078709][T28089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3055.088761][T28089] usb 1-1: config 0 descriptor??
[ 3055.125664][ T5266] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 3055.148428][T28089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3055.199513][T23800] usb 3-1: USB disconnect, device number 41
22:17:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3055.347491][T24525] usb 1-1: USB disconnect, device number 23
[ 3055.361178][   T28] audit: type=1804 audit(1598480254.865:103417): pid=13228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3618/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3055.365663][ T5266] usb 6-1: Using ep0 maxpacket: 16
[ 3055.525708][ T5266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3055.541001][ T5266] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3055.554027][ T5266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3055.578253][ T5266] usb 6-1: config 0 descriptor??
[ 3055.641033][ T5266] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3055.730508][   T28] audit: type=1804 audit(1598480255.235:103418): pid=13239 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3157/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3055.895643][T11171] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 3055.905590][T28089] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 3055.926897][ T5177] usb 6-1: USB disconnect, device number 51
[ 3055.955846][T24525] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 3056.335552][T24525] usb 1-1: Using ep0 maxpacket: 32
22:17:35 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3056.455843][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3056.567386][T28089] usb 3-1: Using ep0 maxpacket: 32
[ 3056.572542][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3056.593173][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3056.616805][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3056.648506][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3056.688115][T24525] usb 1-1: config 0 descriptor??
[ 3056.736048][T24525] hub 1-1:0.0: USB hub found
22:17:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(0x0, 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3056.875586][T11171] usb 5-1: device descriptor read/all, error -71
[ 3056.915551][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3056.932000][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3056.957084][T24525] hub 1-1:0.0: 1 port detected
[ 3056.961653][T28089] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3056.971525][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3056.982719][T28089] usb 3-1: config 0 descriptor??
[ 3057.026100][T28089] hub 3-1:0.0: USB hub found
22:17:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3057.155515][ T5177] usb 6-1: new high-speed USB device number 52 using dummy_hcd
22:17:36 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3057.245910][T11171] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 3057.267078][T28089] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3057.286321][T28089] usbhid 3-1:0.0: can't add hid device: -22
[ 3057.299585][T28089] usbhid: probe of 3-1:0.0 failed with error -22
[ 3057.416405][ T5177] usb 6-1: Using ep0 maxpacket: 32
[ 3057.515206][   T28] audit: type=1804 audit(1598480257.016:103419): pid=13279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3619/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3057.516003][T28089] usb 3-1: reset high-speed USB device number 42 using dummy_hcd
[ 3057.560343][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3057.567321][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3057.588711][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3057.614948][ T5177] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3057.624080][T24525] hub 1-1:0.0: activate --> -90
[ 3057.634166][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3057.681843][ T5177] usb 6-1: config 0 descriptor??
[ 3057.795907][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3057.810971][ T5177] hub 6-1:0.0: USB hub found
[ 3057.815701][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3057.824783][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3057.835974][T11171] usb 5-1: config 0 descriptor??
22:17:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3057.955509][ T5177] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3057.972500][ T5177] usbhid 6-1:0.0: can't add hid device: -22
[ 3057.995470][T28089] usb 3-1: Using ep0 maxpacket: 16
[ 3058.010772][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3058.039000][ T5177] usbhid: probe of 6-1:0.0 failed with error -22
22:17:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(0x0, 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3058.075735][T28089] usb 3-1: device firmware changed
[ 3058.082141][T28089] usb 3-1: USB disconnect, device number 42
[ 3058.118290][T24525] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3058.135998][ T5177] usb 6-1: USB disconnect, device number 52
[ 3058.165439][T24525] usb 1-1: Failed to suspend device, error -71
[ 3058.182291][T11171] usb 1-1: USB disconnect, device number 24
[ 3058.213899][T24525] usb 5-1: USB disconnect, device number 61
[ 3059.222003][   T28] audit: type=1804 audit(1598480257.816:103420): pid=13322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3581/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3059.307518][   T28] audit: type=1804 audit(1598480258.716:103421): pid=13321 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3581/bus" dev="sda1" ino=16323 res=1 errno=0
22:17:38 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(0x0, 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3059.416873][T28089] usb 3-1: new high-speed USB device number 43 using dummy_hcd
22:17:39 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3059.696955][T28089] usb 3-1: Using ep0 maxpacket: 16
[ 3059.716634][T11171] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 3059.825341][T28089] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3059.838443][T28089] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3059.869905][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3059.918569][T28089] usb 3-1: config 0 descriptor??
[ 3059.978039][T28089] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3059.985366][T11171] usb 1-1: Using ep0 maxpacket: 16
[ 3060.125495][T11171] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3060.138501][T11171] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3060.148501][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3060.155303][T24525] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 3060.160373][T11171] usb 1-1: config 0 descriptor??
[ 3060.179354][T28089] usb 3-1: USB disconnect, device number 43
[ 3060.208894][T11171] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3060.405288][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 3060.408618][T11171] usb 1-1: USB disconnect, device number 25
[ 3060.525323][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3060.538409][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3060.547845][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3060.600476][T24525] usb 5-1: config 0 descriptor??
[ 3060.647949][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3060.795462][T28089] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 3060.847779][ T5177] usb 5-1: USB disconnect, device number 62
[ 3061.012877][T11171] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 3061.075248][T28089] usb 3-1: Using ep0 maxpacket: 32
[ 3061.215286][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3061.226244][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3061.236253][T28089] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3061.245559][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3061.254241][T28089] usb 3-1: config 0 descriptor??
22:17:40 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, 'hR'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:17:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3061.284865][T11171] usb 1-1: Using ep0 maxpacket: 32
[ 3061.295557][T28089] hub 3-1:0.0: USB hub found
22:17:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

22:17:40 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3061.415560][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3061.426802][   T28] audit: type=1804 audit(1598480260.926:103422): pid=13387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3161/bus" dev="sda1" ino=15789 res=1 errno=0
[ 3061.451398][ T5177] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 3061.470331][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3061.480155][T28089] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3061.498978][T28089] usbhid 3-1:0.0: can't add hid device: -22
[ 3061.518514][T11171] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3061.528837][T28089] usbhid: probe of 3-1:0.0 failed with error -22
[ 3061.545469][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3061.558378][T11171] usb 1-1: config 0 descriptor??
[ 3061.615657][T11171] hub 1-1:0.0: USB hub found
[ 3061.705714][ T5177] usb 5-1: Using ep0 maxpacket: 32
[ 3061.726588][T28089] usb 3-1: reset high-speed USB device number 44 using dummy_hcd
[ 3061.835861][T11171] hub 1-1:0.0: 1 port detected
[ 3061.840691][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3061.851757][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3061.865516][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3061.874693][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3061.883977][ T5177] usb 5-1: config 0 descriptor??
[ 3061.892087][   T28] audit: type=1804 audit(1598480261.396:103423): pid=13405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3620/bus" dev="sda1" ino=16036 res=1 errno=0
[ 3061.945545][ T5177] hub 5-1:0.0: USB hub found
[ 3061.995172][T28089] usb 3-1: Using ep0 maxpacket: 16
[ 3062.025211][T23800] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 3062.041075][T28089] usb 3-1: device firmware changed
[ 3062.068059][T28089] usb 3-1: USB disconnect, device number 44
[ 3062.165179][ T5177] hub 5-1:0.0: 1 port detected
22:17:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3062.342166][   T28] audit: type=1804 audit(1598480261.846:103424): pid=13421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3162/bus" dev="sda1" ino=15829 res=1 errno=0
[ 3062.395230][T23800] usb 6-1: Using ep0 maxpacket: 16
[ 3062.475099][T28089] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 3062.495238][ T7975] hub 1-1:0.0: activate --> -90
[ 3062.516333][T23800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3062.531257][T23800] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3062.540353][T23800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3062.549795][T23800] usb 6-1: config 0 descriptor??
[ 3062.609225][T23800] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3063.115501][ T5177] usb 6-1: USB disconnect, device number 53
[ 3063.129428][T28089] usb 3-1: Using ep0 maxpacket: 16
[ 3063.206779][T11171] hub 5-1:0.0: hub_ext_port_status failed (err = 3)
22:17:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3063.257005][T28089] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3063.276896][T28089] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3063.385048][ T7975] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3063.392981][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3063.405983][T28089] usb 3-1: config 0 descriptor??
[ 3063.411939][T11171] usb 1-1: USB disconnect, device number 26
[ 3063.423645][T10366] usb 1-1: Failed to suspend device, error -19
22:17:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

[ 3063.447800][   T28] audit: type=1804 audit(1598480262.956:103425): pid=13449 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3163/bus" dev="sda1" ino=15829 res=1 errno=0
[ 3063.475458][T28089] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3063.635063][ T5177] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 3063.650169][T28089] usb 3-1: USB disconnect, device number 45
[ 3063.807746][   T28] audit: type=1804 audit(1598480263.316:103426): pid=13460 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3621/bus" dev="sda1" ino=16019 res=1 errno=0
[ 3063.905633][ T5177] usb 6-1: Using ep0 maxpacket: 32
22:17:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3064.045009][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3064.056118][ T5177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3064.065897][ T5177] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3064.075011][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3064.084951][ T5177] usb 6-1: config 0 descriptor??
[ 3064.137599][ T5177] hub 6-1:0.0: USB hub found
[ 3064.214988][T28089] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 3064.364985][ T5177] hub 6-1:0.0: 1 port detected
22:17:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3064.474928][T28089] usb 3-1: Using ep0 maxpacket: 32
[ 3064.482749][T23800] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 3064.495658][   T28] audit: type=1804 audit(1598480264.006:103427): pid=13476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3164/bus" dev="sda1" ino=16051 res=1 errno=0
22:17:44 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3064.846677][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:17:44 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3064.890271][T28089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3065.077313][T28089] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3065.127745][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3065.161065][T28089] usb 3-1: config 0 descriptor??
[ 3065.214930][T28089] usb 3-1: can't set config #0, error -71
[ 3065.224191][T28089] usb 3-1: USB disconnect, device number 46
[ 3065.334907][T11171] hub 6-1:0.0: hub_ext_port_status failed (err = 2)
[ 3065.344887][T23800] usb 1-1: Using ep0 maxpacket: 16
22:17:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3065.385314][ T5177] usb 5-1: reset high-speed USB device number 63 using dummy_hcd
[ 3065.464884][T23800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3065.477937][T23800] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3065.487719][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3065.500428][T23800] usb 1-1: config 0 descriptor??
[ 3065.508351][   T28] audit: type=1804 audit(1598480265.006:103428): pid=13500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3165/bus" dev="sda1" ino=16102 res=1 errno=0
[ 3065.567326][T23800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3065.635796][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 3065.675434][ T5177] usb 5-1: device firmware changed
[ 3065.681184][ T5177] usb 5-1: USB disconnect, device number 63
[ 3065.704849][T28089] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 3065.767258][T11171] usb 1-1: USB disconnect, device number 27
[ 3065.944824][T28089] usb 3-1: Using ep0 maxpacket: 16
[ 3066.084861][ T5177] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 3066.115175][T28089] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3066.128187][T28089] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3066.138398][T28089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3066.149060][T28089] usb 3-1: config 0 descriptor??
[ 3066.199587][T28089] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3066.335175][T11171] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 3066.364826][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 3066.398473][ T5266] usb 3-1: USB disconnect, device number 47
22:17:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:17:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

22:17:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3066.504858][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3066.517651][ T5177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3066.526800][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3066.535837][ T5177] usb 5-1: config 0 descriptor??
[ 3066.577139][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3066.589879][T11171] usb 1-1: Using ep0 maxpacket: 32
[ 3066.659546][   T28] audit: type=1804 audit(1598480266.156:103429): pid=13548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3622/bus" dev="sda1" ino=16244 res=1 errno=0
[ 3066.685322][   T28] audit: type=1804 audit(1598480266.156:103430): pid=13547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3166/bus" dev="sda1" ino=16228 res=1 errno=0
[ 3066.779200][T24525] usb 5-1: USB disconnect, device number 64
[ 3066.794885][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3066.813200][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3066.824491][T11171] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3066.834666][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3066.843890][T28089] usb 6-1: reset high-speed USB device number 54 using dummy_hcd
[ 3066.852520][T11171] usb 1-1: config 0 descriptor??
[ 3066.906554][T11171] hub 1-1:0.0: USB hub found
22:17:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3066.995178][ T5266] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 3067.095783][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3067.105070][T11171] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3067.144467][T11171] usbhid 1-1:0.0: can't add hid device: -22
[ 3067.152680][T28089] usb 6-1: device firmware changed
[ 3067.162300][T28089] usb 6-1: USB disconnect, device number 54
[ 3067.169653][T11171] usbhid: probe of 1-1:0.0 failed with error -22
[ 3067.254799][ T5266] usb 3-1: Using ep0 maxpacket: 32
[ 3067.345325][T24525] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 3067.461388][T11171] usb 1-1: reset high-speed USB device number 28 using dummy_hcd
[ 3067.614811][T28089] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 3067.744691][T11171] usb 1-1: Using ep0 maxpacket: 16
[ 3067.784876][T11171] usb 1-1: device firmware changed
[ 3067.790211][T11171] usb 1-1: USB disconnect, device number 28
[ 3067.884689][T28089] usb 6-1: Using ep0 maxpacket: 16
22:17:47 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x3, "6852c8"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3068.016918][T28089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
22:17:47 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3068.073910][T28089] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3068.135009][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.147822][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3068.159317][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3068.169309][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3068.178473][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.209800][T11171] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 3068.233230][ T5266] usb 3-1: config 0 descriptor??
22:17:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3068.280107][ T5266] usb 3-1: can't set config #0, error -71
[ 3068.289225][ T5266] usb 3-1: USB disconnect, device number 48
[ 3068.389761][T28089] usb 6-1: config 0 descriptor??
[ 3068.468852][T28089] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3068.485174][   T28] audit: type=1804 audit(1598480267.996:103431): pid=13600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3167/bus" dev="sda1" ino=16228 res=1 errno=0
[ 3068.604627][T11171] usb 1-1: Using ep0 maxpacket: 16
[ 3068.664630][ T5266] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 3068.675485][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 3068.707887][T28089] usb 6-1: USB disconnect, device number 55
[ 3068.725398][T11171] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3068.751070][T11171] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3068.763690][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.774707][T11171] usb 1-1: config 0 descriptor??
[ 3068.794799][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3068.818366][T11171] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3068.823112][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
22:17:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3068.869954][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.890186][T24525] usb 5-1: config 0 descriptor??
[ 3068.926245][ T5266] usb 3-1: Using ep0 maxpacket: 16
[ 3068.949340][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3069.018698][T24525] usb 1-1: USB disconnect, device number 29
[ 3069.045753][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3069.070013][ T5266] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3069.091557][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3069.113690][ T5266] usb 3-1: config 0 descriptor??
[ 3069.148721][T23800] usb 5-1: USB disconnect, device number 65
[ 3069.167675][ T5266] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
22:17:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3069.306236][T28089] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 3069.369861][ T5266] usb 3-1: USB disconnect, device number 49
[ 3069.452642][   T28] audit: type=1804 audit(1598480268.956:103432): pid=13647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3168/bus" dev="sda1" ino=16161 res=1 errno=0
[ 3069.554859][   T28] audit: type=1804 audit(1598480269.066:103433): pid=13650 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3623/bus" dev="sda1" ino=16336 res=1 errno=0
[ 3069.580184][T24525] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 3069.624206][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3069.735111][T23800] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 3069.824976][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 3069.934560][T11179] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 3069.945746][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:17:49 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3069.975683][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 3070.003439][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3070.046377][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3070.083820][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3070.096032][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3070.120450][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3070.142342][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3070.154003][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3070.185324][T24525] usb 1-1: config 0 descriptor??
[ 3070.200825][T23800] usb 5-1: config 0 descriptor??
[ 3070.224498][T11179] usb 3-1: Using ep0 maxpacket: 32
[ 3070.295303][T24525] usb 1-1: can't set config #0, error -71
22:17:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3070.480754][T23800] hub 5-1:0.0: USB hub found
[ 3070.491811][T24525] usb 1-1: USB disconnect, device number 30
[ 3070.504757][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:17:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x0)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3070.567426][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3070.650396][T11179] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3070.770995][   T28] audit: type=1804 audit(1598480270.277:103434): pid=13676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3169/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3070.815298][T23800] hub 5-1:0.0: 1 port detected
[ 3070.840354][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3070.885581][T11179] usb 3-1: config 0 descriptor??
[ 3070.944939][T11179] hub 3-1:0.0: USB hub found
[ 3070.990995][T28089] usb 6-1: device descriptor read/all, error -71
[ 3071.094469][T24525] usb 1-1: new high-speed USB device number 31 using dummy_hcd
22:17:50 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3071.224483][T11179] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3071.235538][T11179] usbhid 3-1:0.0: can't add hid device: -22
[ 3071.241491][T11179] usbhid: probe of 3-1:0.0 failed with error -22
22:17:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3071.344441][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 3071.374499][T28089] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 3071.424674][T11179] usb 3-1: reset high-speed USB device number 50 using dummy_hcd
[ 3071.465954][T24524] hub 5-1:0.0: hub_ext_port_status failed (err = 3)
[ 3071.473711][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3071.493250][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3071.502982][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x46000)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3071.516108][T24525] usb 1-1: config 0 descriptor??
[ 3071.557612][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3071.634458][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3071.640593][   T28] audit: type=1804 audit(1598480271.147:103435): pid=13701 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3170/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3071.684773][T11179] usb 3-1: Using ep0 maxpacket: 16
[ 3071.725829][T11179] usb 3-1: device firmware changed
[ 3071.731738][T11179] usb 3-1: USB disconnect, device number 50
[ 3071.759688][T24525] usb 1-1: USB disconnect, device number 31
[ 3071.908935][   T28] audit: type=1804 audit(1598480271.177:103436): pid=13702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3624/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3072.109835][T11179] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 3072.124400][T28089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3072.139525][T28089] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3072.148804][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3072.193192][T28089] usb 6-1: config 0 descriptor??
[ 3072.260868][T28089] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3072.519074][T28089] usb 6-1: USB disconnect, device number 57
22:17:52 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3073.044473][T11171] usb 5-1: reset high-speed USB device number 66 using dummy_hcd
22:17:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e)

[ 3073.124350][T28089] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 3073.219437][   T28] audit: type=1804 audit(1598480272.727:103437): pid=13742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3171/bus" dev="sda1" ino=16365 res=1 errno=0
[ 3073.244310][T24525] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 3073.284451][T11179] usb 3-1: Using ep0 maxpacket: 16
[ 3073.337301][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3073.374956][T11171] usb 5-1: device firmware changed
[ 3073.380457][T11171] usb 5-1: USB disconnect, device number 66
[ 3073.386787][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3073.404276][T11179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3073.422087][T11179] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3073.432458][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3073.450414][T11179] usb 3-1: config 0 descriptor??
[ 3073.494781][T24525] usb 1-1: Using ep0 maxpacket: 32
[ 3073.519157][T11179] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3073.544674][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3073.558573][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
22:17:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3073.582353][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3073.594359][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3073.633913][T28089] usb 6-1: config 0 descriptor??
[ 3073.654310][T24525] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 3073.664018][T24525] usb 1-1: can't read configurations, error -71
[ 3073.684870][T28089] hub 6-1:0.0: USB hub found
[ 3073.700939][T10366] usb 3-1: USB disconnect, device number 51
22:17:53 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3073.755829][T11171] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 3073.835604][T28089] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3073.850209][T28089] usbhid 6-1:0.0: can't add hid device: -22
[ 3073.864659][T28089] usbhid: probe of 6-1:0.0 failed with error -22
22:17:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3074.014206][T11171] usb 5-1: Using ep0 maxpacket: 16
22:17:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e)

[ 3074.044210][T24525] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 3074.066647][T28089] usb 6-1: reset high-speed USB device number 58 using dummy_hcd
[ 3074.148646][   T28] audit: type=1804 audit(1598480273.657:103438): pid=13783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3172/bus" dev="sda1" ino=16323 res=1 errno=0
[ 3074.172902][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3074.188313][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3074.198150][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3074.209290][T11171] usb 5-1: config 0 descriptor??
[ 3074.258479][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3074.284528][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 3074.314214][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3074.334249][T10366] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 3074.355486][T28089] usb 6-1: device firmware changed
[ 3074.362682][T28089] usb 6-1: USB disconnect, device number 58
[ 3074.371593][   T28] audit: type=1804 audit(1598480273.877:103439): pid=13793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3625/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3074.458553][T11171] usb 5-1: USB disconnect, device number 67
[ 3074.614276][T10366] usb 3-1: Using ep0 maxpacket: 32
[ 3074.619811][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3074.744202][T10366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3074.757672][T10366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3074.768458][T28089] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 3074.778042][T10366] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3074.788545][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3074.801662][T10366] usb 3-1: config 0 descriptor??
[ 3074.845641][T10366] hub 3-1:0.0: USB hub found
22:17:54 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3074.985071][T10366] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3075.001939][T10366] usbhid 3-1:0.0: can't add hid device: -22
[ 3075.009735][T10366] usbhid: probe of 3-1:0.0 failed with error -22
[ 3075.034886][T28089] usb 6-1: Using ep0 maxpacket: 16
[ 3075.044689][T11171] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 3075.244569][T28089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3075.259115][T28089] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3075.269578][T10366] usb 3-1: reset high-speed USB device number 52 using dummy_hcd
[ 3075.280563][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3075.305742][T28089] usb 6-1: config 0 descriptor??
[ 3075.327929][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3075.358162][T28089] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3075.484138][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3075.497367][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3075.508186][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3075.519780][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3075.530863][T11171] usb 5-1: config 0 descriptor??
[ 3075.554121][T10366] usb 3-1: Using ep0 maxpacket: 16
[ 3075.594138][T10366] usb 3-1: device firmware changed
[ 3075.599687][T11171] hub 5-1:0.0: USB hub found
[ 3075.608857][T10366] usb 3-1: USB disconnect, device number 52
[ 3075.681726][T28089] usb 6-1: USB disconnect, device number 59
22:17:55 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3075.756878][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3075.766365][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3075.778687][T24525] usb 1-1: config 0 descriptor??
22:17:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e)

[ 3075.826555][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3075.875074][T11171] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3075.921440][T11171] usbhid 5-1:0.0: can't add hid device: -22
[ 3075.946872][T11171] usbhid: probe of 5-1:0.0 failed with error -22
[ 3075.960831][   T28] audit: type=1804 audit(1598480275.467:103440): pid=13857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3173/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3076.004185][T10366] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 3076.028236][T24525] usb 1-1: USB disconnect, device number 33
[ 3076.144303][T11171] usb 5-1: reset high-speed USB device number 68 using dummy_hcd
[ 3076.254044][T28089] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 3076.274522][T10366] usb 3-1: Using ep0 maxpacket: 16
[ 3076.422961][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3076.444676][T10366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3076.464099][T11171] usb 5-1: device firmware changed
[ 3076.469315][T11171] usb 5-1: USB disconnect, device number 68
[ 3076.484628][T10366] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3076.505017][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.516420][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3076.535885][T10366] usb 3-1: config 0 descriptor??
[ 3076.576770][T10366] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3076.594033][T24525] usb 1-1: new high-speed USB device number 34 using dummy_hcd
22:17:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3076.634448][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3076.646057][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3076.656888][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3076.666698][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.677284][T28089] usb 6-1: config 0 descriptor??
[ 3076.714495][T28089] hub 6-1:0.0: USB hub found
22:17:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[ 3076.778099][T10366] usb 3-1: USB disconnect, device number 53
[ 3076.844062][T24525] usb 1-1: Using ep0 maxpacket: 32
22:17:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e)

[ 3076.881819][   T28] audit: type=1804 audit(1598480276.387:103441): pid=13892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3174/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3076.884046][T11171] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 3076.984036][T28089] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3076.984237][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3077.002834][   T28] audit: type=1804 audit(1598480276.497:103442): pid=13900 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3586/bus" dev="sda1" ino=16320 res=1 errno=0
[ 3077.010482][T28089] usbhid 6-1:0.0: can't add hid device: -22
[ 3077.036819][T28089] usbhid: probe of 6-1:0.0 failed with error -22
[ 3077.055215][T24525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3077.078527][T24525] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3077.086247][T28089] usb 6-1: USB disconnect, device number 60
[ 3077.088890][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3077.124221][T24525] usb 1-1: config 0 descriptor??
[ 3077.174332][T24525] hub 1-1:0.0: USB hub found
[ 3077.183982][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3077.253600][   T28] audit: type=1804 audit(1598480276.757:103443): pid=13914 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3626/bus" dev="sda1" ino=16323 res=1 errno=0
22:17:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3077.346857][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3077.387968][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3077.394253][T24525] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3077.423948][T10366] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 3077.432434][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3077.448725][T24525] usbhid 1-1:0.0: can't add hid device: -22
[ 3077.465064][T11171] usb 5-1: config 0 descriptor??
[ 3077.491425][T24525] usbhid: probe of 1-1:0.0 failed with error -22
[ 3077.531693][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3077.694512][T10366] usb 3-1: Using ep0 maxpacket: 32
[ 3077.730017][T11171] usb 5-1: USB disconnect, device number 69
[ 3077.784128][T24525] usb 1-1: reset high-speed USB device number 34 using dummy_hcd
22:17:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[ 3077.924918][T10366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3077.943060][   T28] audit: type=1804 audit(1598480277.447:103444): pid=13935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3175/bus" dev="sda1" ino=16085 res=1 errno=0
[ 3077.946109][T10366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3077.976905][T10366] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3077.987214][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3078.191118][T10366] usb 3-1: config 0 descriptor??
[ 3078.243929][T10366] usb 3-1: can't set config #0, error -71
[ 3078.252866][T10366] usb 3-1: USB disconnect, device number 54
22:17:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e)

22:17:57 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3078.385361][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 3078.451595][   T28] audit: type=1804 audit(1598480277.957:103445): pid=13949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3587/bus" dev="sda1" ino=16316 res=1 errno=0
[ 3078.451919][T24525] usb 1-1: device firmware changed
[ 3078.481275][T24525] usb 1-1: USB disconnect, device number 34
[ 3078.575895][T11171] usb 5-1: new high-speed USB device number 70 using dummy_hcd
22:17:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46000)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[ 3078.863846][T24525] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 3078.893974][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3078.913865][T10366] usb 3-1: new high-speed USB device number 55 using dummy_hcd
22:17:58 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3079.043875][T11171] usb 5-1: unable to read config index 0 descriptor/all
[ 3079.051225][T11171] usb 5-1: can't read configurations, error -71
[ 3079.064946][   T28] audit: type=1804 audit(1598480278.577:103446): pid=13963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir732993935/syzkaller.WH1xlo/3176/bus" dev="sda1" ino=16055 res=1 errno=0
22:17:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3079.103818][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 3079.164032][T10366] usb 3-1: Using ep0 maxpacket: 16
[ 3079.244574][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3079.260293][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3079.270567][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:17:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3079.284192][T10366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3079.292544][T24525] usb 1-1: config 0 descriptor??
[ 3079.327054][T10366] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3079.345620][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3079.349134][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3079.369048][T10366] usb 3-1: config 0 descriptor??
[ 3079.426253][T10366] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3079.433921][T11171] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 3079.448301][   T28] audit: type=1804 audit(1598480278.957:103447): pid=13975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir774059852/syzkaller.TN1HFW/3588/bus" dev="sda1" ino=16132 res=1 errno=0
[ 3079.548995][T24525] usb 1-1: USB disconnect, device number 35
[ 3079.633340][T10366] usb 3-1: USB disconnect, device number 55
[ 3079.723866][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3081.093637][    C1] sched: RT throttling activated
[ 3081.101961][   T28] audit: type=1804 audit(1598480279.417:103448): pid=13995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3627/bus" dev="sda1" ino=16323 res=1 errno=0
22:18:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3081.181628][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3081.221519][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3081.261483][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3081.307708][T11171] usb 5-1: config 0 descriptor??
22:18:00 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3081.356588][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:18:01 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3081.558255][T28089] usb 5-1: USB disconnect, device number 71
[ 3081.813663][T10366] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 3081.823688][T24525] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 3081.843646][T11179] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 3082.073593][T10366] usb 3-1: Using ep0 maxpacket: 16
[ 3082.103615][T24525] usb 1-1: Using ep0 maxpacket: 16
[ 3082.108917][T11179] usb 2-1: Using ep0 maxpacket: 16
[ 3082.133615][T28089] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 3082.243617][T10366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3082.253877][T24525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3082.259318][T10366] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3082.269733][T11179] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3082.281257][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3082.301929][T10366] usb 3-1: config 0 descriptor??
[ 3082.311423][T24525] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3082.333605][T11179] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3082.342726][T11179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3082.351804][T24525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3082.356175][T10366] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3082.423389][T24525] usb 1-1: config 0 descriptor??
[ 3082.434570][T28089] usb 5-1: Using ep0 maxpacket: 32
[ 3082.434603][T11179] usb 2-1: config 0 descriptor??
[ 3082.468251][T24525] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3082.525972][T11179] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3082.561978][T11179] usb 3-1: USB disconnect, device number 56
[ 3082.575890][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3082.610677][T28089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3082.635552][T28089] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3082.645239][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3082.659052][T28089] usb 5-1: config 0 descriptor??
[ 3082.668751][T15202] usb 1-1: USB disconnect, device number 36
[ 3082.714174][T28089] hub 5-1:0.0: USB hub found
22:18:02 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3082.741209][T10366] usb 2-1: USB disconnect, device number 102
22:18:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3082.843829][T28089] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3082.864280][T28089] usbhid 5-1:0.0: can't add hid device: -22
[ 3082.872001][T28089] usbhid: probe of 5-1:0.0 failed with error -22
[ 3083.063714][T28089] usb 5-1: reset high-speed USB device number 72 using dummy_hcd
22:18:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3083.113534][T11179] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 3083.253514][T15202] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 3083.303507][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 3083.323505][T10366] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 3083.345154][T28089] usb 5-1: device firmware changed
[ 3083.351084][T28089] usb 5-1: USB disconnect, device number 72
[ 3083.353571][T11179] usb 3-1: Using ep0 maxpacket: 32
[ 3083.480954][   T28] audit: type=1804 audit(1598480282.988:103449): pid=14086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3628/bus" dev="sda1" ino=15852 res=1 errno=0
[ 3083.505129][ T5177] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 3083.512721][T15202] usb 1-1: Using ep0 maxpacket: 32
[ 3083.529116][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3083.541042][T11179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3083.551736][T11179] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3083.561438][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3083.571056][T11179] usb 3-1: config 0 descriptor??
[ 3083.603667][T10366] usb 2-1: Using ep0 maxpacket: 32
[ 3083.684097][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3083.697292][T15202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3083.708978][T15202] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3083.719197][T28089] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 3083.728726][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3083.744485][T10366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3083.757014][T10366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3083.768667][T10366] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3083.781306][T15202] usb 1-1: config 0 descriptor??
[ 3083.786371][ T5177] usb 6-1: Using ep0 maxpacket: 16
[ 3083.794442][T10366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3083.821654][T10366] usb 2-1: config 0 descriptor??
[ 3083.845039][T15202] hub 1-1:0.0: USB hub found
[ 3083.884471][T10366] hub 2-1:0.0: USB hub found
[ 3083.924518][ T5177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3083.956008][ T5177] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3083.979909][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3083.993127][ T5177] usb 6-1: config 0 descriptor??
[ 3084.014734][T28089] usb 5-1: Using ep0 maxpacket: 16
[ 3084.038976][ T5177] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3084.064004][T15202] hub 1-1:0.0: 1 port detected
[ 3084.114251][T10366] hub 2-1:0.0: 1 port detected
[ 3084.153561][T28089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3084.169177][T28089] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3084.179651][T28089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3084.193314][T28089] usb 5-1: config 0 descriptor??
[ 3084.305996][T28089] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3084.333432][T28089] usb 6-1: USB disconnect, device number 61
22:18:03 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3084.536839][T11171] usb 5-1: USB disconnect, device number 73
[ 3084.793438][T10366] hub 1-1:0.0: activate --> -90
[ 3084.798407][T15202] hub 2-1:0.0: activate --> -90
[ 3084.853461][T11179] usb 3-1: can't set config #0, error -71
[ 3084.888839][T11179] usb 3-1: USB disconnect, device number 57
[ 3084.923518][T28089] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 3085.077136][ T5266] usb 2-1: USB disconnect, device number 103
[ 3085.097629][T10366] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3085.115124][T10366] usb 1-1: USB disconnect, device number 37
[ 3085.133489][T11171] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 3085.141172][T15202] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3085.223835][T28089] usb 6-1: Using ep0 maxpacket: 32
[ 3085.281877][T11179] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 3085.354485][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3085.365604][T28089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3085.379207][T28089] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3085.388608][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3085.394071][T28089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3085.402829][T28089] usb 6-1: config 0 descriptor??
[ 3085.443757][T28089] hub 6-1:0.0: USB hub found
[ 3085.523357][T11179] usb 3-1: Using ep0 maxpacket: 16
[ 3085.553879][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3085.565152][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3085.577400][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3085.587193][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:05 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3085.608991][T11171] usb 5-1: config 0 descriptor??
22:18:05 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3085.651195][T11179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3085.673367][T28089] hub 6-1:0.0: 1 port detected
[ 3085.678519][T11171] hub 5-1:0.0: USB hub found
[ 3085.681127][T11179] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3085.700318][T11179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3085.710597][T11179] usb 3-1: config 0 descriptor??
22:18:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:18:05 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3085.757405][T11179] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3085.873407][T11171] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3085.885763][T11171] usbhid 5-1:0.0: can't add hid device: -22
[ 3085.891941][T11171] usbhid: probe of 5-1:0.0 failed with error -22
[ 3085.953363][T15202] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 3085.966993][ T7975] usb 3-1: USB disconnect, device number 58
[ 3086.003367][T10366] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 3086.075088][   T28] audit: type=1804 audit(1598480285.588:103450): pid=14185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3629/bus" dev="sda1" ino=15852 res=1 errno=0
[ 3086.099684][T11171] usb 5-1: reset high-speed USB device number 74 using dummy_hcd
[ 3086.243314][T15202] usb 2-1: Using ep0 maxpacket: 16
[ 3086.283349][T10366] usb 1-1: Using ep0 maxpacket: 16
[ 3086.333371][T28089] hub 6-1:0.0: activate --> -90
[ 3086.373380][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3086.383677][T15202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3086.404373][T15202] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3086.415096][T11171] usb 5-1: device firmware changed
[ 3086.427243][T11171] usb 5-1: USB disconnect, device number 74
[ 3086.434286][T10366] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3086.460831][T15202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3086.470839][T10366] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3086.482342][T15202] usb 2-1: config 0 descriptor??
[ 3086.492472][T10366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3086.502943][T10366] usb 1-1: config 0 descriptor??
[ 3086.547914][T15202] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3086.555365][ T7975] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 3086.578693][T10366] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3086.746239][T10366] usb 1-1: USB disconnect, device number 38
[ 3086.773349][T15202] usb 2-1: USB disconnect, device number 104
[ 3086.823237][ T7975] usb 3-1: Using ep0 maxpacket: 32
[ 3086.831512][ T5177] usb 6-1: USB disconnect, device number 62
[ 3086.838672][T11171] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 3087.033244][ T7975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3087.044436][ T7975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3087.055558][ T7975] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3087.065389][ T7975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3087.075203][ T7975] usb 3-1: config 0 descriptor??
[ 3087.113638][ T7975] hub 3-1:0.0: USB hub found
22:18:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3087.213268][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3087.333240][ T7975] hub 3-1:0.0: 1 port detected
[ 3087.338061][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3087.357445][T10366] usb 1-1: new high-speed USB device number 39 using dummy_hcd
22:18:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3087.367123][   T28] audit: type=1804 audit(1598480286.878:103451): pid=14236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3630/bus" dev="sda1" ino=15840 res=1 errno=0
[ 3087.399153][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3087.411394][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3087.423469][T11171] usb 5-1: config 0 descriptor??
[ 3087.434655][T15202] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 3087.465389][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3087.643219][T10366] usb 1-1: Using ep0 maxpacket: 32
[ 3087.667271][T11171] usb 5-1: USB disconnect, device number 75
[ 3087.693213][T15202] usb 2-1: Using ep0 maxpacket: 32
[ 3087.713200][T27840] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 3087.764365][T10366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3087.776302][T10366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3087.786755][T10366] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3087.796152][T10366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3087.805672][T10366] usb 1-1: config 0 descriptor??
[ 3087.813250][T15202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3087.825617][T15202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3087.836868][T15202] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3087.846688][T10366] hub 1-1:0.0: USB hub found
[ 3087.851666][T15202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3087.861330][T15202] usb 2-1: config 0 descriptor??
[ 3087.913488][T15202] hub 2-1:0.0: USB hub found
[ 3087.983305][T27840] usb 6-1: Using ep0 maxpacket: 16
[ 3087.983347][ T7975] hub 3-1:0.0: activate --> -90
[ 3088.063223][T10366] hub 1-1:0.0: 1 port detected
[ 3088.123486][T15202] hub 2-1:0.0: 1 port detected
[ 3088.128359][T27840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3088.141969][T27840] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3088.151638][T27840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3088.163384][T27840] usb 6-1: config 0 descriptor??
[ 3088.215294][T27840] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3088.243332][T11171] usb 5-1: new high-speed USB device number 76 using dummy_hcd
22:18:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$key(0xf, 0x3, 0x2)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3088.363735][T27840] usb 3-1: USB disconnect, device number 59
[ 3088.383212][ T7975] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3088.413298][ T7975] usb 6-1: USB disconnect, device number 63
[ 3088.503179][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3088.528095][   T28] audit: type=1804 audit(1598480288.038:103452): pid=14282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3631/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3088.633507][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3088.648135][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3088.662127][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3088.671831][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3088.681523][T11171] usb 5-1: config 0 descriptor??
[ 3088.727442][T11171] hub 5-1:0.0: USB hub found
[ 3088.753158][T27840] hub 1-1:0.0: activate --> -90
[ 3088.793110][T15202] hub 2-1:0.0: activate --> -90
22:18:08 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:18:08 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3088.953324][T11171] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3088.965761][T11171] usbhid 5-1:0.0: can't add hid device: -22
[ 3088.971801][T11171] usbhid: probe of 5-1:0.0 failed with error -22
[ 3089.023171][ T7975] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 3089.104696][T11179] usb 1-1: USB disconnect, device number 39
[ 3089.114552][T24525] usb 2-1: USB disconnect, device number 105
[ 3089.123420][T15202] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3089.130303][T27840] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3089.173192][T11171] usb 5-1: reset high-speed USB device number 76 using dummy_hcd
[ 3089.193314][ T5266] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 3089.283049][ T7975] usb 6-1: Using ep0 maxpacket: 32
[ 3089.413419][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3089.424339][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3089.432156][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3089.442047][ T7975] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3089.451577][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3089.461172][ T7975] usb 6-1: config 0 descriptor??
[ 3089.463046][ T5266] usb 3-1: Using ep0 maxpacket: 16
[ 3089.467894][T11171] usb 5-1: device firmware changed
[ 3089.479547][T11171] usb 5-1: USB disconnect, device number 76
[ 3089.523468][ T7975] hub 6-1:0.0: USB hub found
22:18:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:18:09 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:18:09 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3089.593050][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3089.607870][ T5266] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3089.617251][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3089.634940][ T5266] usb 3-1: config 0 descriptor??
[ 3089.687368][ T5266] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3089.733030][ T7975] hub 6-1:0.0: 1 port detected
[ 3089.782282][   T28] audit: type=1804 audit(1598480289.288:103453): pid=14343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3632/bus" dev="sda1" ino=16371 res=1 errno=0
[ 3089.887499][ T5266] usb 3-1: USB disconnect, device number 60
[ 3089.893009][T11171] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 3089.953090][T11179] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 3089.960670][T23800] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 3090.173429][T11171] usb 5-1: Using ep0 maxpacket: 16
[ 3090.203090][T11179] usb 1-1: Using ep0 maxpacket: 16
[ 3090.208276][T23800] usb 2-1: Using ep0 maxpacket: 16
[ 3090.323758][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3090.333692][T11179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3090.337010][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3090.349922][T23800] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3090.358920][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.383254][T15202] hub 6-1:0.0: activate --> -90
[ 3090.388937][T11179] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3090.390297][T11171] usb 5-1: config 0 descriptor??
[ 3090.408630][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.421996][T23800] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3090.440377][T11179] usb 1-1: config 0 descriptor??
[ 3090.446458][ T5266] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 3090.461503][T23800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.465372][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3090.491789][T23800] usb 2-1: config 0 descriptor??
[ 3090.518619][T11179] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3090.548063][T23800] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3090.667677][T11171] usb 5-1: USB disconnect, device number 77
[ 3090.716179][T27840] usb 1-1: USB disconnect, device number 40
[ 3090.723998][ T5266] usb 3-1: Using ep0 maxpacket: 32
[ 3090.759670][ T7975] usb 2-1: USB disconnect, device number 106
[ 3090.842976][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3090.854915][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3090.864897][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3090.874136][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.883288][ T5266] usb 3-1: config 0 descriptor??
22:18:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3090.921217][T23800] usb 6-1: USB disconnect, device number 64
[ 3090.927536][ T5266] hub 3-1:0.0: USB hub found
[ 3091.066942][   T28] audit: type=1804 audit(1598480290.578:103454): pid=14403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3633/bus" dev="sda1" ino=15867 res=1 errno=0
[ 3091.142981][ T5266] hub 3-1:0.0: 1 port detected
[ 3091.252910][T11171] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 3091.303390][T27840] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 3091.352923][ T7975] usb 2-1: new high-speed USB device number 107 using dummy_hcd
22:18:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3091.513031][T11171] usb 5-1: Using ep0 maxpacket: 32
[ 3091.553830][T27840] usb 1-1: Using ep0 maxpacket: 32
[ 3091.603005][ T7975] usb 2-1: Using ep0 maxpacket: 32
[ 3091.633391][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3091.647191][T11171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3091.657985][T11171] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3091.668135][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3091.678044][T11171] usb 5-1: config 0 descriptor??
[ 3091.683725][T27840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3091.695743][T27840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3091.706988][T27840] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3091.718201][T27840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3091.726524][ T5177] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 3091.735171][ T7975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3091.746472][T11171] hub 5-1:0.0: USB hub found
[ 3091.752659][T27840] usb 1-1: config 0 descriptor??
[ 3091.758176][ T7975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3091.768928][ T7975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3091.778907][ T7975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3091.790473][ T7975] usb 2-1: config 0 descriptor??
[ 3091.792876][ T5266] hub 3-1:0.0: activate --> -90
[ 3091.803250][T27840] hub 1-1:0.0: USB hub found
[ 3091.833515][ T7975] hub 2-1:0.0: USB hub found
22:18:11 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3091.992894][T11171] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3092.012943][ T5177] usb 6-1: Using ep0 maxpacket: 16
[ 3092.018090][T27840] hub 1-1:0.0: 1 port detected
[ 3092.039097][T11171] usbhid 5-1:0.0: can't add hid device: -22
[ 3092.062882][ T7975] hub 2-1:0.0: 1 port detected
[ 3092.072370][T11171] usbhid: probe of 5-1:0.0 failed with error -22
[ 3092.090043][T10366] usb 3-1: USB disconnect, device number 61
[ 3092.093080][ T5266] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
22:18:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3092.142884][ T5177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3092.156933][ T5177] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3092.166598][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3092.177857][ T5177] usb 6-1: config 0 descriptor??
[ 3092.235941][ T5177] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3092.274626][T11171] usb 5-1: reset high-speed USB device number 78 using dummy_hcd
[ 3092.337424][   T28] audit: type=1804 audit(1598480291.848:103455): pid=14444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3634/bus" dev="sda1" ino=15866 res=1 errno=0
[ 3092.442559][T23800] usb 6-1: USB disconnect, device number 65
[ 3092.532798][T11171] usb 5-1: Using ep0 maxpacket: 16
22:18:12 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3092.573329][T11171] usb 5-1: device firmware changed
[ 3092.578826][T11171] usb 5-1: USB disconnect, device number 78
[ 3092.663633][ T7975] hub 1-1:0.0: activate --> -90
[ 3092.712956][T27840] hub 2-1:0.0: activate --> -90
[ 3092.912794][ T5177] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 3092.933252][T10366] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 3092.973443][T11171] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 3092.995057][T23800] usb 1-1: USB disconnect, device number 41
[ 3093.023399][ T7975] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3093.242462][T23800] usb 2-1: USB disconnect, device number 107
[ 3093.282774][ T5177] usb 3-1: Using ep0 maxpacket: 16
[ 3093.288074][T10366] usb 6-1: Using ep0 maxpacket: 32
[ 3093.293394][T11171] usb 5-1: Using ep0 maxpacket: 16
22:18:12 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3093.447029][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3093.459978][ T5177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3093.472788][T10366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3093.483763][T10366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
22:18:13 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3093.493779][ T5177] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3093.512939][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3093.524336][T10366] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3093.533899][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3093.541935][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3093.550734][T10366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3093.561990][ T5177] usb 3-1: config 0 descriptor??
[ 3093.571545][T11171] usb 5-1: config 0 descriptor??
[ 3093.588737][T10366] usb 6-1: config 0 descriptor??
[ 3093.645236][ T5177] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3093.654940][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3093.671555][T10366] hub 6-1:0.0: USB hub found
22:18:13 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3093.730807][   T28] audit: type=1804 audit(1598480293.238:103456): pid=14500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3635/bus" dev="sda1" ino=15871 res=1 errno=0
[ 3093.845410][T11171] usb 3-1: USB disconnect, device number 62
[ 3093.852712][T10366] hub 6-1:0.0: 1 port detected
[ 3093.854231][T23800] usb 5-1: USB disconnect, device number 79
[ 3093.874601][ T7975] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 3094.063527][ T5177] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 3094.122698][ T7975] usb 1-1: Using ep0 maxpacket: 16
[ 3094.264530][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3094.277740][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3094.289738][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3094.299756][ T7975] usb 1-1: config 0 descriptor??
[ 3094.313010][ T5177] usb 2-1: Using ep0 maxpacket: 16
[ 3094.355205][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3094.432707][T23800] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 3094.444699][T11171] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 3094.463092][ T5177] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3094.493117][ T5177] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3094.513668][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3094.522775][ T7975] hub 6-1:0.0: activate --> -90
[ 3094.539898][ T5177] usb 2-1: config 0 descriptor??
[ 3094.554199][T11179] usb 1-1: USB disconnect, device number 42
[ 3094.606524][ T5177] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3094.674090][T23800] usb 5-1: Using ep0 maxpacket: 32
[ 3094.683180][T11171] usb 3-1: Using ep0 maxpacket: 32
[ 3094.793003][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3094.813564][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3094.822467][T23800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3094.825743][T15202] usb 2-1: USB disconnect, device number 108
[ 3094.835721][T23800] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3094.852927][ T7975] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3094.864403][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3094.872049][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3094.886296][T11171] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3094.893642][T23800] usb 5-1: config 0 descriptor??
[ 3094.898180][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3094.909783][ T7975] usb 6-1: USB disconnect, device number 66
[ 3094.918619][ T5177] usb 6-1: Failed to suspend device, error -19
[ 3094.933168][T11171] usb 3-1: config 0 descriptor??
[ 3094.934936][T23800] hub 5-1:0.0: USB hub found
[ 3094.993036][T11171] hub 3-1:0.0: USB hub found
22:18:14 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3095.113217][T23800] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3095.127009][T23800] usbhid 5-1:0.0: can't add hid device: -22
[ 3095.132980][T11179] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 3095.140613][T23800] usbhid: probe of 5-1:0.0 failed with error -22
[ 3095.166994][   T28] audit: type=1804 audit(1598480294.678:103457): pid=14572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3636/bus" dev="sda1" ino=15871 res=1 errno=0
[ 3095.213895][T11171] hub 3-1:0.0: 1 port detected
22:18:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3095.332795][T23800] usb 5-1: reset high-speed USB device number 80 using dummy_hcd
[ 3095.382578][T11179] usb 1-1: Using ep0 maxpacket: 32
[ 3095.402590][T15202] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 3095.502845][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3095.518819][T11179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3095.528750][T11179] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3095.552611][T11179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3095.572580][T23800] usb 5-1: Using ep0 maxpacket: 16
[ 3095.578178][T11179] usb 1-1: config 0 descriptor??
[ 3095.614011][T23800] usb 5-1: device firmware changed
[ 3095.619213][T23800] usb 5-1: USB disconnect, device number 80
[ 3095.625580][T11179] hub 1-1:0.0: USB hub found
[ 3095.662575][T15202] usb 2-1: Using ep0 maxpacket: 32
[ 3095.667739][ T7975] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 3095.802953][T15202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3095.814192][T15202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3095.825395][T15202] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3095.837291][T15202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3095.843780][T11179] hub 1-1:0.0: 1 port detected
[ 3095.848954][T11171] hub 3-1:0.0: activate --> -90
[ 3095.860994][T15202] usb 2-1: config 0 descriptor??
[ 3095.903087][T15202] hub 2-1:0.0: USB hub found
[ 3095.916185][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3095.992538][T23800] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 3096.032886][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3096.052561][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3096.061828][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3096.075888][ T7975] usb 6-1: config 0 descriptor??
[ 3096.113422][ T5177] usb 3-1: USB disconnect, device number 63
[ 3096.126313][T15202] hub 2-1:0.0: 1 port detected
[ 3096.133539][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3096.142830][T11171] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3096.232525][T23800] usb 5-1: Using ep0 maxpacket: 16
22:18:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3096.338036][ T7975] usb 6-1: USB disconnect, device number 67
[ 3096.352927][T23800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3096.377708][T23800] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3096.387492][T23800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3096.396648][T23800] usb 5-1: config 0 descriptor??
[ 3096.434787][T23800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:18:16 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3096.571159][   T28] audit: type=1804 audit(1598480296.079:103458): pid=14627 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3637/bus" dev="sda1" ino=15885 res=1 errno=0
[ 3096.636374][T23800] usb 1-1: USB disconnect, device number 43
[ 3096.650526][T11179] usb 5-1: USB disconnect, device number 81
[ 3096.656628][T24524] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3096.782493][T15202] hub 2-1:0.0: activate --> -90
[ 3096.892472][ T7975] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 3096.973693][T24524] usb 3-1: new high-speed USB device number 64 using dummy_hcd
22:18:16 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3097.103702][ T5266] usb 2-1: USB disconnect, device number 109
[ 3097.122478][T15202] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3097.132507][ T7975] usb 6-1: Using ep0 maxpacket: 32
[ 3097.242529][T24524] usb 3-1: Using ep0 maxpacket: 16
[ 3097.252502][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3097.262436][T11179] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 3097.271107][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3097.292506][ T7975] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3097.301628][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3097.318376][ T7975] usb 6-1: config 0 descriptor??
[ 3097.372963][T24524] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3097.374213][ T7975] hub 6-1:0.0: USB hub found
[ 3097.394763][T24524] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3097.421117][T24524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3097.440661][T24524] usb 3-1: config 0 descriptor??
[ 3097.462748][T15202] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 3097.514923][T24524] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3097.542445][T11179] usb 5-1: Using ep0 maxpacket: 32
[ 3097.594075][ T7975] hub 6-1:0.0: 1 port detected
22:18:17 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3097.682511][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3097.694642][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3097.702434][T15202] usb 1-1: Using ep0 maxpacket: 16
[ 3097.705680][T11179] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3097.719136][T11179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3097.731835][T11179] usb 5-1: config 0 descriptor??
[ 3097.743989][T24524] usb 3-1: USB disconnect, device number 64
[ 3097.792783][T11179] hub 5-1:0.0: USB hub found
[ 3097.822686][T15202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3097.845038][T15202] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3097.857785][T15202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3097.869052][T15202] usb 1-1: config 0 descriptor??
[ 3097.915940][T15202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3097.936925][T11171] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 3097.959208][   T28] audit: type=1804 audit(1598480297.469:103459): pid=14692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3638/bus" dev="sda1" ino=15882 res=1 errno=0
[ 3098.013218][T11179] hub 5-1:0.0: 1 port detected
[ 3098.115290][T23800] usb 1-1: USB disconnect, device number 44
[ 3098.202390][T11171] usb 2-1: Using ep0 maxpacket: 16
[ 3098.252771][ T7975] hub 6-1:0.0: activate --> -90
[ 3098.322403][T11171] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3098.343401][T11171] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3098.356692][T11171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3098.362377][T24524] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 3098.374431][T11171] usb 2-1: config 0 descriptor??
[ 3098.414570][T11171] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3098.576563][T11171] usb 6-1: USB disconnect, device number 68
[ 3098.592377][ T7975] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3098.621762][ T7975] usb 2-1: USB disconnect, device number 110
[ 3098.642382][T24524] usb 3-1: Using ep0 maxpacket: 32
[ 3098.654523][T24525] hub 5-1:0.0: activate --> -90
[ 3098.702334][T23800] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 3098.784068][T24524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3098.801842][T24524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3098.825098][T24524] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3098.846334][T24524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3098.865984][T24524] usb 3-1: config 0 descriptor??
[ 3098.923199][T24524] hub 3-1:0.0: USB hub found
[ 3098.962370][T23800] usb 1-1: Using ep0 maxpacket: 32
22:18:18 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3099.102686][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3099.113592][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3099.124061][T23800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3099.133411][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3099.142245][T23800] usb 1-1: config 0 descriptor??
22:18:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3099.146889][T24524] hub 3-1:0.0: 1 port detected
[ 3099.168613][T24525] usb 5-1: USB disconnect, device number 82
[ 3099.175488][T11179] usb 5-1: Failed to suspend device, error -19
[ 3099.182439][ T7975] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 3099.202613][T23800] hub 1-1:0.0: USB hub found
[ 3099.362345][T11171] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 3099.371914][   T28] audit: type=1804 audit(1598480298.879:103460): pid=14748 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3639/bus" dev="sda1" ino=15880 res=1 errno=0
[ 3099.422315][T23800] hub 1-1:0.0: 1 port detected
[ 3099.442484][ T7975] usb 2-1: Using ep0 maxpacket: 32
[ 3099.562308][ T7975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3099.575928][ T7975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3099.586466][ T7975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3099.598333][ T7975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3099.608339][ T7975] usb 2-1: config 0 descriptor??
[ 3099.622311][T11171] usb 6-1: Using ep0 maxpacket: 16
22:18:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3099.652712][ T7975] hub 2-1:0.0: USB hub found
[ 3099.742609][T11171] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3099.757525][T11171] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3099.767981][T11171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3099.778219][T11171] usb 6-1: config 0 descriptor??
[ 3099.826959][T11171] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3099.862604][ T7975] hub 2-1:0.0: 1 port detected
[ 3099.904703][T11171] usb 3-1: USB disconnect, device number 65
[ 3099.922244][T24524] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3099.962262][ T5177] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 3100.032606][T10366] usb 6-1: USB disconnect, device number 69
[ 3100.202262][ T5177] usb 5-1: Using ep0 maxpacket: 16
[ 3100.223681][T24525] usb 1-1: USB disconnect, device number 45
[ 3100.235591][T24524] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3100.324585][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3100.346292][ T5177] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3100.365479][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:19 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3100.392718][ T5177] usb 5-1: config 0 descriptor??
[ 3100.434555][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3100.512223][ T7975] hub 2-1:0.0: activate --> -90
22:18:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

[ 3100.592214][T10366] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 3100.634213][ T5177] usb 5-1: USB disconnect, device number 83
22:18:20 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3100.712195][T24524] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 3100.758827][   T28] audit: type=1804 audit(1598480300.269:103461): pid=14816 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3640/bus" dev="sda1" ino=15880 res=1 errno=0
[ 3100.832189][T10366] usb 6-1: Using ep0 maxpacket: 32
[ 3100.845429][T24525] usb 2-1: USB disconnect, device number 111
[ 3100.862256][ T7975] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3100.952202][T10366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3100.965852][T10366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3100.975949][T10366] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3100.982154][T24524] usb 3-1: Using ep0 maxpacket: 16
[ 3100.986704][T10366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3101.001049][T10366] usb 6-1: config 0 descriptor??
[ 3101.012166][ T7975] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 3101.047703][T10366] hub 6-1:0.0: USB hub found
[ 3101.122593][T24524] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3101.135827][T24524] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3101.152727][T24524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3101.164698][T24524] usb 3-1: config 0 descriptor??
[ 3101.192164][ T5177] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 3101.205118][T24524] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3101.252168][T10366] hub 6-1:0.0: 1 port detected
[ 3101.256985][ T7975] usb 1-1: Using ep0 maxpacket: 16
22:18:20 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3101.382401][ T7975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3101.395835][ T7975] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3101.406508][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3101.424505][ T7975] usb 1-1: config 0 descriptor??
[ 3101.438348][T11171] usb 3-1: USB disconnect, device number 66
[ 3101.448398][ T5177] usb 5-1: Using ep0 maxpacket: 32
[ 3101.475958][ T7975] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3101.572652][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3101.590468][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3101.611639][ T5177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3101.632664][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3101.652411][ T5177] usb 5-1: config 0 descriptor??
[ 3101.672163][T24524] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 3101.683586][T23800] usb 1-1: USB disconnect, device number 46
[ 3101.703453][ T5177] hub 5-1:0.0: USB hub found
22:18:21 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3101.922153][ T5177] hub 5-1:0.0: 1 port detected
[ 3101.933909][T24524] usb 2-1: Using ep0 maxpacket: 16
[ 3101.936188][T10366] hub 6-1:0.0: activate --> -90
[ 3102.012107][T11171] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 3102.072178][T24524] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3102.085095][T24524] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3102.095091][T24524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3102.105829][T24524] usb 2-1: config 0 descriptor??
[ 3102.107366][   T28] audit: type=1804 audit(1598480301.619:103462): pid=14867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3641/bus" dev="sda1" ino=15880 res=1 errno=0
[ 3102.174417][T24524] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3102.252400][T11171] usb 3-1: Using ep0 maxpacket: 32
[ 3102.261857][T27840] usb 6-1: USB disconnect, device number 70
[ 3102.272123][T10366] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3102.313596][T23800] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 3102.372856][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3102.395911][T11171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3102.406092][T11171] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3102.415476][T11171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3102.426050][T11171] usb 3-1: config 0 descriptor??
[ 3102.431669][ T5177] usb 2-1: USB disconnect, device number 112
[ 3102.462626][T11171] hub 3-1:0.0: USB hub found
[ 3102.575376][T23800] usb 1-1: Using ep0 maxpacket: 32
[ 3102.602084][ T7975] hub 5-1:0.0: activate --> -90
[ 3102.682067][T11171] hub 3-1:0.0: 1 port detected
[ 3102.712413][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3102.727115][T23800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3102.737482][T23800] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3102.748878][T23800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:22 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3102.774538][T23800] usb 1-1: config 0 descriptor??
[ 3102.822556][T23800] hub 1-1:0.0: USB hub found
[ 3102.992010][ T5177] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 3103.052032][T23800] hub 1-1:0.0: 1 port detected
[ 3103.072041][T24524] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 3103.102577][T15202] usb 5-1: USB disconnect, device number 84
22:18:22 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3103.231993][ T5177] usb 2-1: Using ep0 maxpacket: 32
[ 3103.331996][T24524] usb 6-1: Using ep0 maxpacket: 16
[ 3103.353711][ T5177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3103.364935][ T5177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3103.375542][ T5177] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3103.385027][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3103.396540][ T5177] usb 2-1: config 0 descriptor??
[ 3103.406148][   T28] audit: type=1804 audit(1598480302.919:103463): pid=14914 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3642/bus" dev="sda1" ino=15880 res=1 errno=0
[ 3103.442386][ T5177] hub 2-1:0.0: USB hub found
[ 3103.443679][T24525] usb 3-1: USB disconnect, device number 67
[ 3103.469211][T11171] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3103.482920][T24524] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3103.507945][T24524] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3103.517228][T24524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3103.530406][T24524] usb 6-1: config 0 descriptor??
22:18:23 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3103.578547][T24524] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3103.661966][ T5177] hub 2-1:0.0: 1 port detected
[ 3103.775686][T24525] usb 6-1: USB disconnect, device number 71
[ 3103.822857][T11179] usb 1-1: USB disconnect, device number 47
[ 3103.842139][T24524] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
22:18:23 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3103.921972][T11171] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 3104.161925][T11171] usb 5-1: Using ep0 maxpacket: 16
22:18:23 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3104.281930][T11171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3104.301936][T24524] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 3104.304673][T11171] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3104.322763][ T5177] hub 2-1:0.0: activate --> -90
[ 3104.346654][T11171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3104.355672][T11171] usb 5-1: config 0 descriptor??
[ 3104.371926][T24525] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 3104.394478][T11171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
22:18:24 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3104.551930][T24524] usb 3-1: Using ep0 maxpacket: 16
[ 3104.597194][T11179] usb 5-1: USB disconnect, device number 85
[ 3104.623561][T24525] usb 6-1: Using ep0 maxpacket: 32
[ 3104.632443][ T5177] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 3104.640664][ T5266] usb 2-1: USB disconnect, device number 113
[ 3104.652183][ T7975] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3104.678039][   T28] audit: type=1804 audit(1598480304.189:103464): pid=14982 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3643/bus" dev="sda1" ino=15880 res=1 errno=0
[ 3104.713632][T24524] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3104.735749][T24524] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3104.754241][T24524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3104.781319][T24524] usb 3-1: config 0 descriptor??
[ 3104.786772][T24525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3104.809263][T24525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3104.834128][T24524] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3104.843654][T24525] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3104.857766][T24525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3104.871899][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 3104.879247][T24525] usb 6-1: config 0 descriptor??
[ 3104.952211][T24525] hub 6-1:0.0: USB hub found
[ 3104.991889][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3105.005428][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3105.017392][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3105.027116][ T5177] usb 1-1: config 0 descriptor??
[ 3105.037500][ T5266] usb 3-1: USB disconnect, device number 68
[ 3105.074376][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
22:18:24 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3105.181920][T24525] hub 6-1:0.0: 1 port detected
[ 3105.201899][T11179] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 3105.276050][ T7975] usb 1-1: USB disconnect, device number 48
[ 3105.451820][ T5177] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 3105.464199][T11179] usb 5-1: Using ep0 maxpacket: 32
[ 3105.583936][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3105.602351][ T5266] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 3105.616923][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3105.643607][T11179] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3105.662309][T11179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3105.676875][T11179] usb 5-1: config 0 descriptor??
[ 3105.693425][ T5177] usb 2-1: Using ep0 maxpacket: 16
[ 3105.722308][T11179] hub 5-1:0.0: USB hub found
22:18:25 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3105.821896][ T5177] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3105.831811][T24525] hub 6-1:0.0: activate --> -90
[ 3105.834770][ T5177] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3105.848585][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3105.861843][ T5266] usb 3-1: Using ep0 maxpacket: 32
[ 3105.870033][ T5177] usb 2-1: config 0 descriptor??
[ 3105.875018][ T7975] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 3105.934142][ T5177] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3105.941861][T11179] hub 5-1:0.0: 1 port detected
[ 3105.991812][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3106.009577][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3106.019801][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3106.029079][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3106.039019][ T5266] usb 3-1: config 0 descriptor??
[ 3106.068000][   T28] audit: type=1804 audit(1598480305.579:103465): pid=15035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3644/bus" dev="sda1" ino=15879 res=1 errno=0
[ 3106.112156][ T5266] hub 3-1:0.0: USB hub found
[ 3106.112673][ T5177] usb 6-1: USB disconnect, device number 72
[ 3106.131803][T24525] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3106.140569][T11171] usb 2-1: USB disconnect, device number 114
[ 3106.151761][ T7975] usb 1-1: Using ep0 maxpacket: 32
[ 3106.282385][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3106.295686][ T7975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3106.306001][ T7975] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3106.315580][ T7975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3106.327175][ T7975] usb 1-1: config 0 descriptor??
[ 3106.333309][ T5266] hub 3-1:0.0: 1 port detected
[ 3106.382176][ T7975] hub 1-1:0.0: USB hub found
22:18:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3106.591746][T11179] hub 5-1:0.0: activate --> -90
[ 3106.605881][ T7975] hub 1-1:0.0: 1 port detected
[ 3106.721818][T11171] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 3106.874554][T10366] usb 5-1: USB disconnect, device number 86
[ 3106.891706][T11179] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 3106.953311][ T5177] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 3106.983906][T11171] usb 2-1: Using ep0 maxpacket: 32
[ 3107.083977][T11179] usb 3-1: USB disconnect, device number 69
[ 3107.101753][ T5266] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3107.133697][T11171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3107.151376][T11171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3107.167145][T11171] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3107.176528][T11171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3107.187261][T11171] usb 2-1: config 0 descriptor??
[ 3107.221728][ T5177] usb 6-1: Using ep0 maxpacket: 16
[ 3107.234032][T11171] hub 2-1:0.0: USB hub found
22:18:26 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

22:18:26 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3107.371748][ T5177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3107.398952][ T5177] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3107.417129][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3107.431375][ T5177] usb 6-1: config 0 descriptor??
[ 3107.437271][T11179] usb 1-1: USB disconnect, device number 49
[ 3107.453798][T11171] hub 2-1:0.0: 1 port detected
[ 3107.458638][T10366] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3107.485553][ T5177] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3107.498669][   T28] audit: type=1804 audit(1598480307.009:103466): pid=15097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3645/bus" dev="sda1" ino=15879 res=1 errno=0
22:18:27 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3107.686305][T15202] usb 6-1: USB disconnect, device number 73
[ 3107.761715][T10366] usb 5-1: new high-speed USB device number 87 using dummy_hcd
22:18:27 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3107.931650][ T7975] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3108.011671][T10366] usb 5-1: Using ep0 maxpacket: 16
[ 3108.101708][ T5177] hub 2-1:0.0: activate --> -90
[ 3108.142534][T10366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3108.157243][T10366] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3108.167716][T10366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3108.179078][T10366] usb 5-1: config 0 descriptor??
[ 3108.201737][ T7975] usb 3-1: Using ep0 maxpacket: 16
[ 3108.224540][T10366] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3108.263207][ T5177] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 3108.271631][T15202] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 3108.324959][ T7975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3108.345589][ T7975] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3108.376123][ T7975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3108.397459][ T7975] usb 3-1: config 0 descriptor??
[ 3108.415095][T10366] usb 2-1: USB disconnect, device number 115
[ 3108.435222][T11171] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3108.444010][T11179] usb 5-1: USB disconnect, device number 87
[ 3108.461326][ T7975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3108.531651][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 3108.537007][T15202] usb 6-1: Using ep0 maxpacket: 32
[ 3108.654860][ T5266] usb 3-1: USB disconnect, device number 70
[ 3108.663398][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3108.676671][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3108.697982][T15202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3108.712867][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3108.724937][T15202] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3108.734395][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3108.742803][T15202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:28 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3108.754605][ T5177] usb 1-1: config 0 descriptor??
[ 3108.760885][T15202] usb 6-1: config 0 descriptor??
[ 3108.793900][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3108.831979][T15202] hub 6-1:0.0: USB hub found
22:18:28 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3108.994398][T24524] usb 1-1: USB disconnect, device number 50
[ 3109.021584][T11179] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 3109.030509][   T28] audit: type=1804 audit(1598480308.539:103467): pid=15181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3646/bus" dev="sda1" ino=15879 res=1 errno=0
[ 3109.062729][T15202] hub 6-1:0.0: 1 port detected
[ 3109.211581][ T5266] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3109.221578][ T5177] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 3109.271526][T11179] usb 5-1: Using ep0 maxpacket: 32
[ 3109.391840][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3109.403418][T11179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3109.413700][T11179] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3109.423178][T11179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3109.432798][T11179] usb 5-1: config 0 descriptor??
[ 3109.453052][ T5266] usb 3-1: Using ep0 maxpacket: 32
[ 3109.474805][T11179] hub 5-1:0.0: USB hub found
[ 3109.494225][ T5177] usb 2-1: Using ep0 maxpacket: 16
[ 3109.552056][T24524] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 3109.572000][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3109.585461][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3109.595978][ T5266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3109.607896][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3109.619340][ T5266] usb 3-1: config 0 descriptor??
[ 3109.621880][ T5177] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3109.651529][ T5177] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3109.660565][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3109.661788][ T5266] hub 3-1:0.0: USB hub found
[ 3109.684052][T11179] hub 5-1:0.0: 1 port detected
[ 3109.696218][ T5177] usb 2-1: config 0 descriptor??
[ 3109.704174][T15202] hub 6-1:0.0: activate --> -90
[ 3109.735531][ T5177] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3109.801538][T24524] usb 1-1: Using ep0 maxpacket: 32
[ 3109.872987][ T5266] hub 3-1:0.0: 1 port detected
[ 3109.922088][T24524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3109.933553][ T5177] usb 2-1: USB disconnect, device number 116
[ 3109.950404][T24524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3109.986440][T24524] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3110.004932][T11171] usb 6-1: USB disconnect, device number 74
[ 3110.007655][T24524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3110.022001][T24524] usb 1-1: config 0 descriptor??
[ 3110.032911][T15202] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3110.061967][T24524] hub 1-1:0.0: USB hub found
22:18:29 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3110.281499][T24524] hub 1-1:0.0: 1 port detected
[ 3110.331462][T11179] hub 5-1:0.0: activate --> -90
22:18:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3110.498370][   T28] audit: type=1804 audit(1598480310.010:103468): pid=15225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3647/bus" dev="sda1" ino=15864 res=1 errno=0
[ 3110.532961][ T5177] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 3110.541720][ T5266] hub 3-1:0.0: activate --> -90
[ 3110.604138][T28702] usb 5-1: USB disconnect, device number 88
[ 3110.621463][T11179] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 3110.791532][ T5177] usb 2-1: Using ep0 maxpacket: 32
[ 3110.821887][T24525] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 3110.862952][T24524] usb 3-1: USB disconnect, device number 71
[ 3110.883373][ T5266] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3110.921691][ T5177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3110.934388][ T5177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3110.948414][ T5177] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3110.970457][ T5177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3110.995868][ T5177] usb 2-1: config 0 descriptor??
[ 3111.031835][ T5177] hub 2-1:0.0: USB hub found
[ 3111.061410][T24525] usb 6-1: Using ep0 maxpacket: 16
22:18:30 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 3111.093105][T10366] usb 1-1: USB disconnect, device number 51
[ 3111.111441][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3111.182085][T24525] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3111.203283][T24525] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3111.218166][T24525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3111.227895][T24525] usb 6-1: config 0 descriptor??
[ 3111.241474][ T5177] hub 2-1:0.0: 1 port detected
[ 3111.274835][T24525] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
22:18:30 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3111.431420][T24525] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 3111.475921][T11171] usb 6-1: USB disconnect, device number 75
22:18:31 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:18:31 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3111.681363][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 3111.702824][T10366] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3111.801454][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3111.815784][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3111.825709][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3111.839174][   T28] audit: type=1804 audit(1598480311.350:103469): pid=15289 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3648/bus" dev="sda1" ino=15864 res=1 errno=0
[ 3111.866085][T24525] usb 5-1: config 0 descriptor??
[ 3111.881365][ T5177] hub 2-1:0.0: activate --> -90
[ 3111.884162][T28702] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 3111.905433][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3112.001357][T10366] usb 3-1: Using ep0 maxpacket: 16
[ 3112.091449][T11171] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 3112.104373][T24525] usb 5-1: USB disconnect, device number 89
[ 3112.131389][T28702] usb 1-1: Using ep0 maxpacket: 16
[ 3112.131653][T10366] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3112.152681][T23800] usb 2-1: USB disconnect, device number 117
[ 3112.168447][T10366] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3112.177604][ T5177] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3112.196230][T10366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3112.222135][T10366] usb 3-1: config 0 descriptor??
[ 3112.251663][T28702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3112.269255][T28702] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3112.273784][T10366] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3112.292470][T28702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3112.320053][T28702] usb 1-1: config 0 descriptor??
[ 3112.341375][T11171] usb 6-1: Using ep0 maxpacket: 32
[ 3112.373572][T28702] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3112.475077][T23800] usb 3-1: USB disconnect, device number 72
[ 3112.481733][T11171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3112.499473][T11171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3112.528313][T11171] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3112.551397][T11171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3112.573578][T11171] usb 6-1: config 0 descriptor??
[ 3112.581676][T28702] usb 1-1: USB disconnect, device number 52
[ 3112.611698][T11171] hub 6-1:0.0: USB hub found
22:18:32 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3112.662784][T24525] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 3112.821322][T11171] hub 6-1:0.0: 1 port detected
[ 3112.923072][T24525] usb 5-1: Using ep0 maxpacket: 32
22:18:32 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3113.021328][ T5266] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 3113.041768][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3113.052749][T23800] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 3113.062995][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3113.073944][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3113.084079][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3113.095265][T24525] usb 5-1: config 0 descriptor??
[ 3113.131584][T24525] hub 5-1:0.0: USB hub found
[ 3113.144398][T28702] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 3113.250768][   T28] audit: type=1804 audit(1598480312.760:103470): pid=15349 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3649/bus" dev="sda1" ino=15864 res=1 errno=0
[ 3113.276495][ T5266] usb 2-1: Using ep0 maxpacket: 16
[ 3113.321743][T23800] usb 3-1: Using ep0 maxpacket: 32
[ 3113.351264][T24525] hub 5-1:0.0: 1 port detected
[ 3113.401745][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3113.414665][T28702] usb 1-1: Using ep0 maxpacket: 32
[ 3113.422307][ T5266] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3113.433606][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3113.447037][ T5266] usb 2-1: config 0 descriptor??
[ 3113.452294][T23800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3113.464771][T23800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3113.474904][T23800] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3113.486491][T23800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3113.491234][T11171] hub 6-1:0.0: activate --> -90
[ 3113.504473][ T5266] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3113.512441][T23800] usb 3-1: config 0 descriptor??
[ 3113.541253][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3113.552700][T23800] hub 3-1:0.0: USB hub found
[ 3113.564820][T28702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3113.589043][T28702] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3113.610387][T28702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3113.631845][T28702] usb 1-1: config 0 descriptor??
[ 3113.671625][T28702] hub 1-1:0.0: USB hub found
[ 3113.705216][ T5266] usb 2-1: USB disconnect, device number 118
[ 3113.761238][T23800] hub 3-1:0.0: 1 port detected
[ 3113.783537][T10366] usb 6-1: USB disconnect, device number 76
[ 3113.812913][T11171] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3113.891261][T28702] hub 1-1:0.0: 1 port detected
[ 3114.003321][T24525] hub 5-1:0.0: activate --> -90
[ 3114.261213][ T5266] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 3114.282473][T10366] usb 5-1: USB disconnect, device number 90
22:18:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3114.305047][T24525] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
22:18:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3114.412457][T24525] hub 3-1:0.0: activate --> -90
[ 3114.511148][ T5266] usb 2-1: Using ep0 maxpacket: 32
[ 3114.583433][   T28] audit: type=1804 audit(1598480314.100:103471): pid=15402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3650/bus" dev="sda1" ino=15884 res=1 errno=0
[ 3114.611202][ T5177] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 3114.631645][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3114.643618][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3114.654959][ T5266] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3114.664441][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3114.675709][ T5266] usb 2-1: config 0 descriptor??
[ 3114.688091][T23800] usb 1-1: USB disconnect, device number 53
[ 3114.702904][T28702] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3114.721861][ T5266] hub 2-1:0.0: USB hub found
[ 3114.736933][T28702] usb 3-1: USB disconnect, device number 73
[ 3114.752659][T24525] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
22:18:34 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3114.851113][ T5177] usb 6-1: Using ep0 maxpacket: 16
[ 3114.943311][ T5266] hub 2-1:0.0: 1 port detected
[ 3114.981113][ T5177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3114.995292][ T5177] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3115.019551][ T5177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3115.040527][ T5177] usb 6-1: config 0 descriptor??
[ 3115.092461][T24525] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 3115.113434][ T5177] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
22:18:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

22:18:34 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3115.313656][T28702] usb 6-1: USB disconnect, device number 77
[ 3115.342847][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 3115.461413][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3115.483176][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3115.503543][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3115.521086][ T5177] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 3115.531172][T24525] usb 5-1: config 0 descriptor??
[ 3115.552321][T23800] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 3115.574023][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3115.601074][ T5266] hub 2-1:0.0: activate --> -90
22:18:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3115.771064][ T5177] usb 1-1: Using ep0 maxpacket: 16
[ 3115.774689][T24525] usb 5-1: USB disconnect, device number 91
[ 3115.791038][T23800] usb 3-1: Using ep0 maxpacket: 16
[ 3115.881063][T28702] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 3115.881606][T11171] usb 2-1: USB disconnect, device number 119
[ 3115.898947][ T5177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3115.901379][ T5266] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3115.916785][   T28] audit: type=1804 audit(1598480315.430:103472): pid=15461 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3651/bus" dev="sda1" ino=15884 res=1 errno=0
[ 3115.932754][T23800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3115.948044][ T5177] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3115.957529][T23800] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3115.967638][ T5177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3115.992220][T23800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3115.995970][ T5177] usb 1-1: config 0 descriptor??
[ 3116.008593][T23800] usb 3-1: config 0 descriptor??
[ 3116.053728][ T5177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3116.064924][T23800] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3116.121091][T28702] usb 6-1: Using ep0 maxpacket: 32
[ 3116.241431][T28702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3116.252461][T28702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3116.254524][T11171] usb 1-1: USB disconnect, device number 54
[ 3116.272475][ T5177] usb 3-1: USB disconnect, device number 74
[ 3116.287510][T28702] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3116.310865][T28702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3116.323478][T28702] usb 6-1: config 0 descriptor??
22:18:35 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3116.351018][T24525] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 3116.363328][T28702] hub 6-1:0.0: USB hub found
[ 3116.581004][T28702] hub 6-1:0.0: 1 port detected
[ 3116.595118][T24525] usb 5-1: Using ep0 maxpacket: 32
[ 3116.671341][ T5266] usb 2-1: new high-speed USB device number 120 using dummy_hcd
22:18:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3116.711437][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3116.722433][T24525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3116.733026][T24525] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3116.750962][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3116.759751][T24525] usb 5-1: config 0 descriptor??
[ 3116.801498][T24525] hub 5-1:0.0: USB hub found
[ 3116.838691][   T28] audit: type=1804 audit(1598480316.350:103473): pid=15510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3652/bus" dev="sda1" ino=15884 res=1 errno=0
[ 3116.872215][T11171] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 3116.879823][ T5177] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 3116.921419][ T5266] usb 2-1: Using ep0 maxpacket: 16
[ 3117.021745][T24525] hub 5-1:0.0: 1 port detected
[ 3117.041528][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3117.056507][ T5266] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3117.067185][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3117.080990][ T5266] usb 2-1: config 0 descriptor??
[ 3117.128923][ T5266] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3117.140993][T11171] usb 1-1: Using ep0 maxpacket: 32
[ 3117.146664][ T5177] usb 3-1: Using ep0 maxpacket: 32
[ 3117.231465][ T5266] hub 6-1:0.0: activate --> -90
[ 3117.291860][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3117.302793][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3117.317131][ T5177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3117.330260][T28702] usb 2-1: USB disconnect, device number 120
[ 3117.330914][T11171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3117.360985][ T5177] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3117.370026][ T5177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3117.390977][T11171] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3117.400073][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3117.409483][ T5177] usb 3-1: config 0 descriptor??
[ 3117.421889][T11171] usb 1-1: config 0 descriptor??
[ 3117.471453][T11171] hub 1-1:0.0: USB hub found
[ 3117.476361][ T5177] hub 3-1:0.0: USB hub found
[ 3117.513407][T15202] usb 6-1: USB disconnect, device number 78
[ 3117.531368][ T5266] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3117.662207][ T5266] hub 5-1:0.0: activate --> -90
[ 3117.680983][ T5177] hub 3-1:0.0: 1 port detected
[ 3117.685832][T11171] hub 1-1:0.0: 1 port detected
22:18:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3117.890873][T28702] usb 2-1: new high-speed USB device number 121 using dummy_hcd
22:18:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3117.982653][T15202] usb 5-1: USB disconnect, device number 92
[ 3118.004154][ T5266] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 3118.040133][   T28] audit: type=1804 audit(1598480317.550:103474): pid=15556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3653/bus" dev="sda1" ino=15844 res=1 errno=0
[ 3118.130944][T28702] usb 2-1: Using ep0 maxpacket: 32
[ 3118.251299][T28702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3118.263910][T28702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3118.274333][T28702] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3118.286726][T28702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3118.298388][T28702] usb 2-1: config 0 descriptor??
[ 3118.330911][ T5177] hub 3-1:0.0: activate --> -90
[ 3118.341708][T28702] hub 2-1:0.0: USB hub found
[ 3118.352191][ T7975] usb 6-1: new high-speed USB device number 79 using dummy_hcd
22:18:38 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3118.483134][T10366] usb 1-1: USB disconnect, device number 55
[ 3118.504099][T11171] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 3118.560894][T28702] hub 2-1:0.0: 1 port detected
[ 3118.610852][ T7975] usb 6-1: Using ep0 maxpacket: 16
[ 3118.692015][T24525] usb 3-1: USB disconnect, device number 75
[ 3118.710838][ T5177] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3118.751190][ T7975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3118.764151][ T7975] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3118.788068][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3118.802299][ T5266] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 3118.813390][ T7975] usb 6-1: config 0 descriptor??
[ 3118.853117][ T7975] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
22:18:38 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3119.040813][ T5266] usb 5-1: Using ep0 maxpacket: 16
[ 3119.052868][ T7975] usb 6-1: USB disconnect, device number 79
22:18:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3119.160817][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3119.174016][ T5266] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3119.183431][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
22:18:38 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3119.208887][ T5266] usb 5-1: config 0 descriptor??
[ 3119.214131][T28702] hub 2-1:0.0: activate --> -90
[ 3119.263162][ T5266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3119.320804][T10366] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 3119.426891][   T28] audit: type=1804 audit(1598480318.940:103475): pid=15616 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3654/bus" dev="sda1" ino=15872 res=1 errno=0
[ 3119.463954][ T5266] usb 5-1: USB disconnect, device number 93
[ 3119.491676][T11171] usb 2-1: USB disconnect, device number 121
[ 3119.511264][T28702] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 3119.522379][T23800] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 3119.590817][T10366] usb 1-1: Using ep0 maxpacket: 16
[ 3119.641096][ T7975] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 3119.740998][T10366] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3119.754346][T10366] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3119.760813][T23800] usb 3-1: Using ep0 maxpacket: 16
[ 3119.780813][T10366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3119.798481][T10366] usb 1-1: config 0 descriptor??
[ 3119.863211][T10366] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3119.880775][T23800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3119.896156][T23800] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3119.906751][T23800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3119.919751][T23800] usb 3-1: config 0 descriptor??
[ 3119.920732][ T7975] usb 6-1: Using ep0 maxpacket: 32
[ 3119.964641][T23800] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
22:18:39 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3120.020706][ T5266] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 3120.062180][T10366] usb 1-1: USB disconnect, device number 56
[ 3120.091221][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3120.111076][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3120.129995][ T7975] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3120.141583][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3120.154081][ T7975] usb 6-1: config 0 descriptor??
[ 3120.163857][T24525] usb 3-1: USB disconnect, device number 76
[ 3120.201149][ T7975] hub 6-1:0.0: USB hub found
[ 3120.270690][ T5266] usb 5-1: Using ep0 maxpacket: 32
[ 3120.320715][T23800] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 3120.391439][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3120.410769][ T7975] hub 6-1:0.0: 1 port detected
[ 3120.420717][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3120.430757][ T5266] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3120.439770][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3120.449274][ T5266] usb 5-1: config 0 descriptor??
[ 3120.501017][ T5266] hub 5-1:0.0: USB hub found
22:18:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r3, 0x4200, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}])
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r3, r6, 0x0, 0x8400fffffffb)
sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e)

[ 3120.580699][T23800] usb 2-1: Using ep0 maxpacket: 16
[ 3120.630856][T10366] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 3120.700726][T23800] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3120.713597][   T28] audit: type=1804 audit(1598480320.220:103476): pid=15673 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3655/bus" dev="sda1" ino=15872 res=1 errno=0
[ 3120.741199][T23800] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3120.750230][T23800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3120.760396][ T5266] hub 5-1:0.0: 1 port detected
[ 3120.765220][T24525] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 3120.775420][T23800] usb 2-1: config 0 descriptor??
[ 3120.813281][T23800] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3120.890733][T10366] usb 1-1: Using ep0 maxpacket: 32
[ 3121.015057][T23800] usb 2-1: USB disconnect, device number 122
[ 3121.021149][T24525] usb 3-1: Using ep0 maxpacket: 32
[ 3121.030999][T10366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3121.050657][ T7975] hub 6-1:0.0: activate --> -90
[ 3121.063510][T10366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3121.087209][T10366] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3121.099596][T10366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3121.124143][T10366] usb 1-1: config 0 descriptor??
[ 3121.142228][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3121.153533][T24525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3121.165638][T24525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3121.171009][T10366] hub 1-1:0.0: USB hub found
[ 3121.176475][T24525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3121.203735][T24525] usb 3-1: config 0 descriptor??
[ 3121.251081][T24525] hub 3-1:0.0: USB hub found
[ 3121.344580][T11171] usb 6-1: USB disconnect, device number 80
[ 3121.360775][ T7975] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 3121.380648][T10366] hub 1-1:0.0: 1 port detected
[ 3121.400651][ T5266] hub 5-1:0.0: activate --> -90
[ 3121.470669][T24525] hub 3-1:0.0: 1 port detected
[ 3121.580590][T23800] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 3121.721248][T11171] usb 5-1: USB disconnect, device number 94
[ 3121.740610][ T5266] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
22:18:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0x0, 0x3}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r2, 0x4200, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8400fffffffb)
sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e)

22:18:41 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3121.830659][T23800] usb 2-1: Using ep0 maxpacket: 32
[ 3121.950675][T23800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3121.961629][T23800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3121.972040][T23800] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 3121.981611][T23800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3121.990350][T23800] usb 2-1: config 0 descriptor??
[ 3122.000077][   T28] audit: type=1804 audit(1598480321.510:103477): pid=15726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir158647517/syzkaller.OXRnTB/3656/bus" dev="sda1" ino=15865 res=1 errno=0
[ 3122.061067][T23800] hub 2-1:0.0: USB hub found
[ 3122.190567][T10366] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 3122.211238][ T5266] usb 1-1: USB disconnect, device number 57
[ 3122.222738][ T5177] usb 3-1: USB disconnect, device number 77
[ 3122.230949][ T7975] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
22:18:41 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3122.241985][T24525] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 3122.280594][T23800] hub 2-1:0.0: 1 port detected
[ 3122.450626][T10366] usb 6-1: Using ep0 maxpacket: 16
[ 3122.550583][T24525] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 3122.590542][T10366] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3122.607692][T10366] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3122.619570][T10366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3122.630238][T10366] usb 6-1: config 0 descriptor??
22:18:42 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3122.683036][T10366] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 3122.744370][T15724] ==================================================================
[ 3122.752475][T15724] BUG: KCSAN: data-race in ext4_alloc_da_blocks / ext4_da_reserve_space
[ 3122.760777][T15724] 
[ 3122.763099][T15724] write to 0xffff88811d9813c0 of 4 bytes by task 15726 on cpu 1:
[ 3122.770807][T15724]  ext4_da_reserve_space+0x12b/0x220
[ 3122.776173][T15724]  ext4_da_get_block_prep+0x4d5/0x990
[ 3122.781538][T15724]  ext4_block_write_begin+0x433/0xb60
[ 3122.786898][T15724]  ext4_da_write_begin+0x507/0xad0
22:18:42 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

[ 3122.791997][T15724]  generic_perform_write+0x196/0x390
[ 3122.797277][T15724]  ext4_buffered_write_iter+0x2cc/0x3b0
[ 3122.802401][T24525] usb 5-1: Using ep0 maxpacket: 16
[ 3122.802820][T15724]  ext4_file_write_iter+0x768/0x1060
[ 3122.813608][T15724]  do_iter_readv_writev+0x32e/0x3d0
[ 3122.818818][T15724]  do_iter_write+0x112/0x4b0
[ 3122.823394][T15724]  vfs_iter_write+0x4c/0x70
[ 3122.827882][T15724]  iter_file_splice_write+0x41a/0x770
[ 3122.833241][T15724]  direct_splice_actor+0x95/0x160
[ 3122.838250][T15724]  splice_direct_to_actor+0x365/0x660
[ 3122.843611][T15724]  do_splice_direct+0xf2/0x170
[ 3122.848366][T15724]  do_sendfile+0x56a/0xba0
[ 3122.852769][T15724]  __x64_sys_sendfile64+0xf2/0x130
[ 3122.857903][T15724]  do_syscall_64+0x39/0x80
[ 3122.862339][T15724]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3122.868204][T15724] 
[ 3122.870527][T15724] read to 0xffff88811d9813c0 of 4 bytes by task 15724 on cpu 0:
[ 3122.878146][T15724]  ext4_alloc_da_blocks+0x1f/0x130
[ 3122.883270][T15724]  ext4_release_file+0x5b/0x1c0
[ 3122.888103][T15724]  __fput+0x246/0x4d0
[ 3122.892076][T15724]  ____fput+0x11/0x20
[ 3122.896099][T15724]  task_work_run+0x8e/0x110
[ 3122.900629][T15724]  exit_to_user_mode_prepare+0x1b2/0x210
[ 3122.906258][T15724]  syscall_exit_to_user_mode+0x16/0x30
[ 3122.911705][T15724]  do_syscall_64+0x45/0x80
[ 3122.916115][T15724]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3122.921986][T15724] 
[ 3122.922595][T24525] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3122.924300][T15724] Reported by Kernel Concurrency Sanitizer on:
[ 3122.943175][T15724] CPU: 0 PID: 15724 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0
[ 3122.950561][T23800] hub 2-1:0.0: activate --> -90
[ 3122.951825][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3122.951830][T15724] ==================================================================
[ 3122.951836][T15724] Kernel panic - not syncing: panic_on_warn set ...
[ 3122.951847][T15724] CPU: 0 PID: 15724 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0
[ 3122.951852][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3122.951855][T15724] Call Trace:
[ 3122.951918][T15724]  dump_stack+0x10f/0x19d
[ 3122.951937][T15724]  panic+0x207/0x64a
[ 3122.969266][T24525] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 3122.971396][T15724]  ? vprintk_emit+0x44a/0x4f0
[ 3122.971416][T15724]  kcsan_report+0x684/0x690
[ 3122.986608][T24525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3122.994668][T15724]  ? kcsan_setup_watchpoint+0x41e/0x4a0
[ 3122.994681][T15724]  ? ext4_alloc_da_blocks+0x1f/0x130
[ 3122.994691][T15724]  ? ext4_release_file+0x5b/0x1c0
[ 3122.994700][T15724]  ? __fput+0x246/0x4d0
[ 3122.994709][T15724]  ? ____fput+0x11/0x20
[ 3122.994717][T15724]  ? task_work_run+0x8e/0x110
[ 3122.994728][T15724]  ? exit_to_user_mode_prepare+0x1b2/0x210
[ 3122.994746][T15724]  ? syscall_exit_to_user_mode+0x16/0x30
[ 3123.082938][T15724]  ? do_syscall_64+0x45/0x80
[ 3123.087526][T15724]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3123.094033][T15724]  ? debug_smp_processor_id+0x18/0x20
[ 3123.099397][T15724]  ? balance_dirty_pages_ratelimited+0x6e5/0x890
[ 3123.105719][T15724]  kcsan_setup_watchpoint+0x41e/0x4a0
[ 3123.110964][T24525] usb 5-1: config 0 descriptor??
[ 3123.111080][T15724]  ? __fsnotify_parent+0x224/0x470
[ 3123.119458][T28702] usb 6-1: USB disconnect, device number 81
[ 3123.121078][T15724]  ext4_alloc_da_blocks+0x1f/0x130
[ 3123.121090][T15724]  ext4_release_file+0x5b/0x1c0
[ 3123.121100][T15724]  ? ext4_file_open+0x3b0/0x3b0
[ 3123.121110][T15724]  __fput+0x246/0x4d0
[ 3123.121121][T15724]  ____fput+0x11/0x20
[ 3123.121131][T15724]  task_work_run+0x8e/0x110
[ 3123.121144][T15724]  exit_to_user_mode_prepare+0x1b2/0x210
[ 3123.121163][T15724]  syscall_exit_to_user_mode+0x16/0x30
[ 3123.156285][T24525] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 3123.159786][T15724]  do_syscall_64+0x45/0x80
[ 3123.159806][T15724]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 3123.182772][T15724] RIP: 0033:0x416f01
[ 3123.186660][T15724] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 3123.206261][T15724] RSP: 002b:00007ffdc4833cb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 3123.214667][T15724] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416f01
[ 3123.222631][T15724] RDX: 0000000000000000 RSI: 0000000000001018 RDI: 0000000000000006
[ 3123.224772][T24525] usb 2-1: USB disconnect, device number 123
[ 3123.230619][T15724] RBP: 0000000000000001 R08: 00000000c6c7f018 R09: 00000000c6c7f01c
[ 3123.230626][T15724] R10: 00007ffdc4833da0 R11: 0000000000000293 R12: 000000000118d940
[ 3123.230633][T15724] R13: 000000000118d940 R14: ffffffffffffffff R15: 000000000118d08c
[ 3123.231879][T15724] Kernel Offset: disabled
[ 3123.266112][T15724] Rebooting in 86400 seconds..