Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
2024/03/08 16:47:44 fuzzer started
2024/03/08 16:47:45 dialing manager at 10.128.0.163:30014
[   38.690036][ T2494] cgroup: Unknown subsys name 'net'
[   38.825167][ T2494] cgroup: Unknown subsys name 'rlimit'
2024/03/08 16:47:48 syscalls: 90
2024/03/08 16:47:48 code coverage: enabled
2024/03/08 16:47:48 comparison tracing: enabled
2024/03/08 16:47:48 extra coverage: enabled
2024/03/08 16:47:48 delay kcov mmap: enabled
2024/03/08 16:47:48 setuid sandbox: enabled
2024/03/08 16:47:48 namespace sandbox: enabled
2024/03/08 16:47:48 Android sandbox: /sys/fs/selinux/policy does not exist
2024/03/08 16:47:48 fault injection: enabled
2024/03/08 16:47:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2024/03/08 16:47:48 net packet injection: /dev/net/tun does not exist
2024/03/08 16:47:48 net device setup: enabled
2024/03/08 16:47:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/03/08 16:47:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/03/08 16:47:48 NIC VF setup: PCI device 0000:00:11.0 is not available
2024/03/08 16:47:48 USB emulation: enabled
2024/03/08 16:47:48 hci packet injection: /dev/vhci does not exist
2024/03/08 16:47:48 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2024/03/08 16:47:48 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2024/03/08 16:47:48 swap file: enabled
2024/03/08 16:47:48 fetching corpus: 0, signal 0/2000 (executing program)
[   41.890946][ T2494] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2024/03/08 16:47:48 fetching corpus: 50, signal 14635/16798 (executing program)
2024/03/08 16:47:48 fetching corpus: 100, signal 18153/20695 (executing program)
2024/03/08 16:47:48 fetching corpus: 150, signal 20420/23204 (executing program)
2024/03/08 16:47:48 fetching corpus: 200, signal 21864/24883 (executing program)
2024/03/08 16:47:49 fetching corpus: 250, signal 22794/26107 (executing program)
2024/03/08 16:47:49 fetching corpus: 300, signal 23693/27162 (executing program)
2024/03/08 16:47:49 fetching corpus: 350, signal 24366/27978 (executing program)
2024/03/08 16:47:49 fetching corpus: 400, signal 25401/28865 (executing program)
2024/03/08 16:47:49 fetching corpus: 450, signal 25844/29447 (executing program)
2024/03/08 16:47:49 fetching corpus: 500, signal 26471/30026 (executing program)
2024/03/08 16:47:49 fetching corpus: 550, signal 26878/30455 (executing program)
2024/03/08 16:47:49 fetching corpus: 600, signal 27381/30845 (executing program)
2024/03/08 16:47:49 fetching corpus: 650, signal 27668/31169 (executing program)
2024/03/08 16:47:50 fetching corpus: 700, signal 27995/31436 (executing program)
2024/03/08 16:47:50 fetching corpus: 750, signal 28272/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 800, signal 28700/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 850, signal 28989/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 900, signal 29393/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 950, signal 29565/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 1000, signal 29871/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 1050, signal 30231/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 1100, signal 30496/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 1113, signal 30534/31604 (executing program)
2024/03/08 16:47:50 fetching corpus: 1113, signal 30534/31604 (executing program)
2024/03/08 16:47:53 starting 5 fuzzer processes
16:48:38 executing program 1:
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x20, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

16:48:38 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003ec0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xb, 0xc3, {0xc3, 0x11, "af7b59df024814c21d03c470db02c40907983dd79e635d2066368443ff50d9bfdc5914338f9927e62e20df79cd30fecc3fc877434254f8a620b4a92e99cf81e37db6c9f87fb45abbbed6cbcaf4d10ed0dac579bdcee8f0483fe08449b0b12003b4bd79ae8998aa952334e3918c1b004c82f6cf90640c7f2da0369fce1595f70f4fe61a307c6c979ba584e06fc0c09e990ffc5edbbed11fd6ee64b275cb70b43c289936e8098cffc1f3653f5bf2fb65eeebee22b993a26e7d188b90a23eba70bc6d"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f00000001c0)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x5, [@ss_cap={0xa}, @generic={0x1a, 0x10, 0xb, "34e5ade64fb9a89a311b14bc43d80490482bccb62c764e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x40, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x0, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf1, 0x2, 0x7, 0xff0f, 0x0, [0x3ff0, 0xffc0c0]}]}}, 0x0, 0x0}, 0x0)

16:48:38 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001d40))

16:48:38 executing program 3:
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x20, 0x8, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x9, 0x6, {0x7, 0x25, 0x1, 0x2, 0x1f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x6, 0x0, {0x7, 0x25, 0x1, 0x2, 0x9}}}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x20, 0x10, 0x80}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000001200)=@lang_id={0x4}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0xc09}}]})

16:48:38 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x7113f4026e981959)

16:48:39 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xb, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16:48:39 executing program 4:
syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x8}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, "7501b7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

[   92.495668][   T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   92.515720][  T726] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   92.655429][   T22] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   92.736123][ T4786] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.765557][   T45] usb 3-1: Using ep0 maxpacket: 32
[   92.805492][ T4789] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.886140][  T726] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   92.894982][  T726] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   92.895542][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.905108][  T726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   92.916004][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.934599][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   92.943686][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.956377][   T45] usb 3-1: config 0 descriptor??
[   92.999164][   T45] hub 3-1:0.0: USB hub found
[   93.004519][ T4786] usb 1-1: Using ep0 maxpacket: 32
[   93.065591][   T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   93.074334][   T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   93.084457][   T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.095661][  T726] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.104744][  T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.112789][  T726] usb 2-1: Product: syz
[   93.116986][  T726] usb 2-1: Manufacturer: syz
[   93.121593][  T726] usb 2-1: SerialNumber: syz
[   93.125993][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.137135][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.147016][ T4786] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   93.156089][ T4786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.167180][ T4786] usb 1-1: config 0 descriptor??
[   93.205614][ T4789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.215825][ T4789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.227048][ T4786] hub 1-1:0.0: USB hub found
[   93.232227][   T45] hub 3-1:0.0: 1 port detected
[   93.237209][ T4789] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[   93.285691][   T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.294789][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.302872][   T22] usb 4-1: Product: ఉ
[   93.307085][   T22] usb 4-1: Manufacturer: ю
[   93.311613][   T22] usb 4-1: SerialNumber: syz
[   93.427826][ T4786] hub 1-1:0.0: 1 port detected
[   93.435604][ T4789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.444664][ T4789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.452853][ T4789] usb 5-1: Product: syz
[   93.457089][ T4789] usb 5-1: Manufacturer: syz
[   93.461701][ T4789] usb 5-1: SerialNumber: syz
[   93.465856][  T726] usb 2-1: 0:2 : does not exist
[   93.488106][  T726] usb 2-1: USB disconnect, device number 2
[   93.523784][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.775773][ T4789] usb 5-1: 0:2 : does not exist
[   93.792481][ T4789] usb 5-1: USB disconnect, device number 2
16:48:40 executing program 1:
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3f}}]}}}]}}]}}, 0x0)

[   93.845963][   T45] hub 3-1:0.0: activate --> -90
[   93.865989][   T22] usb 4-1: 0:2 : does not exist
[   93.877162][   T22] usb 4-1: USB disconnect, device number 2
[   93.962024][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
16:48:40 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa5, &(0x7f0000000180)="97c000040000c7c2d0da738fa73a1b5434c776f2aeb0742b42de440544420200000000000000ef3b49ffe537b3f82587dff4c71702510704e3f4190bc90686ead9fe40005d2d1a8611790804745da788b0b85f7f53d4c7f43bb054000000366b760a04d1c1146e3d39e5ae58e49f986ae7eaab502c1d4fd32f6ec372b79f00000000000000008000928c92ffe5a91232f1bb75a925e4141db33234ffca7d2f867dc8bdd09b")

[   94.066480][ T4792] hub 1-1:0.0: activate --> -90
16:48:40 executing program 4:
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x2)

16:48:40 executing program 4:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000001200)=@lang_id={0x4}}, {0x4, &(0x7f0000001240)=@lang_id={0x4}}]})

[   94.216021][ T4786] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.415444][  T726] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.455406][ T4786] usb 2-1: Using ep0 maxpacket: 16
[   94.495572][   T45] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[   94.499158][    T9] usb 3-1: USB disconnect, device number 2
[   94.526788][   T45] usb 3-1-port1: attempt power cycle
[   94.527137][ T4804] usb 1-1: USB disconnect, device number 2
[   94.575429][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   94.585645][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   94.595759][ T4786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   94.605850][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   94.775786][ T4786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   94.784864][ T4786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.792895][ T4786] usb 2-1: Product: syz
[   94.795845][  T726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.797088][ T4786] usb 2-1: Manufacturer: syz
[   94.797111][ T4786] usb 2-1: SerialNumber: syz
[   94.808012][  T726] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   94.826331][  T726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.836148][ T4796] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   94.852015][  T726] usb 4-1: config 0 descriptor??
[   94.857024][    T8] usb 5-1: Using ep0 maxpacket: 16
16:48:41 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})

16:48:41 executing program 0:
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

[   94.975588][    T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   94.984279][    T8] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   94.994386][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.071048][ T4804] usb 2-1: USB disconnect, device number 3
16:48:41 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b391"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[   95.165559][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.174640][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.183147][    T8] usb 5-1: Product: syz
[   95.187602][    T8] usb 5-1: SerialNumber: syz
[   95.339136][  T726] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   95.354232][  T726] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5
[   95.365917][ T4786] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   95.435422][   T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   95.473303][  T726] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   95.536030][    T8] usb 5-1: 0:2 : does not exist
[   95.549729][    T8] usb 5-1: USB disconnect, device number 3
16:48:42 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/12)

[   95.575969][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
16:48:42 executing program 1:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[   95.675692][   T45] usb 3-1: Using ep0 maxpacket: 8
[   95.725524][ T4786] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   95.734372][ T4786] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   95.734402][ T4786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.795683][   T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   95.804763][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.816112][   T45] usb 3-1: config 0 descriptor??
[   95.885567][ T4786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.894637][ T4786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.902666][ T4786] usb 1-1: Product: syz
[   95.906880][ T4786] usb 1-1: Manufacturer: syz
[   95.906906][ T4786] usb 1-1: SerialNumber: syz
16:48:42 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0x8000, 0x59])
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f66e0453a2412b57"})
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x7ff)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)

16:48:42 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f800000000000904000012070103000905010200000000000905820259"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001f00)="a1", 0x1)

[   95.965816][  T726] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.219046][    T8] usb 4-1: USB disconnect, device number 3
[   96.225852][ T4786] usb 1-1: 0:2 : does not exist
[   96.237205][ T4786] usb 1-1: USB disconnect, device number 3
[   96.242882][  T726] usb 2-1: Using ep0 maxpacket: 16
[   96.280603][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   96.315877][ T4792] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   96.415511][  T726] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   96.424270][  T726] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   96.434387][  T726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.555434][ T4792] usb 5-1: Using ep0 maxpacket: 32
16:48:43 executing program 0:
syz_open_dev$evdev(&(0x7f0000001f80), 0x0, 0xa00)

[   96.685752][ T4792] usb 5-1: config index 0 descriptor too short (expected 63488, got 36)
[   96.685759][  T726] usb 2-1: string descriptor 0 read error: -22
[   96.685784][ T4792] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[   96.696812][  T726] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.700274][ T4792] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[   96.708353][  T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
16:48:43 executing program 3:
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3f}}]}}}]}}]}}, 0x0)

[   96.755481][ T4792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   96.765181][ T4792] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   96.775272][ T4792] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 89
[   96.785462][ T4792] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   96.791904][  T726] usb 2-1: 0:2 : does not exist
16:48:43 executing program 0:
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400)

16:48:43 executing program 0:
syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x105400)

[   96.885868][ T4792] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   96.894941][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   96.903135][ T4792] usb 5-1: Product: syz
[   96.913609][ T4792] usb 5-1: config 0 descriptor??
16:48:43 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, {0x9}}}]}}]}}, 0x0)

[   96.935972][ T4821] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[   96.992258][ T4789] usb 2-1: USB disconnect, device number 4
[   97.095411][ T4786] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   97.179769][ T4792] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   97.275430][  T726] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   97.335416][ T4786] usb 4-1: Using ep0 maxpacket: 16
[   97.366569][    T8] usb 5-1: USB disconnect, device number 4
[   97.380558][    T8] usblp0: removed
16:48:44 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0)

[   97.485514][ T4786] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   97.517734][  T726] usb 1-1: Using ep0 maxpacket: 16
16:48:44 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000140))

16:48:44 executing program 1:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)

[   97.636031][  T726] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   97.675574][ T4786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   97.684684][ T4786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.692739][ T4786] usb 4-1: Product: syz
[   97.696998][ T4786] usb 4-1: Manufacturer: syz
[   97.701621][ T4786] usb 4-1: SerialNumber: syz
[   97.735816][ T4825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   97.815895][  T726] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[   97.824954][  T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.833033][  T726] usb 1-1: Product: syz
[   97.837243][  T726] usb 1-1: Manufacturer: syz
[   97.841846][  T726] usb 1-1: SerialNumber: syz
16:48:44 executing program 4:
ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0)

16:48:44 executing program 4:
syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x490800)

16:48:44 executing program 4:
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000001d00), 0x0, 0xb01480)

[   97.945969][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.978139][ T4786] usb 4-1: USB disconnect, device number 4
16:48:44 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)

[   98.127773][  T726] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[   98.138307][  T726] usb 1-1: USB disconnect, device number 4
[   98.185418][    T8] usb 2-1: Using ep0 maxpacket: 8
[   98.325513][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.335685][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   98.344601][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.354401][    T8] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   98.355566][ T4789] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   98.363451][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.407119][    T8] hub 2-1:1.0: bad descriptor, ignoring hub
[   98.413119][    T8] hub: probe of 2-1:1.0 failed with error -5
[   98.420926][    T8] cdc_wdm 2-1:1.0: skipping garbage
[   98.426483][    T8] cdc_wdm 2-1:1.0: skipping garbage
[   98.431985][    T8] cdc_wdm: probe of 2-1:1.0 failed with error -22
16:48:45 executing program 3:
syz_open_dev$evdev(&(0x7f0000000400), 0x7ff, 0x0)

16:48:45 executing program 3:
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)

16:48:45 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/33)

16:48:45 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000004c0)=""/25)

[   98.636465][ T4789] usb 5-1: Using ep0 maxpacket: 8
16:48:45 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x0)
ioctl$EVIOCGABS20(r0, 0x80184560, 0x0)

16:48:45 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0)

16:48:45 executing program 0:
syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x145000)

[   98.737013][ T4786] usb 2-1: USB disconnect, device number 5
[   98.805522][ T4789] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   98.813866][ T4789] usb 5-1: config 179 has no interface number 0
16:48:45 executing program 0:
syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x10000)

[   98.844932][ T4789] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   98.856108][ T4789] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   98.867396][ T4789] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   98.877456][ T4789] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   98.890784][ T4789] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
16:48:45 executing program 0:
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)

[   98.899903][ T4789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:48:45 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109026c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000042413000c241b0000000000000000000905810300000000000904010000020d00000904baf502"], 0x0)

[   98.927841][ T4845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   98.980105][   T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   98.990274][   T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[   99.016154][   T45] asix: probe of 3-1:0.0 failed with error -71
[   99.027170][   T45] usb 3-1: USB disconnect, device number 7
16:48:45 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, 0x0)

16:48:45 executing program 3:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)

16:48:45 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/155)

16:48:45 executing program 1:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "1a377004"})

[   99.162780][  T726] usb 5-1: USB disconnect, device number 5
[   99.255506][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
16:48:46 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b391"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[   99.495908][    T8] usb 1-1: Using ep0 maxpacket: 32
[   99.535734][ T4789] usb 2-1: new high-speed USB device number 6 using dummy_hcd
16:48:46 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f05ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "c852571f3e4a5756c7a0367e19"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

[   99.625479][    T8] usb 1-1: config 1 has an invalid interface number: 186 but max is 1
[   99.633671][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.643894][    T8] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[   99.652905][    T8] usb 1-1: config 1 has no interface number 2
[   99.659976][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
16:48:46 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)

[   99.670924][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.680771][    T8] usb 1-1: config 1 interface 186 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   99.694066][    T8] usb 1-1: config 1 interface 186 has no altsetting 0
[   99.805430][  T726] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   99.876292][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.885364][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.893360][    T8] usb 1-1: Product: syz
[   99.897554][    T8] usb 1-1: Manufacturer: syz
[   99.902147][    T8] usb 1-1: SerialNumber: syz
[   99.947054][    T8] usb 1-1: selecting invalid altsetting 1
[  100.005422][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  100.025607][ T4804] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  100.055408][  T726] usb 3-1: Using ep0 maxpacket: 8
[  100.095731][ T4789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  100.104838][ T4789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.112893][ T4789] usb 2-1: Product: syz
[  100.117108][ T4789] usb 2-1: Manufacturer: syz
[  100.121704][ T4789] usb 2-1: SerialNumber: syz
[  100.155924][    T8] cdc_ncm 1-1:1.0: bind() failure
[  100.166108][    T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  100.167802][ T4789] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  100.172926][    T8] cdc_ncm 1-1:1.1: bind() failure
[  100.186934][  T726] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  100.196053][  T726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.213978][  T726] usb 3-1: config 0 descriptor??
[  100.236201][    T8] usb 1-1: USB disconnect, device number 5
[  100.275473][ T4804] usb 5-1: Using ep0 maxpacket: 8
[  100.365568][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.376538][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  100.389458][   T45] usb 4-1: New USB device found, idVendor=057f, idProduct=ffff, bcdDevice= 0.00
[  100.398604][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.409445][   T45] usb 4-1: config 0 descriptor??
[  100.415570][ T4804] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  100.423883][ T4804] usb 5-1: config 179 has no interface number 0
[  100.430596][ T4804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  100.441705][ T4804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  100.453002][ T4804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  100.463055][ T4804] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  100.476364][ T4804] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  100.485445][ T4804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.515838][ T4879] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
16:48:47 executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "1a377004", {0x1, 0x1, 0x0, 0x9, 0x1f}})

[  100.754842][    T8] usb 5-1: USB disconnect, device number 6
[  100.825531][ T4786] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  100.896669][   T45] hid (null): unknown global tag 0xc
[  100.906249][   T45] hid-generic 0003:057F:FFFF.0002: unknown global tag 0xc
[  100.913399][   T45] hid-generic 0003:057F:FFFF.0002: item 0 4 1 12 parsing failed
[  100.922187][   T45] hid-generic: probe of 0003:057F:FFFF.0002 failed with error -22
[  100.965608][ T4804] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  101.097800][   T45] usb 4-1: USB disconnect, device number 5
16:48:47 executing program 4:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002200)=@lang_id={0x4}}]})

[  101.231190][    T8] usb 2-1: USB disconnect, device number 6
[  101.485644][ T4804] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  101.494728][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.502771][ T4804] usb 1-1: Product: syz
[  101.506989][ T4804] usb 1-1: Manufacturer: syz
[  101.511686][ T4804] usb 1-1: SerialNumber: syz
16:48:48 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4}, @mbim={0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}}]}}, 0x0)

[  101.557020][ T4804] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  101.585438][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
16:48:48 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002140)=@lang_id={0x4}}]})

[  101.825431][    T9] usb 5-1: Using ep0 maxpacket: 16
[  101.915529][ T4804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  101.945693][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  102.105405][ T4786] usb 2-1: Service connection timeout for: 256
[  102.111626][ T4786] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  102.115625][ T4806] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  102.122348][ T4786] ath9k_htc: Failed to initialize the device
[  102.128594][    T9] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  102.143471][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.151533][    T9] usb 5-1: Product: syz
[  102.155731][    T9] usb 5-1: SerialNumber: syz
[  102.160367][    T8] usb 2-1: ath9k_htc: USB layer deinitialized
[  102.195460][ T4804] usb 4-1: Using ep0 maxpacket: 32
[  102.218377][    T9] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  102.315602][ T4804] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.325698][ T4804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  102.335486][ T4804] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  102.345234][ T4804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.355242][ T4804] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  102.420058][    T9] usb 5-1: USB disconnect, device number 7
[  102.515529][ T4804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.524572][ T4804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.532648][ T4804] usb 4-1: Product: syz
[  102.536845][ T4804] usb 4-1: Manufacturer: syz
[  102.541451][ T4804] usb 4-1: SerialNumber: syz
[  102.543041][   T45] usb 1-1: USB disconnect, device number 6
[  102.558767][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  102.805409][    T8] usb 2-1: Using ep0 maxpacket: 16
[  102.835615][ T4804] cdc_ncm 4-1:1.0: bind() failure
[  102.846381][ T4804] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  102.853202][ T4804] cdc_ncm 4-1:1.1: bind() failure
[  102.863238][ T4804] usb 4-1: USB disconnect, device number 6
16:48:49 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  102.935613][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
16:48:49 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4}, @mbim={0xc}]}}}}}]}}, 0x0)

[  103.105594][    T8] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  103.114686][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.122847][    T8] usb 2-1: Product: syz
[  103.127042][    T8] usb 2-1: SerialNumber: syz
[  103.178313][    T8] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  103.255430][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
16:48:49 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000079381010c2154000fb070182030109021b0009000000080904000001e104550009058b0b40"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000000)="e71f96259a2595aa079d84f7d789e7a38767a7890100bf", 0x17)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[  103.376556][ T4806] usb 1-1: Service connection timeout for: 256
[  103.381853][ T4789] usb 2-1: USB disconnect, device number 7
[  103.382729][ T4806] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  103.383713][ T4806] ath9k_htc: Failed to initialize the device
[  103.402949][  T726] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  103.413370][  T726] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  103.424991][  T726] asix: probe of 3-1:0.0 failed with error -71
[  103.431714][   T45] usb 1-1: ath9k_htc: USB layer deinitialized
[  103.436261][  T726] usb 3-1: USB disconnect, device number 8
[  103.575527][    T9] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  103.625400][ T4786] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  103.655519][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.664422][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.675358][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.755597][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.764496][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.775518][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.815433][   T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd
16:48:50 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x0, 0x0}]})

16:48:50 executing program 1:
syz_open_dev$evdev(&(0x7f0000005280), 0x3, 0x4040)

[  103.865412][ T4786] usb 4-1: Using ep0 maxpacket: 16
[  103.865706][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.879459][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.890344][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
16:48:50 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd3, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x1}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)

[  103.985585][ T4786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.994530][ T4786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  103.995604][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.015282][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.026293][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.056348][   T45] usb 1-1: Using ep0 maxpacket: 32
[  104.115503][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.124411][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.135298][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.165517][ T4786] usb 4-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb
[  104.174585][ T4786] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  104.182860][ T4786] usb 4-1: Product: syz
[  104.187076][ T4786] usb 4-1: Manufacturer: syz
[  104.191677][ T4786] usb 4-1: SerialNumber: syz
[  104.196388][   T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.207263][   T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.219597][ T4786] usb 4-1: config 0 descriptor??
[  104.224861][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  104.225703][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.234648][   T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  104.247014][  T726] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  104.253289][   T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  104.253324][   T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  104.261643][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.283849][ T4786] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  104.291067][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.335423][ T4789] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  104.405490][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.414522][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.425444][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.425571][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.441157][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.449167][   T45] usb 1-1: Product: syz
[  104.453324][   T45] usb 1-1: Manufacturer: syz
[  104.457959][   T45] usb 1-1: SerialNumber: syz
[  104.515926][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  104.524894][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  104.535850][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.545488][  T726] usb 3-1: Using ep0 maxpacket: 16
[  104.575434][ T4789] usb 2-1: Using ep0 maxpacket: 16
[  104.595443][ T4786] rc_core: IR keymap rc-imon-pad not found
[  104.601274][ T4786] Registered IR keymap rc-empty
[  104.606515][ T4786] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  104.616715][ T4786] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  104.695932][  T726] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  104.705610][ T4789] usb 2-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.719863][ T4789] usb 2-1: config 1 interface 0 altsetting 211 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.732895][ T4789] usb 2-1: config 1 interface 0 has no altsetting 0
[  104.745866][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  104.754931][    T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  104.757778][ T4786] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  104.763586][    T9] usb 5-1: Product: syz
[  104.773912][   T45] cdc_ncm 1-1:1.0: bind() failure
[  104.777502][    T9] usb 5-1: Manufacturer: syz
[  104.777525][    T9] usb 5-1: SerialNumber: syz
[  104.793531][    T9] usb 5-1: config 0 descriptor??
[  104.796798][ T4786] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7
[  104.813804][   T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  104.820680][   T45] cdc_ncm 1-1:1.1: bind() failure
[  104.830515][ T4786] imon 4-1:0.0: iMON device (15c2:0040, intf0) on usb<4:7> initialized
[  104.843960][    T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1
[  104.849018][   T45] usb 1-1: USB disconnect, device number 7
[  104.955657][ T4789] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  104.964751][ T4789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.972820][ T4789] usb 2-1: Product: syz
[  104.977412][ T4789] usb 2-1: Manufacturer: syz
[  104.982033][ T4789] usb 2-1: SerialNumber: syz
[  105.039779][    T9] usb 5-1: USB disconnect, device number 8
[  105.057997][    T9] yurex 5-1:0.0: USB YUREX #1 now disconnected
[  105.065693][  T726] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  105.074773][  T726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.082788][  T726] usb 3-1: Product: syz
[  105.087109][  T726] usb 3-1: SerialNumber: syz
[  105.138146][  T726] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
16:48:51 executing program 0:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='n`\x00N'])
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000004c0)={[{}]})

[  105.305854][ T4789] usbhid 2-1:1.0: can't add hid device: -22
[  105.311880][ T4789] usbhid: probe of 2-1:1.0 failed with error -22
[  105.322236][ T4789] usb 2-1: USB disconnect, device number 8
[  105.343850][   T45] usb 3-1: USB disconnect, device number 9
16:48:52 executing program 4:
syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x18642)

16:48:52 executing program 4:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7f}}]}}}]}}]}}, 0x0)

[  105.545434][  T726] usb 1-1: new high-speed USB device number 8 using dummy_hcd
16:48:52 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)='S', 0x1)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x44}, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4}, &(0x7f0000000600)={0x40, 0x7, 0x2}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'uD'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0})

16:48:52 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x0, 0x0}]})

[  105.905629][   T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  106.085520][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  106.145402][   T45] usb 5-1: Using ep0 maxpacket: 16
[  106.165558][  T726] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  106.174655][  T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.182684][  T726] usb 1-1: Product: syz
[  106.186882][  T726] usb 1-1: Manufacturer: syz
[  106.191489][  T726] usb 1-1: SerialNumber: syz
[  106.196136][ T4806] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  106.257402][  T726] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  106.265703][   T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.276747][   T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.286536][   T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10
[  106.297649][   T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  106.405638][    T9] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  106.465620][   T45] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  106.474659][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.482710][   T45] usb 5-1: Product: syz
[  106.486917][   T45] usb 5-1: Manufacturer: syz
[  106.491506][   T45] usb 5-1: SerialNumber: syz
[  106.495381][ T4806] usb 3-1: Using ep0 maxpacket: 16
[  106.506034][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.514972][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.526008][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.605933][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.614862][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.625892][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.632570][ T4806] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  106.725562][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.734471][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.745469][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.776008][   T45] usbhid 5-1:1.0: can't add hid device: -22
[  106.782031][   T45] usbhid: probe of 5-1:1.0 failed with error -22
[  106.792653][   T45] usb 5-1: USB disconnect, device number 9
[  106.865881][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.874861][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.885887][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.945749][    T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  106.965714][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  106.974614][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  106.985635][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.085579][ T4806] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  107.094667][ T4806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.102705][ T4806] usb 3-1: Product: syz
[  107.106947][ T4806] usb 3-1: SerialNumber: syz
[  107.111590][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  107.120533][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  107.131474][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.178411][ T4806] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  107.215596][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
16:48:53 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002200)=@lang_id={0x4}}]})

[  107.224569][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  107.235527][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.315569][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  107.324560][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  107.335697][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.395763][ T4789] usb 3-1: USB disconnect, device number 10
[  107.495618][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  107.504716][    T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  107.513078][    T9] usb 2-1: Product: syz
[  107.517297][    T9] usb 2-1: Manufacturer: syz
[  107.521887][    T9] usb 2-1: SerialNumber: syz
[  107.529488][    T9] usb 2-1: config 0 descriptor??
[  107.550805][ T4786] usb 1-1: USB disconnect, device number 8
[  107.574500][    T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1
[  107.575515][   T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd
16:48:54 executing program 3:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002140)=@lang_id={0x4}}]})

[  107.615591][ T4914] imon:send_packet: task interrupted
[  107.621104][ T4914] imon:send_packet: packet tx failed (-2)
[  107.627559][ T4914] imon:vfd_write: send packet #5 failed
[  107.650182][    T9] usb 4-1: USB disconnect, device number 7
[  107.774985][ T4806] usb 2-1: USB disconnect, device number 9
[  107.786882][ T4806] yurex 2-1:0.0: USB YUREX #1 now disconnected
[  107.845417][   T45] usb 5-1: Using ep0 maxpacket: 16
16:48:54 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[  107.965691][   T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
16:48:54 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  108.016010][    T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  108.026270][    T8] ath9k_htc: Failed to initialize the device
[  108.033522][ T4786] usb 1-1: ath9k_htc: USB layer deinitialized
[  108.095958][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  108.135559][   T45] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  108.144631][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.152865][   T45] usb 5-1: Product: syz
[  108.157227][   T45] usb 5-1: SerialNumber: syz
[  108.198623][   T45] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  108.315415][ T4789] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  108.375380][    T9] usb 4-1: Using ep0 maxpacket: 16
[  108.399528][ T4806] usb 5-1: USB disconnect, device number 10
16:48:55 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[  108.495820][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  108.515752][ T4786] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  108.575399][ T4789] usb 3-1: Using ep0 maxpacket: 16
[  108.665547][    T9] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  108.674616][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.682691][    T9] usb 4-1: Product: syz
[  108.686907][    T9] usb 4-1: SerialNumber: syz
[  108.728286][    T9] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  108.735588][ T4789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.735632][ T4789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.756506][ T4789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.795411][ T4786] usb 1-1: Using ep0 maxpacket: 16
[  108.815465][  T726] usb 2-1: new high-speed USB device number 10 using dummy_hcd
16:48:55 executing program 4:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[  108.932531][    T9] usb 4-1: USB disconnect, device number 8
[  108.946319][ T4786] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  108.968564][ T4789] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  108.977978][ T4789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.986032][ T4789] usb 3-1: Product: syz
[  108.990225][ T4789] usb 3-1: Manufacturer: syz
[  108.994845][ T4789] usb 3-1: SerialNumber: syz
[  109.055907][  T726] usb 2-1: Using ep0 maxpacket: 16
[  109.175522][  T726] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  109.275813][ T4789] usbhid 3-1:1.0: can't add hid device: -22
[  109.281871][ T4789] usbhid: probe of 3-1:1.0 failed with error -22
[  109.288601][ T4786] usb 1-1: string descriptor 0 read error: -22
[  109.294945][ T4786] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  109.304026][ T4786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.319555][ T4789] usb 3-1: USB disconnect, device number 11
[  109.325556][   T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  109.346243][  T726] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  109.355394][  T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.363399][  T726] usb 2-1: Product: syz
[  109.367652][  T726] usb 2-1: Manufacturer: syz
[  109.372261][  T726] usb 2-1: SerialNumber: syz
[  109.388964][ T4786] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:48:56 executing program 3:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x106, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000020c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002140)=@lang_id={0x4}}]})

[  109.418844][  T726] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  109.589336][ T4789] usb 1-1: USB disconnect, device number 9
[  109.619586][ T4786] usb 2-1: USB disconnect, device number 10
16:48:56 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000980)="af", 0x1)
syz_usb_disconnect(0xffffffffffffffff)

[  109.715565][   T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  109.725364][   T45] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  109.755469][  T726] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  109.845605][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  109.854675][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  109.862910][   T45] usb 5-1: SerialNumber: syz
[  109.895918][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  110.005417][  T726] usb 4-1: Using ep0 maxpacket: 16
16:48:56 executing program 0:
syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  110.065389][ T4792] usb 3-1: new high-speed USB device number 12 using dummy_hcd
16:48:56 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  110.123284][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  110.155843][  T726] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  110.345589][ T4792] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  110.405735][  T726] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40
[  110.414817][  T726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.422844][  T726] usb 4-1: Product: syz
[  110.425714][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.427016][  T726] usb 4-1: SerialNumber: syz
[  110.440584][ T4786] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  110.448254][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.459182][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.465970][ T4789] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  110.478159][  T726] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  110.545508][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.554451][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.565443][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.595045][   T45] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  110.645831][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.654832][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.665794][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.705011][   T45] usb 4-1: USB disconnect, device number 9
[  110.725681][ T4789] usb 2-1: Using ep0 maxpacket: 32
[  110.745580][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.754809][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.765868][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.791834][  T726] usb 5-1: USB disconnect, device number 11
[  110.802300][  T726] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  110.845618][ T4786] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  110.854406][ T4786] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  110.864583][ T4786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.873589][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.883420][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.894778][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.901931][ T4789] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  110.910694][ T4789] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  110.919236][ T4789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  110.931661][ T4789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  110.941432][ T4789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  110.951267][ T4789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  110.961064][ T4789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  110.970904][ T4789] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  111.026680][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.036275][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.047588][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  111.075778][ T4789] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  111.084895][ T4789] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  111.093111][ T4789] usb 2-1: Product: syz
[  111.127170][ T4789] usb 2-1: config 0 descriptor??
[  111.145605][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.155735][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.166796][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  111.205586][ T4786] usb 1-1: string descriptor 0 read error: -22
[  111.212379][ T4786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.221614][ T4786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.265833][ T4792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  111.275009][ T4792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  111.286098][ T4792] usb 3-1: config 0 interface 0 has no altsetting 0
[  111.301948][ T4786] usb 1-1: 0:2 : does not exist
16:48:57 executing program 4:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

16:48:58 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0)

[  111.412343][ T4789] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  111.465570][ T4792] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  111.474682][ T4792] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  111.483158][ T4792] usb 3-1: Product: syz
[  111.487400][ T4792] usb 3-1: Manufacturer: syz
[  111.492024][ T4792] usb 3-1: SerialNumber: syz
16:48:58 executing program 3:
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

[  111.520128][ T4786] usb 1-1: USB disconnect, device number 10
[  111.576593][ T4792] usb 3-1: config 0 descriptor??
[  111.594217][   T45] usb 2-1: USB disconnect, device number 11
[  111.621580][   T45] usblp0: removed
[  111.643809][ T4792] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  111.735439][ T4789] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  111.905484][   T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd
16:48:58 executing program 0:
r0 = syz_open_dev$hiddev(0x0, 0x2, 0x240000)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x80)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000004c0)=""/62)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000500)=0x3)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "03"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}, [@acm={0x4}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8}}}}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x7fff, 0x1, 0x1, {0x22, 0xe53}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x420, 0x80, 0x40, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0xfa, 0x4, 0x8, 0x20}, 0x56, &(0x7f0000000080)={0x5, 0xf, 0x56, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x50, "115048bade4d12dfa0126248e4343c53"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x69, 0x20, 0x6, 0x3, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xaa, 0x2, 0x1, 0xf, 0x6, [0x15c87fbccf566499, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "359cf4f0637d7e2ca10887123fddbfc3"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x2, 0x20}]}, 0x7, [{0x24, &(0x7f0000000100)=@string={0x24, 0x3, "d28f3bc47ac863147b8e600948e0428354e8d5110c56916c3f2c22de14ad5943ba6f"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "14350dfa359202be927511ba57c4df25e21d434f104ef41f183e79f1a1a0899569e4923963f67e3075dec65e7a9bae6cfff304bd89873088e64ea3388ddc00afaa312e282a780c00f44942d57bfcd6186d432ba25395d75c8ba53cf81c0307"}}, {0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "56e90221f9503357624600085cbaf86b69005e5860dff1a792ac16d21ac8bf59973959601f617678c2b3ee426036b6b1434793157f38738772f4f9cda5c8046d4b7d9806665c8d2c22f821de7332993f82505e4bdfd299d91becf75a7d05753bc41f66bf58adc8bf2ac4a187b59f09f31eae94189fe4cfc510617135cd1d8b9dab64117260043682353b346312ececcf23bb244ee5dfe7c62cc580d7f1471a46773ffbe5b8d5b944468c651615347b128752dfb6658c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}]})

[  112.031574][  T726] usb 3-1: USB disconnect, device number 12
[  112.050084][  T726] yurex 3-1:0.0: USB YUREX #0 now disconnected
16:48:58 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  112.126348][ T4789] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  112.136186][ T4789] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  112.175490][   T22] usb 4-1: Using ep0 maxpacket: 16
[  112.245734][ T4789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.254817][ T4789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  112.262860][ T4789] usb 5-1: SerialNumber: syz
[  112.285953][ T4962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  112.307495][   T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  112.316325][   T22] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  112.326496][   T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.355478][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  112.415480][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  112.495547][   T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.504636][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.512688][   T22] usb 4-1: Product: syz
[  112.516893][   T22] usb 4-1: Manufacturer: syz
[  112.521502][   T22] usb 4-1: SerialNumber: syz
[  112.525218][ T4962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
16:48:59 executing program 2:
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x30, 0xe8, 0xeb, 0x40, 0x46d, 0x928, 0xa238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x73, 0x9d968b38dc04ec49, 0xfa, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x7e, 0x5}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x7, 0x2, 0x3f, 0x10, 0x4}, 0xb9, &(0x7f0000000d40)={0x5, 0xf, 0xb9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0xe, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "57cd1a1c801381812a676b4db5bc8a6c"}, @ptm_cap={0x3}, @generic={0x96, 0x10, 0xa, "31012c1bf16304b431ba724601e095ca121d88185ecbe9c567a49c01673f6650289742709bd5b3c3fd484b02487f0ca674d9b0ad56954175ec8330ad70a4dc35192dcb3af1a722dcdbb9f068db77f96c69e721550201df9684e0ee7e31570d841c56409a9a730164bb077b17069ba4e2f17f099faf7f6760546ad0c5abc06d135fc562ec4258c1677550a2b0c3f7723515c7d7"}]}, 0x1, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3801}}]})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0xf, 0xcb, {0xcb, 0x5, "21c4ad33edfd44e9839df22c6dcdccf80f93943222ffaeb30f8fea043368ed63eef7b4eb5ddfae87aa0a9f48be1a94e0b2f9226c55dfef15285e953d672e03fe18e4d6b26f78d68fdd5c8217f75aebcd0d228641bd60589d55a566bf1a8de5d02e7d61a1a57d5b5e6533260a19b89a05a869f5fa541ebb5730d6caf9ff73a5894eb2cabf2e72d5755e83a601564ffaefd6388aea044071fc1c1f5693bb82e9853d7e420a9bbdb8f92e7cdfc983594f2f3e6bb5d5a012ef3c0774a0539b17a9baa7eee37a1387c07af2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000fdc000000050fdc000324100a00660000000ff00100003fff007f00c00000cf807f00ac874408a81002b03651f969f97adcee005051d48d6571e92abff6e7b67fc18ebdc9f3fcb760f68ea195d01aecfb22d9a9e962fb71b5886ad71404301760be648cde193a1d59f3a5780900000000000000f8dcabc46f529436cb79d27a86e4f11f5bd716db537534bbe8f09bfdaeeef426ffbba935e1f59693402ef7fd343c45959f51a83662ea1e2eb1f86d9bafc212dada7c378555d70595b936c8940785c7ef880e1de15115c964f255b50b10010c220007f83b0600"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x8a, 0x7f, "d090d773", "158e518b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8e, 0x8, 0x7, 0xb7, 0xf9, 0x45, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0xa, 0x1d, "b1a043842a7ce5270d12d7c5e9696a74c8b6c38cdb22000623a673faed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, '[F'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xf001}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, '7 '}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x78}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}})
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xae, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x2, 0x3, 0x20, 0xff, 0xf0}, 0xf, &(0x7f0000000880)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xaa, 0xc4, 0x7}]}, 0x5, [{0x102, &(0x7f00000008c0)=@string={0x102, 0x3, "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"}}, {0xa4, &(0x7f0000000a00)=@string={0xa4, 0x3, "3d1c904660aa703a8ad16e3798c0acd4e6d06fce1cd5ee21b98e9872766d2da441286d8fc57dc3f7511ab1c9bbedbbdccf05804cfbbe3a07f247299b79e92b203fb32a4e3004166e31699668603d8ad173d22494678cc05a43cc7712be9be3bbb4b5a5d853f91f022f6c24d14c433a629c5f47c545116f10c571c61eea7318a8fa0bb0ee6c51c4a93c1fd7dc74bdcca6cd5ddd855145c7aaf73756d5c6cb4a98ee99"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1007}}, {0xc6, &(0x7f0000000b00)=@string={0xc6, 0x3, "42699ef6935508375ac77e175c835f93bf529d0412724b0e1a13011e9e000330576951fd35bb60cc6d4b299296d9fd9f56ffea9c8eb404335392a7ed57965b259b4b631ff2c463ba1ab0ca75639a99635dddd49527617dfdd9fc9e98531b5d3097e91e4083573c06a41743f82c64d318398cec75c5b52f6b802cc39ff5d33ed85234e05535ea2322f1a3481346d63b0af07f2ca0c99b1720269400cccebe27a19276a76d02ea58d84481d505a218edaac15ba47cb513d8828222a780bb55cdc303e1b36d"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_disconnect(r0)

[  112.635456][    T8] usb 1-1: Using ep0 maxpacket: 8
[  112.665481][    T9] usb 2-1: Using ep0 maxpacket: 32
[  112.708035][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.717817][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.727642][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.736375][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.816577][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  112.824452][    T9] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  112.832857][    T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  112.835855][   T22] usb 4-1: 0:2 : does not exist
[  112.841022][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  112.856877][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  112.857614][   T22] usb 4-1: USB disconnect, device number 10
[  112.866575][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  112.866618][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  112.866654][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  112.901865][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  112.908353][ T4794] udevd[4794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  112.915050][  T726] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  112.938342][    T8] usb 1-1: unable to read config index 0 descriptor/start: -71
[  112.945996][    T8] usb 1-1: can't read configurations, error -71
[  112.993917][ T4789] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  113.035984][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  113.045058][    T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  113.053290][    T9] usb 2-1: Product: syz
[  113.060600][    T9] usb 2-1: config 0 descriptor??
[  113.208590][   T22] usb 5-1: USB disconnect, device number 12
[  113.224020][   T22] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
16:48:59 executing program 0:
r0 = syz_open_dev$hiddev(0x0, 0x2, 0x240000)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) (async)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x80) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x80)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000004c0)=""/62)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000500)=0x3)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x3) (async)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "03"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}, [@acm={0x4}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8}}}}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x7fff, 0x1, 0x1, {0x22, 0xe53}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x420, 0x80, 0x40, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0xfa, 0x4, 0x8, 0x20}, 0x56, &(0x7f0000000080)={0x5, 0xf, 0x56, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x50, "115048bade4d12dfa0126248e4343c53"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x69, 0x20, 0x6, 0x3, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xaa, 0x2, 0x1, 0xf, 0x6, [0x15c87fbccf566499, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "359cf4f0637d7e2ca10887123fddbfc3"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x2, 0x20}]}, 0x7, [{0x24, &(0x7f0000000100)=@string={0x24, 0x3, "d28f3bc47ac863147b8e600948e0428354e8d5110c56916c3f2c22de14ad5943ba6f"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "14350dfa359202be927511ba57c4df25e21d434f104ef41f183e79f1a1a0899569e4923963f67e3075dec65e7a9bae6cfff304bd89873088e64ea3388ddc00afaa312e282a780c00f44942d57bfcd6186d432ba25395d75c8ba53cf81c0307"}}, {0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "56e90221f9503357624600085cbaf86b69005e5860dff1a792ac16d21ac8bf59973959601f617678c2b3ee426036b6b1434793157f38738772f4f9cda5c8046d4b7d9806665c8d2c22f821de7332993f82505e4bdfd299d91becf75a7d05753bc41f66bf58adc8bf2ac4a187b59f09f31eae94189fe4cfc510617135cd1d8b9dab64117260043682353b346312ececcf23bb244ee5dfe7c62cc580d7f1471a46773ffbe5b8d5b944468c651615347b128752dfb6658c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}]})

16:48:59 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

[  113.336111][  T726] usb 3-1: config 0 has no interfaces?
[  113.358190][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble}) (async)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble}) (async)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

[  113.515727][  T726] usb 3-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=a2.38
[  113.524833][  T726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.532980][  T726] usb 3-1: Product: syz
[  113.537224][  T726] usb 3-1: Manufacturer: syz
[  113.541852][  T726] usb 3-1: SerialNumber: syz
[  113.552243][  T726] usb 3-1: config 0 descriptor??
[  113.590454][ T4789] usb 2-1: USB disconnect, device number 12
[  113.608317][ T4789] usblp0: removed
16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

16:49:00 executing program 4:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000001009050200000005000009047d01013481080009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$uac1(0x2, 0xbf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x6, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x0, 0x4, 0x5, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x7, 0x6], 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x24, 0x81, "84bff1"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x8cf0, 0x81, "3799"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x5, "0f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x9, 0x4, {0x7, 0x25, 0x1, 0x81, 0x5, 0x53}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x760, 0x6, 0xff, 0x4a, 0x8, 0x9}, 0xcf, &(0x7f0000000180)={0x5, 0xf, 0xcf, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "772d3834228bb6bc5cfc74b0d491b9bf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1d2febe8e3d645c71e10cb516a8e16b6"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf, 0x6, [0xc00f, 0xf, 0x0, 0xc0, 0xff0000]}, @generic={0x82, 0x10, 0x1, "7975d3ed7148ed376abfabe14285950eb5d64ed02bf6aec7148c3c4f5e369a0c2538ff69c388aa7562fff5e2b082e18eadb234ca9c4a24de59fd3b801038707b288c0b532b8efc23ec3e3e9a878d4edaa44d2718465a6fa5aca9f2ce22741337a1657a469d70f8da24b5d8e5a2d159f8fd81b6610cf93692eee6825d052ffe"}]}, 0x4, [{0x47, &(0x7f0000000280)=@string={0x47, 0x3, "98b64b61b096cc1ff3c6038303d043bd6e8ada2c03bb50bb1667c7ff2061e6b97d152590a7580a2e6218875ce8dbf70cd27354b14a0c88851d998e4c8eaa8cbeb75684427c"}}, {0xec, &(0x7f0000000300)=@string={0xec, 0x3, "8cbafd31ec0d6697c52a70cbacffca353701a85a45e905fc851c0d637de5661e770974b54d7f5a67af950ee1f8b30367892202874231a334282e8695a21339a99fb1bb2dc01b175e714c76bf7af19864b646b55284e8c64efac70cc2b031b9ee7b473ab93babdd1797a9e74338173f5469ffaa9d8360057f10cf5b3295ed241bdf79e7ce97245dcce9fb84d361bcfb8fcc67329278d00cea086a671c6db70883b3cf8a14d0edadb84a2cb1f190bf9f937985b43ca71fd0628d016e021d8172f3a5242d3b1196be68674e3703cc90c272344ed30495e6b0a57ad8e4f15d80a127f1f5a13f2880861b313c"}}, {0xac, &(0x7f0000000400)=@string={0xac, 0x3, "b5d24b7f3f2397f3761a445c45136081ca40da197f951864a95509196ae7f4151d7f171870ba8de882166b57e32f8ff19e5f3c91ed907875d4eee05c61d4828eb1b888051f2aaacc4ae4f7f16938d08edcbe2b54f7100b7f243b950f43a2df8f388941164406e97d1cd3dcae731e484a3c4c02f3983da89f467f860cd2ee480f5da878d30cb28fe468736194203cd5c928ba4c34d4f4abbdc95e4ea771de62dc553c4cfef35da28595a5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x5d9014650e7b1d4b}}]})
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x19, {0x19, 0x5, "153e1dc0f5c21439b03563bf8fb0e77370217408336671"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000600)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x2, [@generic={0x3b, 0x10, 0x2, "c24c648b3a7541671850c00ff3202cad2c0b141f858ee32ba3163a299606ba6e1ef6140b61a74db408872b437dc0daf8006f50d74b2c95bd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe0, 0xc1, 0x6}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xbe, 0x3, "b0f1c93f", "22b69fbd"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xba, 0x40, 0x8, 0x9, 0x9b14}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0xa8dde64eb5e374d8, 0x15, 0x76, "947050d3af2ed5b1ed885931ea4c18096f7619efd930b1dc4fbb16254ef2f28cd53c14f29c85f5ee082cb379bae306f131e0df3517a8b5c7d92ca1f1a797f6caa5912f2512ab90865879306df15048de4a03c7c826c7da201ea5b6c776f2cceae19ef05961b972254befe4dea431ab47e95e9c323df6"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf00]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "64ad"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="f0d1e4d589b7"}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "fbc7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x34}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xe0}})

16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
write$char_usb(r1, &(0x7f0000000100)="c77c0a02085f585423fc93801c25f57878ddb70dc350cdd6821662aae4c1a74c2578795dcd33cabae8212760078d2158b08946dfb65883e485c477434fe59efdf6b021ac69b3f54dfdc107902811dc254d3fec74f0329e95", 0x58)

[  113.832427][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.846460][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  113.849887][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

[  114.095895][    T8] usb 1-1: Using ep0 maxpacket: 8
[  114.125519][ T4789] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  114.157497][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
16:49:00 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  114.176089][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.206085][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
16:49:00 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

[  114.220655][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:49:00 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.307570][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
16:49:00 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.375443][ T4789] usb 5-1: Using ep0 maxpacket: 16
16:49:01 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.397090][    T8] usb 1-1: unable to read config index 0 descriptor/start: -71
[  114.404734][    T8] usb 1-1: can't read configurations, error -71
[  114.429368][    T8] usb usb1-port1: attempt power cycle
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.505655][ T4789] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  114.514043][ T4789] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  114.522592][ T4789] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  114.531087][ T4789] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  114.539695][ T4789] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  114.548642][ T4789] usb 5-1: config 0 has no interface number 0
[  114.554797][ T4789] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  114.565924][ T4789] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  114.566102][  T726] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  114.575809][ T4789] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.578216][ T4789] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  114.606472][ T4789] usb 5-1: config 0 interface 125 has no altsetting 0
[  114.613270][ T4789] usb 5-1: config 0 interface 125 has no altsetting 2
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:01 executing program 0:
r0 = syz_open_dev$hiddev(0x0, 0x2, 0x240000)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x0) (async, rerun: 64)
r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x6, 0x80) (rerun: 64)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000004c0)=""/62) (async)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000500)=0x3) (async, rerun: 32)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000440)=0x3) (async, rerun: 32)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "03"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5}, [@acm={0x4}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8}}}}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x7fff, 0x1, 0x1, {0x22, 0xe53}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x420, 0x80, 0x40, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0xfa, 0x4, 0x8, 0x20}, 0x56, &(0x7f0000000080)={0x5, 0xf, 0x56, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x50, "115048bade4d12dfa0126248e4343c53"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x69, 0x20, 0x6, 0x3, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xaa, 0x2, 0x1, 0xf, 0x6, [0x15c87fbccf566499, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "359cf4f0637d7e2ca10887123fddbfc3"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x2, 0x20}]}, 0x7, [{0x24, &(0x7f0000000100)=@string={0x24, 0x3, "d28f3bc47ac863147b8e600948e0428354e8d5110c56916c3f2c22de14ad5943ba6f"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x61, &(0x7f0000000200)=@string={0x61, 0x3, "14350dfa359202be927511ba57c4df25e21d434f104ef41f183e79f1a1a0899569e4923963f67e3075dec65e7a9bae6cfff304bd89873088e64ea3388ddc00afaa312e282a780c00f44942d57bfcd6186d432ba25395d75c8ba53cf81c0307"}}, {0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "56e90221f9503357624600085cbaf86b69005e5860dff1a792ac16d21ac8bf59973959601f617678c2b3ee426036b6b1434793157f38738772f4f9cda5c8046d4b7d9806665c8d2c22f821de7332993f82505e4bdfd299d91becf75a7d05753bc41f66bf58adc8bf2ac4a187b59f09f31eae94189fe4cfc510617135cd1d8b9dab64117260043682353b346312ececcf23bb244ee5dfe7c62cc580d7f1471a46773ffbe5b8d5b944468c651615347b128752dfb6658c"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}]})

16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.775741][ T4789] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  114.784826][ T4789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.792906][ T4789] usb 5-1: Product: syz
[  114.797128][ T4789] usb 5-1: Manufacturer: syz
[  114.801751][ T4789] usb 5-1: SerialNumber: syz
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.837592][ T4789] usb 5-1: config 0 descriptor??
[  114.855569][  T726] usb 2-1: Using ep0 maxpacket: 32
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.892295][ T4789] usb 5-1: selecting invalid altsetting 2
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  114.995591][  T726] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  115.003969][  T726] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  115.012174][  T726] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  115.021947][  T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.031675][  T726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.041376][  T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  115.051178][  T726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  115.060963][  T726] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.156286][  T726] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  115.165783][  T726] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  115.174214][  T726] usb 2-1: Product: syz
[  115.179085][    T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  115.190622][  T726] usb 2-1: config 0 descriptor??
16:49:01 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.296196][    T8] usb 1-1: Using ep0 maxpacket: 8
[  115.367047][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.375617][ T5052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.375875][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.389918][ T5052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.445494][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  115.467715][  T726] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  115.505494][    T8] usb 1-1: unable to read config index 0 descriptor/start: -71
[  115.513115][    T8] usb 1-1: can't read configurations, error -71
16:49:02 executing program 2:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x30, 0xe8, 0xeb, 0x40, 0x46d, 0x928, 0xa238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x30, 0xe8, 0xeb, 0x40, 0x46d, 0x928, 0xa238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x73, 0x9d968b38dc04ec49, 0xfa, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x7e, 0x5}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x7, 0x2, 0x3f, 0x10, 0x4}, 0xb9, &(0x7f0000000d40)={0x5, 0xf, 0xb9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0xe, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "57cd1a1c801381812a676b4db5bc8a6c"}, @ptm_cap={0x3}, @generic={0x96, 0x10, 0xa, "31012c1bf16304b431ba724601e095ca121d88185ecbe9c567a49c01673f6650289742709bd5b3c3fd484b02487f0ca674d9b0ad56954175ec8330ad70a4dc35192dcb3af1a722dcdbb9f068db77f96c69e721550201df9684e0ee7e31570d841c56409a9a730164bb077b17069ba4e2f17f099faf7f6760546ad0c5abc06d135fc562ec4258c1677550a2b0c3f7723515c7d7"}]}, 0x1, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3801}}]})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0xf, 0xcb, {0xcb, 0x5, "21c4ad33edfd44e9839df22c6dcdccf80f93943222ffaeb30f8fea043368ed63eef7b4eb5ddfae87aa0a9f48be1a94e0b2f9226c55dfef15285e953d672e03fe18e4d6b26f78d68fdd5c8217f75aebcd0d228641bd60589d55a566bf1a8de5d02e7d61a1a57d5b5e6533260a19b89a05a869f5fa541ebb5730d6caf9ff73a5894eb2cabf2e72d5755e83a601564ffaefd6388aea044071fc1c1f5693bb82e9853d7e420a9bbdb8f92e7cdfc983594f2f3e6bb5d5a012ef3c0774a0539b17a9baa7eee37a1387c07af2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000fdc000000050fdc000324100a00660000000ff00100003fff007f00c00000cf807f00ac874408a81002b03651f969f97adcee005051d48d6571e92abff6e7b67fc18ebdc9f3fcb760f68ea195d01aecfb22d9a9e962fb71b5886ad71404301760be648cde193a1d59f3a5780900000000000000f8dcabc46f529436cb79d27a86e4f11f5bd716db537534bbe8f09bfdaeeef426ffbba935e1f59693402ef7fd343c45959f51a83662ea1e2eb1f86d9bafc212dada7c378555d70595b936c8940785c7ef880e1de15115c964f255b50b10010c220007f83b0600"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x8a, 0x7f, "d090d773", "158e518b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8e, 0x8, 0x7, 0xb7, 0xf9, 0x45, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0xa, 0x1d, "b1a043842a7ce5270d12d7c5e9696a74c8b6c38cdb22000623a673faed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, '[F'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xf001}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, '7 '}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x78}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}})
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xae, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x2, 0x3, 0x20, 0xff, 0xf0}, 0xf, &(0x7f0000000880)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xaa, 0xc4, 0x7}]}, 0x5, [{0x102, &(0x7f00000008c0)=@string={0x102, 0x3, "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"}}, {0xa4, &(0x7f0000000a00)=@string={0xa4, 0x3, "3d1c904660aa703a8ad16e3798c0acd4e6d06fce1cd5ee21b98e9872766d2da441286d8fc57dc3f7511ab1c9bbedbbdccf05804cfbbe3a07f247299b79e92b203fb32a4e3004166e31699668603d8ad173d22494678cc05a43cc7712be9be3bbb4b5a5d853f91f022f6c24d14c433a629c5f47c545116f10c571c61eea7318a8fa0bb0ee6c51c4a93c1fd7dc74bdcca6cd5ddd855145c7aaf73756d5c6cb4a98ee99"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1007}}, {0xc6, &(0x7f0000000b00)=@string={0xc6, 0x3, "42699ef6935508375ac77e175c835f93bf529d0412724b0e1a13011e9e000330576951fd35bb60cc6d4b299296d9fd9f56ffea9c8eb404335392a7ed57965b259b4b631ff2c463ba1ab0ca75639a99635dddd49527617dfdd9fc9e98531b5d3097e91e4083573c06a41743f82c64d318398cec75c5b52f6b802cc39ff5d33ed85234e05535ea2322f1a3481346d63b0af07f2ca0c99b1720269400cccebe27a19276a76d02ea58d84481d505a218edaac15ba47cb513d8828222a780bb55cdc303e1b36d"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_disconnect(r0)

16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.594173][   T22] usb 3-1: USB disconnect, device number 13
16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.666975][ T5075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.668180][   T45] usb 2-1: USB disconnect, device number 13
[  115.680564][ T5075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.702064][   T45] usblp0: removed
16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.756356][ T4789] parport0: fix this legacy no-device port driver!
16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:02 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  115.959473][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.968674][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.977808][  T726] usb 5-1: USB disconnect, device number 13
[  116.075425][   T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd
16:49:03 executing program 4:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000001009050200000005000009047d01013481080009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$uac1(0x2, 0xbf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x6, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x0, 0x4, 0x5, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x7, 0x6], 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x24, 0x81, "84bff1"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x8cf0, 0x81, "3799"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x5, "0f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x9, 0x4, {0x7, 0x25, 0x1, 0x81, 0x5, 0x53}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x760, 0x6, 0xff, 0x4a, 0x8, 0x9}, 0xcf, &(0x7f0000000180)={0x5, 0xf, 0xcf, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "772d3834228bb6bc5cfc74b0d491b9bf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1d2febe8e3d645c71e10cb516a8e16b6"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf, 0x6, [0xc00f, 0xf, 0x0, 0xc0, 0xff0000]}, @generic={0x82, 0x10, 0x1, "7975d3ed7148ed376abfabe14285950eb5d64ed02bf6aec7148c3c4f5e369a0c2538ff69c388aa7562fff5e2b082e18eadb234ca9c4a24de59fd3b801038707b288c0b532b8efc23ec3e3e9a878d4edaa44d2718465a6fa5aca9f2ce22741337a1657a469d70f8da24b5d8e5a2d159f8fd81b6610cf93692eee6825d052ffe"}]}, 0x4, [{0x47, &(0x7f0000000280)=@string={0x47, 0x3, "98b64b61b096cc1ff3c6038303d043bd6e8ada2c03bb50bb1667c7ff2061e6b97d152590a7580a2e6218875ce8dbf70cd27354b14a0c88851d998e4c8eaa8cbeb75684427c"}}, {0xec, &(0x7f0000000300)=@string={0xec, 0x3, "8cbafd31ec0d6697c52a70cbacffca353701a85a45e905fc851c0d637de5661e770974b54d7f5a67af950ee1f8b30367892202874231a334282e8695a21339a99fb1bb2dc01b175e714c76bf7af19864b646b55284e8c64efac70cc2b031b9ee7b473ab93babdd1797a9e74338173f5469ffaa9d8360057f10cf5b3295ed241bdf79e7ce97245dcce9fb84d361bcfb8fcc67329278d00cea086a671c6db70883b3cf8a14d0edadb84a2cb1f190bf9f937985b43ca71fd0628d016e021d8172f3a5242d3b1196be68674e3703cc90c272344ed30495e6b0a57ad8e4f15d80a127f1f5a13f2880861b313c"}}, {0xac, &(0x7f0000000400)=@string={0xac, 0x3, "b5d24b7f3f2397f3761a445c45136081ca40da197f951864a95509196ae7f4151d7f171870ba8de882166b57e32f8ff19e5f3c91ed907875d4eee05c61d4828eb1b888051f2aaacc4ae4f7f16938d08edcbe2b54f7100b7f243b950f43a2df8f388941164406e97d1cd3dcae731e484a3c4c02f3983da89f467f860cd2ee480f5da878d30cb28fe468736194203cd5c928ba4c34d4f4abbdc95e4ea771de62dc553c4cfef35da28595a5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x5d9014650e7b1d4b}}]})
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x19, {0x19, 0x5, "153e1dc0f5c21439b03563bf8fb0e77370217408336671"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000600)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x2, [@generic={0x3b, 0x10, 0x2, "c24c648b3a7541671850c00ff3202cad2c0b141f858ee32ba3163a299606ba6e1ef6140b61a74db408872b437dc0daf8006f50d74b2c95bd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe0, 0xc1, 0x6}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xbe, 0x3, "b0f1c93f", "22b69fbd"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xba, 0x40, 0x8, 0x9, 0x9b14}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0xa8dde64eb5e374d8, 0x15, 0x76, "947050d3af2ed5b1ed885931ea4c18096f7619efd930b1dc4fbb16254ef2f28cd53c14f29c85f5ee082cb379bae306f131e0df3517a8b5c7d92ca1f1a797f6caa5912f2512ab90865879306df15048de4a03c7c826c7da201ea5b6c776f2cceae19ef05961b972254befe4dea431ab47e95e9c323df6"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf00]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "64ad"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="f0d1e4d589b7"}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "fbc7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x34}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xe0}})

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

16:49:03 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="005f6cfa813d955cb5cc80000000d50008"], 0x0, 0x0, 0x0, 0x0}, 0x0)

16:49:03 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  116.465575][   T22] usb 3-1: config 0 has no interfaces?
16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, 0x0, 0x0)

[  116.625585][   T22] usb 3-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=a2.38
[  116.634663][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.643157][   T22] usb 3-1: Product: syz
[  116.647644][   T22] usb 3-1: Manufacturer: syz
[  116.652252][   T22] usb 3-1: SerialNumber: syz
[  116.660165][   T22] usb 3-1: config 0 descriptor??
16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, 0x0, 0x0)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, 0x0, 0x0)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040), 0x0)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040), 0x0)

16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040), 0x0)

[  116.815584][    T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  116.835516][  T726] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  116.845484][   T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd
16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 1)

[  116.910235][ T5075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.925890][ T5075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.949258][ T5116] FAULT_INJECTION: forcing a failure.
[  116.949258][ T5116] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  116.962893][ T5116] CPU: 1 PID: 5116 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  116.973234][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  116.983304][ T5116] Call Trace:
[  116.986600][ T5116]  <TASK>
[  116.989542][ T5116]  dump_stack_lvl+0x125/0x1b0
[  116.994244][ T5116]  should_fail_ex+0x496/0x5b0
[  116.998925][ T5116]  _copy_from_user+0x30/0xf0
[  117.003538][ T5116]  input_event_from_user+0x136/0x3b0
[  117.008850][ T5116]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  117.014675][ T5116]  ? evdev_read+0xdf0/0xdf0
[  117.019205][ T5116]  evdev_write+0x378/0x750
[  117.023654][ T5116]  ? evdev_read+0xdf0/0xdf0
[  117.028201][ T5116]  ? security_file_permission+0x8e/0xb0
[  117.033798][ T5116]  ? evdev_read+0xdf0/0xdf0
[  117.038346][ T5116]  vfs_write+0x294/0x1100
[  117.042712][ T5116]  ? reacquire_held_locks+0x4c0/0x4c0
[  117.048116][ T5116]  ? kernel_write+0x6c0/0x6c0
[  117.052812][ T5116]  ? __fget_files+0x256/0x400
[  117.055429][    T8] usb 1-1: Using ep0 maxpacket: 16
[  117.057516][ T5116]  ? __fget_light+0x173/0x200
[  117.057574][ T5116]  ksys_write+0x1f0/0x250
[  117.071683][ T5116]  ? __ia32_sys_read+0xb0/0xb0
[  117.075490][  T726] usb 2-1: Using ep0 maxpacket: 32
[  117.076448][ T5116]  do_syscall_64+0xd3/0x250
[  117.076486][ T5116]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  117.092035][ T5116] RIP: 0033:0x7f321d319da9
[  117.096466][ T5116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  117.116086][ T5116] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  117.124520][ T5116] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  117.132502][ T5116] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  117.140503][ T5116] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  117.148486][ T5116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
16:49:03 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 2)

[  117.156464][ T5116] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  117.164439][ T5116]  </TASK>
[  117.175815][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.186771][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.196679][    T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  117.205770][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.213951][  T726] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  117.219105][ T5118] FAULT_INJECTION: forcing a failure.
[  117.219105][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.222341][  T726] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  117.235362][ T5118] CPU: 1 PID: 5118 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  117.243416][  T726] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  117.253710][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  117.253727][ T5118] Call Trace:
[  117.253737][ T5118]  <TASK>
[  117.253747][ T5118]  dump_stack_lvl+0x125/0x1b0
[  117.267900][    T8] usb 1-1: config 0 descriptor??
[  117.272607][ T5118]  should_fail_ex+0x496/0x5b0
[  117.276308][  T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.278803][ T5118]  _copy_from_user+0x30/0xf0
[  117.283510][  T726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.288430][ T5118]  input_event_from_user+0x136/0x3b0
[  117.288466][ T5118]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  117.293137][  T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  117.302738][ T5118]  ? preempt_count_sub+0x160/0x160
[  117.302770][ T5118]  ? input_inject_event+0x193/0x370
[  117.302802][ T5118]  evdev_write+0x378/0x750
[  117.302840][ T5118]  ? evdev_read+0xdf0/0xdf0
[  117.307458][  T726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  117.317026][ T5118]  ? security_file_permission+0x8e/0xb0
[  117.317075][ T5118]  ? evdev_read+0xdf0/0xdf0
[  117.317111][ T5118]  vfs_write+0x294/0x1100
[  117.322386][  T726] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  117.328171][ T5118]  ? reacquire_held_locks+0x4c0/0x4c0
[  117.328209][ T5118]  ? kernel_write+0x6c0/0x6c0
[  117.404316][ T5118]  ? __fget_files+0x256/0x400
[  117.409017][ T5118]  ? __fget_light+0x173/0x200
[  117.413725][ T5118]  ksys_write+0x1f0/0x250
[  117.415588][  T726] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  117.418069][ T5118]  ? __ia32_sys_read+0xb0/0xb0
[  117.418114][ T5118]  do_syscall_64+0xd3/0x250
[  117.427191][  T726] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  117.431881][ T5118]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  117.436443][  T726] usb 2-1: Product: syz
[  117.444424][ T5118] RIP: 0033:0x7f321d319da9
[  117.458954][ T5118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  117.471053][  T726] usb 2-1: config 0 descriptor??
[  117.478575][ T5118] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  117.478606][ T5118] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  117.478627][ T5118] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:04 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 3)

[  117.478645][ T5118] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  117.478663][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.478681][ T5118] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  117.478705][ T5118]  </TASK>
[  117.578836][ T5120] FAULT_INJECTION: forcing a failure.
[  117.578836][ T5120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.591939][ T5120] CPU: 1 PID: 5120 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  117.602281][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  117.612359][ T5120] Call Trace:
[  117.615658][ T5120]  <TASK>
[  117.618613][ T5120]  dump_stack_lvl+0x125/0x1b0
[  117.623337][ T5120]  should_fail_ex+0x496/0x5b0
[  117.628035][ T5120]  _copy_from_user+0x30/0xf0
[  117.632632][ T5120]  input_event_from_user+0x136/0x3b0
[  117.637924][ T5120]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  117.643752][ T5120]  ? preempt_count_sub+0x160/0x160
[  117.648892][ T5120]  ? input_inject_event+0x193/0x370
[  117.654103][ T5120]  evdev_write+0x378/0x750
[  117.655578][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  117.658532][ T5120]  ? evdev_read+0xdf0/0xdf0
[  117.658572][ T5120]  ? security_file_permission+0x8e/0xb0
[  117.664592][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  117.668963][ T5120]  ? evdev_read+0xdf0/0xdf0
[  117.669006][ T5120]  vfs_write+0x294/0x1100
[  117.685180][    T8] usb 1-1: USB disconnect, device number 15
[  117.685361][ T5120]  ? reacquire_held_locks+0x4c0/0x4c0
[  117.685404][ T5120]  ? kernel_write+0x6c0/0x6c0
[  117.705738][ T5120]  ? __fget_files+0x256/0x400
[  117.710459][ T5120]  ? __fget_light+0x173/0x200
[  117.715180][ T5120]  ksys_write+0x1f0/0x250
[  117.719554][ T5120]  ? __ia32_sys_read+0xb0/0xb0
[  117.724362][ T5120]  do_syscall_64+0xd3/0x250
[  117.728902][ T5120]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  117.734852][ T5120] RIP: 0033:0x7f321d319da9
[  117.739293][ T5120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  117.758933][ T5120] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  117.762028][  T726] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
16:49:04 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 4)

[  117.767357][ T5120] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  117.767380][ T5120] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  117.767399][ T5120] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  117.767418][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.767436][ T5120] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  117.767461][ T5120]  </TASK>
[  117.821496][   T45] usb 5-1: Using ep0 maxpacket: 16
[  117.865088][ T5122] FAULT_INJECTION: forcing a failure.
[  117.865088][ T5122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.878466][ T5122] CPU: 0 PID: 5122 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  117.888805][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  117.898861][ T5122] Call Trace:
[  117.902136][ T5122]  <TASK>
[  117.905072][ T5122]  dump_stack_lvl+0x125/0x1b0
[  117.909764][ T5122]  should_fail_ex+0x496/0x5b0
[  117.914463][ T5122]  _copy_from_user+0x30/0xf0
[  117.919095][ T5122]  input_event_from_user+0x136/0x3b0
[  117.924391][ T5122]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  117.930215][ T5122]  ? preempt_count_sub+0x160/0x160
[  117.935355][ T5122]  ? input_inject_event+0x193/0x370
[  117.940578][ T5122]  evdev_write+0x378/0x750
[  117.945027][ T5122]  ? evdev_read+0xdf0/0xdf0
[  117.949558][ T5122]  ? security_file_permission+0x8e/0xb0
[  117.955154][ T5122]  ? evdev_read+0xdf0/0xdf0
[  117.959697][ T5122]  vfs_write+0x294/0x1100
[  117.964049][ T5122]  ? reacquire_held_locks+0x4c0/0x4c0
[  117.969441][ T5122]  ? kernel_write+0x6c0/0x6c0
[  117.974127][ T5122]  ? __fget_files+0x256/0x400
[  117.978832][ T5122]  ? __fget_light+0x173/0x200
[  117.983526][ T5122]  ksys_write+0x1f0/0x250
[  117.987889][ T5122]  ? __ia32_sys_read+0xb0/0xb0
[  117.992720][ T5122]  do_syscall_64+0xd3/0x250
[  117.997259][ T5122]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  118.003169][ T5122] RIP: 0033:0x7f321d319da9
[  118.007580][ T5122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  118.027201][ T5122] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.035651][ T5122] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  118.043640][ T5122] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  118.051611][ T5122] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  118.059587][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.067577][ T5122] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  118.075578][ T5122]  </TASK>
[  118.085535][   T45] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  118.092344][  T726] usb 2-1: USB disconnect, device number 14
[  118.093934][   T45] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  118.103873][  T726] usblp0: removed
[  118.107951][   T45] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  118.107982][   T45] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  118.128018][   T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  118.136924][   T45] usb 5-1: config 0 has no interface number 0
[  118.155496][   T45] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
16:49:04 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 5)

[  118.166611][   T45] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  118.176577][   T45] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  118.186714][   T45] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  118.193698][ T5124] FAULT_INJECTION: forcing a failure.
[  118.193698][ T5124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.199808][   T45] usb 5-1: config 0 interface 125 has no altsetting 0
[  118.199838][   T45] usb 5-1: config 0 interface 125 has no altsetting 2
[  118.212853][ T5124] CPU: 0 PID: 5124 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  118.212885][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  118.212901][ T5124] Call Trace:
[  118.212912][ T5124]  <TASK>
[  118.252974][ T5124]  dump_stack_lvl+0x125/0x1b0
[  118.257683][ T5124]  should_fail_ex+0x496/0x5b0
[  118.262366][ T5124]  _copy_from_user+0x30/0xf0
[  118.266964][ T5124]  input_event_from_user+0x136/0x3b0
[  118.272261][ T5124]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  118.278085][ T5124]  ? preempt_count_sub+0x160/0x160
[  118.283216][ T5124]  ? input_inject_event+0x193/0x370
[  118.288435][ T5124]  evdev_write+0x378/0x750
[  118.292864][ T5124]  ? evdev_read+0xdf0/0xdf0
[  118.297373][ T5124]  ? security_file_permission+0x8e/0xb0
[  118.302937][ T5124]  ? evdev_read+0xdf0/0xdf0
[  118.307447][ T5124]  vfs_write+0x294/0x1100
[  118.311810][ T5124]  ? reacquire_held_locks+0x4c0/0x4c0
[  118.317192][ T5124]  ? kernel_write+0x6c0/0x6c0
[  118.321882][ T5124]  ? __fget_files+0x256/0x400
[  118.326583][ T5124]  ? __fget_light+0x173/0x200
[  118.331267][ T5124]  ksys_write+0x1f0/0x250
[  118.335608][ T5124]  ? __ia32_sys_read+0xb0/0xb0
[  118.340394][ T5124]  do_syscall_64+0xd3/0x250
[  118.344906][ T5124]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  118.350826][ T5124] RIP: 0033:0x7f321d319da9
[  118.355248][ T5124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  118.374870][ T5124] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.383287][ T5124] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  118.391258][ T5124] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  118.399230][ T5124] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  118.407204][ T5124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
16:49:05 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 6)

[  118.415182][ T5124] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  118.423176][ T5124]  </TASK>
[  118.495432][    T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  118.525562][   T45] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  118.534849][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.542986][   T45] usb 5-1: Product: syz
[  118.547297][   T45] usb 5-1: Manufacturer: syz
[  118.551916][   T45] usb 5-1: SerialNumber: syz
[  118.565568][   T45] usb 5-1: config 0 descriptor??
[  118.577885][ T5126] FAULT_INJECTION: forcing a failure.
[  118.577885][ T5126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.591035][ T5126] CPU: 0 PID: 5126 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  118.601368][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  118.611426][ T5126] Call Trace:
[  118.614701][ T5126]  <TASK>
[  118.617641][ T5126]  dump_stack_lvl+0x125/0x1b0
[  118.622351][ T5126]  should_fail_ex+0x496/0x5b0
[  118.627035][ T5126]  _copy_from_user+0x30/0xf0
[  118.631641][ T5126]  input_event_from_user+0x136/0x3b0
[  118.636951][ T5126]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  118.642771][ T5126]  ? preempt_count_sub+0x160/0x160
[  118.647919][ T5126]  ? input_inject_event+0x193/0x370
[  118.648359][   T45] usb 5-1: selecting invalid altsetting 2
[  118.653131][ T5126]  evdev_write+0x378/0x750
[  118.663295][ T5126]  ? evdev_read+0xdf0/0xdf0
[  118.665485][   T22] usb 3-1: USB disconnect, device number 14
[  118.667819][ T5126]  ? security_file_permission+0x8e/0xb0
[  118.667871][ T5126]  ? evdev_read+0xdf0/0xdf0
[  118.683820][ T5126]  vfs_write+0x294/0x1100
[  118.688198][ T5126]  ? reacquire_held_locks+0x4c0/0x4c0
[  118.693622][ T5126]  ? kernel_write+0x6c0/0x6c0
[  118.698347][ T5126]  ? __fget_files+0x256/0x400
[  118.703073][ T5126]  ? __fget_light+0x173/0x200
[  118.707794][ T5126]  ksys_write+0x1f0/0x250
[  118.712167][ T5126]  ? __ia32_sys_read+0xb0/0xb0
[  118.716984][ T5126]  do_syscall_64+0xd3/0x250
[  118.721537][ T5126]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  118.727481][ T5126] RIP: 0033:0x7f321d319da9
16:49:05 executing program 2:
r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x30, 0xe8, 0xeb, 0x40, 0x46d, 0x928, 0xa238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x73, 0x9d968b38dc04ec49, 0xfa, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x7e, 0x5}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x7, 0x2, 0x3f, 0x10, 0x4}, 0xb9, &(0x7f0000000d40)={0x5, 0xf, 0xb9, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0xe, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "57cd1a1c801381812a676b4db5bc8a6c"}, @ptm_cap={0x3}, @generic={0x96, 0x10, 0xa, "31012c1bf16304b431ba724601e095ca121d88185ecbe9c567a49c01673f6650289742709bd5b3c3fd484b02487f0ca674d9b0ad56954175ec8330ad70a4dc35192dcb3af1a722dcdbb9f068db77f96c69e721550201df9684e0ee7e31570d841c56409a9a730164bb077b17069ba4e2f17f099faf7f6760546ad0c5abc06d135fc562ec4258c1677550a2b0c3f7723515c7d7"}]}, 0x1, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3801}}]})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0xf, 0xcb, {0xcb, 0x5, "21c4ad33edfd44e9839df22c6dcdccf80f93943222ffaeb30f8fea043368ed63eef7b4eb5ddfae87aa0a9f48be1a94e0b2f9226c55dfef15285e953d672e03fe18e4d6b26f78d68fdd5c8217f75aebcd0d228641bd60589d55a566bf1a8de5d02e7d61a1a57d5b5e6533260a19b89a05a869f5fa541ebb5730d6caf9ff73a5894eb2cabf2e72d5755e83a601564ffaefd6388aea044071fc1c1f5693bb82e9853d7e420a9bbdb8f92e7cdfc983594f2f3e6bb5d5a012ef3c0774a0539b17a9baa7eee37a1387c07af2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000fdc000000050fdc000324100a00660000000ff00100003fff007f00c00000cf807f00ac874408a81002b03651f969f97adcee005051d48d6571e92abff6e7b67fc18ebdc9f3fcb760f68ea195d01aecfb22d9a9e962fb71b5886ad71404301760be648cde193a1d59f3a5780900000000000000f8dcabc46f529436cb79d27a86e4f11f5bd716db537534bbe8f09bfdaeeef426ffbba935e1f59693402ef7fd343c45959f51a83662ea1e2eb1f86d9bafc212dada7c378555d70595b936c8940785c7ef880e1de15115c964f255b50b10010c220007f83b0600"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x3, 0x8a, 0x7f, "d090d773", "158e518b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8e, 0x8, 0x7, 0xb7, 0xf9, 0x45, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0xa, 0x1d, "b1a043842a7ce5270d12d7c5e9696a74c8b6c38cdb22000623a673faed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, '[F'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xf001}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, '7 '}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x78}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) (async)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xae, 0x2, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x2, 0x3, 0x20, 0xff, 0xf0}, 0xf, &(0x7f0000000880)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xaa, 0xc4, 0x7}]}, 0x5, [{0x102, &(0x7f00000008c0)=@string={0x102, 0x3, "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"}}, {0xa4, &(0x7f0000000a00)=@string={0xa4, 0x3, "3d1c904660aa703a8ad16e3798c0acd4e6d06fce1cd5ee21b98e9872766d2da441286d8fc57dc3f7511ab1c9bbedbbdccf05804cfbbe3a07f247299b79e92b203fb32a4e3004166e31699668603d8ad173d22494678cc05a43cc7712be9be3bbb4b5a5d853f91f022f6c24d14c433a629c5f47c545116f10c571c61eea7318a8fa0bb0ee6c51c4a93c1fd7dc74bdcca6cd5ddd855145c7aaf73756d5c6cb4a98ee99"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1007}}, {0xc6, &(0x7f0000000b00)=@string={0xc6, 0x3, "42699ef6935508375ac77e175c835f93bf529d0412724b0e1a13011e9e000330576951fd35bb60cc6d4b299296d9fd9f56ffea9c8eb404335392a7ed57965b259b4b631ff2c463ba1ab0ca75639a99635dddd49527617dfdd9fc9e98531b5d3097e91e4083573c06a41743f82c64d318398cec75c5b52f6b802cc39ff5d33ed85234e05535ea2322f1a3481346d63b0af07f2ca0c99b1720269400cccebe27a19276a76d02ea58d84481d505a218edaac15ba47cb513d8828222a780bb55cdc303e1b36d"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44e}}]}) (async)
syz_usb_disconnect(r0)

[  118.731923][ T5126] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  118.751564][ T5126] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.760008][ T5126] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  118.768009][ T5126] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  118.776010][ T5126] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  118.784009][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
16:49:05 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 7)

[  118.792010][ T5126] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  118.800008][ T5126]  </TASK>
[  118.840414][ T5130] FAULT_INJECTION: forcing a failure.
[  118.840414][ T5130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.853786][ T5130] CPU: 0 PID: 5130 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  118.864125][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  118.874185][ T5130] Call Trace:
[  118.877473][ T5130]  <TASK>
[  118.880427][ T5130]  dump_stack_lvl+0x125/0x1b0
[  118.885154][ T5130]  should_fail_ex+0x496/0x5b0
[  118.889859][ T5130]  _copy_from_user+0x30/0xf0
[  118.894491][ T5130]  input_event_from_user+0x136/0x3b0
[  118.899797][ T5130]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  118.905630][ T5130]  ? preempt_count_sub+0x160/0x160
[  118.910782][ T5130]  ? input_inject_event+0x51/0x370
[  118.915927][ T5130]  evdev_write+0x378/0x750
[  118.920366][ T5130]  ? evdev_read+0xdf0/0xdf0
[  118.924894][ T5130]  ? security_file_permission+0x8e/0xb0
[  118.930491][ T5130]  ? evdev_read+0xdf0/0xdf0
[  118.935025][ T5130]  vfs_write+0x294/0x1100
[  118.939380][ T5130]  ? reacquire_held_locks+0x4c0/0x4c0
[  118.944766][ T5130]  ? kernel_write+0x6c0/0x6c0
[  118.949462][ T5130]  ? __fget_files+0x256/0x400
[  118.954147][ T5130]  ? __fget_light+0x173/0x200
[  118.958833][ T5130]  ksys_write+0x1f0/0x250
[  118.963175][ T5130]  ? __ia32_sys_read+0xb0/0xb0
[  118.967964][ T5130]  do_syscall_64+0xd3/0x250
[  118.972503][ T5130]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  118.978444][ T5130] RIP: 0033:0x7f321d319da9
[  118.982874][ T5130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  119.002501][ T5130] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.010948][ T5130] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  119.018938][ T5130] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  119.026917][ T5130] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:05 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 8)

[  119.034924][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.042907][ T5130] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  119.050896][ T5130]  </TASK>
[  119.095492][ T5132] FAULT_INJECTION: forcing a failure.
[  119.095492][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.109073][ T5132] CPU: 0 PID: 5132 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  119.119422][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  119.129488][ T5132] Call Trace:
[  119.132778][ T5132]  <TASK>
[  119.135715][ T5132]  dump_stack_lvl+0x125/0x1b0
[  119.140432][ T5132]  should_fail_ex+0x496/0x5b0
[  119.145146][ T5132]  _copy_from_user+0x30/0xf0
[  119.149754][ T5132]  input_event_from_user+0x136/0x3b0
[  119.155060][ T5132]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  119.160891][ T5132]  ? preempt_count_sub+0x160/0x160
[  119.165631][   T22] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  119.166007][ T5132]  ? input_inject_event+0x193/0x370
[  119.178799][ T5132]  evdev_write+0x378/0x750
[  119.183253][ T5132]  ? evdev_read+0xdf0/0xdf0
[  119.187772][ T5132]  ? security_file_permission+0x8e/0xb0
[  119.193371][ T5132]  ? evdev_read+0xdf0/0xdf0
[  119.197906][ T5132]  vfs_write+0x294/0x1100
[  119.202262][ T5132]  ? reacquire_held_locks+0x4c0/0x4c0
[  119.207667][ T5132]  ? kernel_write+0x6c0/0x6c0
[  119.212381][ T5132]  ? __fget_files+0x256/0x400
[  119.217082][ T5132]  ? __fget_light+0x173/0x200
[  119.221794][ T5132]  ksys_write+0x1f0/0x250
[  119.226133][ T5132]  ? __ia32_sys_read+0xb0/0xb0
[  119.230906][ T5132]  do_syscall_64+0xd3/0x250
[  119.235417][ T5132]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  119.241332][ T5132] RIP: 0033:0x7f321d319da9
[  119.245775][ T5132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  119.265411][ T5132] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.273846][ T5132] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  119.281845][ T5132] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:05 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 9)

16:49:05 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  119.289834][ T5132] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  119.297808][ T5132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.305780][ T5132] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  119.313755][ T5132]  </TASK>
[  119.316978][    T8] usb 1-1: Using ep0 maxpacket: 16
[  119.371513][ T5135] FAULT_INJECTION: forcing a failure.
[  119.371513][ T5135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.384933][ T5135] CPU: 0 PID: 5135 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  119.395289][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  119.405366][ T5135] Call Trace:
[  119.408662][ T5135]  <TASK>
[  119.411591][ T5135]  dump_stack_lvl+0x125/0x1b0
[  119.416302][ T5135]  should_fail_ex+0x496/0x5b0
[  119.418257][ T5133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.421008][ T5135]  _copy_from_user+0x30/0xf0
[  119.421054][ T5135]  input_event_from_user+0x136/0x3b0
[  119.435927][   T45] parport1: fix this legacy no-device port driver!
[  119.439235][ T5135]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  119.439273][ T5135]  ? preempt_count_sub+0x160/0x160
[  119.446238][ T5133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.451540][ T5135]  ? input_inject_event+0x193/0x370
[  119.469734][ T5135]  evdev_write+0x378/0x750
[  119.474200][ T5135]  ? evdev_read+0xdf0/0xdf0
[  119.478752][ T5135]  ? security_file_permission+0x8e/0xb0
[  119.484356][ T5135]  ? evdev_read+0xdf0/0xdf0
[  119.488902][ T5135]  vfs_write+0x294/0x1100
[  119.493279][ T5135]  ? reacquire_held_locks+0x4c0/0x4c0
[  119.498700][ T5135]  ? kernel_write+0x6c0/0x6c0
[  119.503411][ T5135]  ? __fget_files+0x256/0x400
[  119.508112][ T5135]  ? __fget_light+0x173/0x200
[  119.512813][ T5135]  ksys_write+0x1f0/0x250
[  119.517176][ T5135]  ? __ia32_sys_read+0xb0/0xb0
[  119.521971][ T5135]  do_syscall_64+0xd3/0x250
[  119.526479][ T5135]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  119.532400][ T5135] RIP: 0033:0x7f321d319da9
[  119.536844][ T5135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  119.556489][ T5135] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="005f6cfa813d955cb5cc80000000d50008"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_disconnect(r0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="005f6cfa813d955cb5cc80000000d50008"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

16:49:06 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 10)

[  119.564943][ T5135] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  119.572970][ T5135] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  119.580979][ T5135] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  119.588987][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.596986][ T5135] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  119.604995][ T5135]  </TASK>
[  119.645546][    T8] usb 1-1: unable to read config index 0 descriptor/start: -71
[  119.649417][   T45] usb 5-1: USB disconnect, device number 14
[  119.653142][    T8] usb 1-1: can't read configurations, error -71
[  119.679995][ T5141] FAULT_INJECTION: forcing a failure.
[  119.679995][ T5141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.693105][ T5141] CPU: 0 PID: 5141 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  119.695624][ T4789] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  119.703441][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  119.721044][ T5141] Call Trace:
[  119.724320][ T5141]  <TASK>
[  119.727259][ T5141]  dump_stack_lvl+0x125/0x1b0
[  119.731963][ T5141]  should_fail_ex+0x496/0x5b0
[  119.736652][ T5141]  _copy_from_user+0x30/0xf0
[  119.741255][ T5141]  input_event_from_user+0x136/0x3b0
[  119.745565][   T22] usb 3-1: config 0 has no interfaces?
[  119.746537][ T5141]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  119.746572][ T5141]  ? preempt_count_sub+0x160/0x160
[  119.762958][ T5141]  ? input_inject_event+0x193/0x370
[  119.768183][ T5141]  evdev_write+0x378/0x750
[  119.772630][ T5141]  ? evdev_read+0xdf0/0xdf0
[  119.777143][ T5141]  ? security_file_permission+0x8e/0xb0
[  119.782707][ T5141]  ? evdev_read+0xdf0/0xdf0
[  119.787218][ T5141]  vfs_write+0x294/0x1100
[  119.791565][ T5141]  ? reacquire_held_locks+0x4c0/0x4c0
[  119.796970][ T5141]  ? kernel_write+0x6c0/0x6c0
[  119.801657][ T5141]  ? __fget_files+0x256/0x400
[  119.806352][ T5141]  ? __fget_light+0x173/0x200
[  119.811050][ T5141]  ksys_write+0x1f0/0x250
[  119.815409][ T5141]  ? __ia32_sys_read+0xb0/0xb0
[  119.820184][ T5141]  do_syscall_64+0xd3/0x250
[  119.824698][ T5141]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  119.830615][ T5141] RIP: 0033:0x7f321d319da9
[  119.835055][ T5141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  119.854689][ T5141] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.863124][ T5141] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  119.871095][ T5141] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  119.879063][ T5141] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  119.887032][ T5141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:06 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 11)

[  119.895023][ T5141] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  119.903477][ T5141]  </TASK>
[  119.942008][ T5143] FAULT_INJECTION: forcing a failure.
[  119.942008][ T5143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.955137][ T5143] CPU: 0 PID: 5143 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  119.965506][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  119.975562][ T5143] Call Trace:
[  119.978842][ T5143]  <TASK>
[  119.981770][ T5143]  dump_stack_lvl+0x125/0x1b0
[  119.986468][ T5143]  should_fail_ex+0x496/0x5b0
[  119.991190][ T5143]  _copy_from_user+0x30/0xf0
[  119.995798][ T5143]  input_event_from_user+0x136/0x3b0
[  120.001102][ T5143]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  120.006942][ T5143]  ? preempt_count_sub+0x160/0x160
[  120.012076][ T5143]  ? input_inject_event+0x193/0x370
[  120.017278][ T5143]  evdev_write+0x378/0x750
[  120.021706][ T5143]  ? evdev_read+0xdf0/0xdf0
[  120.026219][ T5143]  ? security_file_permission+0x8e/0xb0
[  120.031805][ T5143]  ? evdev_read+0xdf0/0xdf0
[  120.036338][ T5143]  vfs_write+0x294/0x1100
[  120.040694][ T5143]  ? reacquire_held_locks+0x4c0/0x4c0
[  120.046101][ T5143]  ? kernel_write+0x6c0/0x6c0
[  120.050805][ T5143]  ? __fget_files+0x256/0x400
[  120.055516][ T5143]  ? __fget_light+0x173/0x200
[  120.060225][ T5143]  ksys_write+0x1f0/0x250
[  120.064564][ T5143]  ? __ia32_sys_read+0xb0/0xb0
[  120.069342][ T5143]  do_syscall_64+0xd3/0x250
[  120.073867][ T5143]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  120.079797][ T5143] RIP: 0033:0x7f321d319da9
[  120.084215][ T5143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  120.103825][ T5143] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  120.105616][   T22] usb 3-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=a2.38
[  120.112248][ T5143] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  120.112270][ T5143] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:06 executing program 4:
syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000001009050200000005000009047d01013481080009a00e00230000690009047dbe"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000001009050200000005000009047d01013481080009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$uac1(0x2, 0xbf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x6, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x3, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x0, 0x4, 0x5, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x7, 0x6], 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x24, 0x81, "84bff1"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x8cf0, 0x81, "3799"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x5, "0f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x81, 0x9, 0x4, {0x7, 0x25, 0x1, 0x81, 0x5, 0x53}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x760, 0x6, 0xff, 0x4a, 0x8, 0x9}, 0xcf, &(0x7f0000000180)={0x5, 0xf, 0xcf, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "772d3834228bb6bc5cfc74b0d491b9bf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1d2febe8e3d645c71e10cb516a8e16b6"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf, 0x6, [0xc00f, 0xf, 0x0, 0xc0, 0xff0000]}, @generic={0x82, 0x10, 0x1, "7975d3ed7148ed376abfabe14285950eb5d64ed02bf6aec7148c3c4f5e369a0c2538ff69c388aa7562fff5e2b082e18eadb234ca9c4a24de59fd3b801038707b288c0b532b8efc23ec3e3e9a878d4edaa44d2718465a6fa5aca9f2ce22741337a1657a469d70f8da24b5d8e5a2d159f8fd81b6610cf93692eee6825d052ffe"}]}, 0x4, [{0x47, &(0x7f0000000280)=@string={0x47, 0x3, "98b64b61b096cc1ff3c6038303d043bd6e8ada2c03bb50bb1667c7ff2061e6b97d152590a7580a2e6218875ce8dbf70cd27354b14a0c88851d998e4c8eaa8cbeb75684427c"}}, {0xec, &(0x7f0000000300)=@string={0xec, 0x3, "8cbafd31ec0d6697c52a70cbacffca353701a85a45e905fc851c0d637de5661e770974b54d7f5a67af950ee1f8b30367892202874231a334282e8695a21339a99fb1bb2dc01b175e714c76bf7af19864b646b55284e8c64efac70cc2b031b9ee7b473ab93babdd1797a9e74338173f5469ffaa9d8360057f10cf5b3295ed241bdf79e7ce97245dcce9fb84d361bcfb8fcc67329278d00cea086a671c6db70883b3cf8a14d0edadb84a2cb1f190bf9f937985b43ca71fd0628d016e021d8172f3a5242d3b1196be68674e3703cc90c272344ed30495e6b0a57ad8e4f15d80a127f1f5a13f2880861b313c"}}, {0xac, &(0x7f0000000400)=@string={0xac, 0x3, "b5d24b7f3f2397f3761a445c45136081ca40da197f951864a95509196ae7f4151d7f171870ba8de882166b57e32f8ff19e5f3c91ed907875d4eee05c61d4828eb1b888051f2aaacc4ae4f7f16938d08edcbe2b54f7100b7f243b950f43a2df8f388941164406e97d1cd3dcae731e484a3c4c02f3983da89f467f860cd2ee480f5da878d30cb28fe468736194203cd5c928ba4c34d4f4abbdc95e4ea771de62dc553c4cfef35da28595a5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x5d9014650e7b1d4b}}]})
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x19, {0x19, 0x5, "153e1dc0f5c21439b03563bf8fb0e77370217408336671"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000600)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x2, [@generic={0x3b, 0x10, 0x2, "c24c648b3a7541671850c00ff3202cad2c0b141f858ee32ba3163a299606ba6e1ef6140b61a74db408872b437dc0daf8006f50d74b2c95bd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe0, 0xc1, 0x6}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xbe, 0x3, "b0f1c93f", "22b69fbd"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xba, 0x40, 0x8, 0x9, 0x9b14}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0xa8dde64eb5e374d8, 0x15, 0x76, "947050d3af2ed5b1ed885931ea4c18096f7619efd930b1dc4fbb16254ef2f28cd53c14f29c85f5ee082cb379bae306f131e0df3517a8b5c7d92ca1f1a797f6caa5912f2512ab90865879306df15048de4a03c7c826c7da201ea5b6c776f2cceae19ef05961b972254befe4dea431ab47e95e9c323df6"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf00]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "64ad"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="f0d1e4d589b7"}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "fbc7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x34}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xe0}}) (async)
syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x19, {0x19, 0x5, "153e1dc0f5c21439b03563bf8fb0e77370217408336671"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000600)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x2, [@generic={0x3b, 0x10, 0x2, "c24c648b3a7541671850c00ff3202cad2c0b141f858ee32ba3163a299606ba6e1ef6140b61a74db408872b437dc0daf8006f50d74b2c95bd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe0, 0xc1, 0x6}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xbe, 0x3, "b0f1c93f", "22b69fbd"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0xba, 0x40, 0x8, 0x9, 0x9b14}}}, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0xa8dde64eb5e374d8, 0x15, 0x76, "947050d3af2ed5b1ed885931ea4c18096f7619efd930b1dc4fbb16254ef2f28cd53c14f29c85f5ee082cb379bae306f131e0df3517a8b5c7d92ca1f1a797f6caa5912f2512ab90865879306df15048de4a03c7c826c7da201ea5b6c776f2cceae19ef05961b972254befe4dea431ab47e95e9c323df6"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x10, 0x20, [0xf00]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x9, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "64ad"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @random="f0d1e4d589b7"}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "fbc7"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xfffb}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x34}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0xe0}})

16:49:06 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 12)

[  120.112289][ T5143] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  120.121320][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.129245][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.129265][ T5143] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  120.129290][ T5143]  </TASK>
[  120.137255][   T22] usb 3-1: Product: syz
[  120.176603][   T22] usb 3-1: Manufacturer: syz
[  120.181221][   T22] usb 3-1: SerialNumber: syz
[  120.185912][ T4789] usb 2-1: Using ep0 maxpacket: 32
[  120.215439][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  120.231863][   T22] usb 3-1: config 0 descriptor??
[  120.260460][ T5148] FAULT_INJECTION: forcing a failure.
[  120.260460][ T5148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.267163][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.273712][ T5148] CPU: 1 PID: 5148 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  120.284985][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.292147][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  120.306950][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.309886][ T5148] Call Trace:
[  120.309898][ T5148]  <TASK>
[  120.309909][ T5148]  dump_stack_lvl+0x125/0x1b0
[  120.321361][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.321513][ T5148]  should_fail_ex+0x496/0x5b0
[  120.341576][ T5148]  _copy_from_user+0x30/0xf0
[  120.346197][ T5148]  input_event_from_user+0x136/0x3b0
[  120.351499][ T5148]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  120.357328][ T5148]  ? preempt_count_sub+0x160/0x160
[  120.362439][ T5148]  ? input_inject_event+0x193/0x370
[  120.367648][ T5148]  evdev_write+0x378/0x750
[  120.372084][ T5148]  ? evdev_read+0xdf0/0xdf0
[  120.376605][ T5148]  ? security_file_permission+0x8e/0xb0
[  120.382176][ T5148]  ? evdev_read+0xdf0/0xdf0
[  120.386690][ T5148]  vfs_write+0x294/0x1100
[  120.391030][ T5148]  ? reacquire_held_locks+0x4c0/0x4c0
[  120.396417][ T5148]  ? kernel_write+0x6c0/0x6c0
[  120.401107][ T5148]  ? __fget_files+0x256/0x400
[  120.405796][ T5148]  ? __fget_light+0x173/0x200
[  120.410485][ T5148]  ksys_write+0x1f0/0x250
[  120.414832][ T5148]  ? __ia32_sys_read+0xb0/0xb0
[  120.419626][ T5148]  do_syscall_64+0xd3/0x250
[  120.424161][ T5148]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  120.430094][ T5148] RIP: 0033:0x7f321d319da9
[  120.434516][ T5148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  120.454128][ T5148] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  120.455530][    T8] usb 1-1: Using ep0 maxpacket: 16
[  120.462550][ T5148] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  120.462573][ T5148] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  120.462592][ T5148] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  120.491618][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.499593][ T5148] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  120.507570][ T5148]  </TASK>
16:49:07 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 13)

[  120.520438][  T726] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  120.555510][ T4789] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  120.561846][ T5151] FAULT_INJECTION: forcing a failure.
[  120.561846][ T5151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.563861][ T4789] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  120.563891][ T4789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  120.563972][ T4789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  120.577360][ T5151] CPU: 0 PID: 5151 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  120.577393][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  120.577409][ T5151] Call Trace:
[  120.577418][ T5151]  <TASK>
[  120.577428][ T5151]  dump_stack_lvl+0x125/0x1b0
[  120.577467][ T5151]  should_fail_ex+0x496/0x5b0
[  120.577495][ T5151]  _copy_from_user+0x30/0xf0
[  120.577529][ T5151]  input_event_from_user+0x136/0x3b0
[  120.577560][ T5151]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  120.585651][ T4789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  120.594451][ T5151]  ? preempt_count_sub+0x160/0x160
[  120.604083][ T4789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  120.614350][ T5151]  ? input_inject_event+0x193/0x370
[  120.614384][ T5151]  evdev_write+0x378/0x750
[  120.624449][ T4789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  120.627687][ T5151]  ? evdev_read+0xdf0/0xdf0
[  120.630638][ T4789] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  120.635293][ T5151]  ? security_file_permission+0x8e/0xb0
[  120.722408][ T5151]  ? evdev_read+0xdf0/0xdf0
[  120.726948][ T5151]  vfs_write+0x294/0x1100
[  120.731300][ T5151]  ? reacquire_held_locks+0x4c0/0x4c0
[  120.736703][ T5151]  ? kernel_write+0x6c0/0x6c0
[  120.741392][ T5151]  ? __fget_files+0x256/0x400
[  120.746092][ T5151]  ? __fget_light+0x173/0x200
[  120.750797][ T5151]  ksys_write+0x1f0/0x250
[  120.755135][ T5151]  ? __ia32_sys_read+0xb0/0xb0
[  120.759908][ T5151]  do_syscall_64+0xd3/0x250
[  120.764417][ T5151]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  120.770325][ T5151] RIP: 0033:0x7f321d319da9
[  120.774739][ T5151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  120.794349][ T5151] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  120.802766][ T5151] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  120.810749][ T5151] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  120.818760][ T5151] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  120.826759][ T5151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.834737][ T5151] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  120.835991][ T4789] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  120.842707][ T5151]  </TASK>
[  120.843789][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.851808][ T4789] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  120.851840][ T4789] usb 2-1: Product: syz
[  120.854856][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.867199][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.873783][    T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  120.887475][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.887692][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:49:07 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 14)

[  120.916797][ T4789] usb 2-1: config 0 descriptor??
[  120.928074][    T8] usb 1-1: config 0 descriptor??
[  120.970993][ T5155] FAULT_INJECTION: forcing a failure.
[  120.970993][ T5155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.984382][ T5155] CPU: 1 PID: 5155 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  120.994712][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  121.004765][ T5155] Call Trace:
[  121.008043][ T5155]  <TASK>
[  121.010979][ T5155]  dump_stack_lvl+0x125/0x1b0
[  121.015693][ T5155]  should_fail_ex+0x496/0x5b0
[  121.020387][ T5155]  _copy_from_user+0x30/0xf0
[  121.025085][ T5155]  input_event_from_user+0x136/0x3b0
[  121.030391][ T5155]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  121.036207][ T5155]  ? preempt_count_sub+0x160/0x160
[  121.041350][ T5155]  ? input_inject_event+0x193/0x370
[  121.046554][ T5155]  evdev_write+0x378/0x750
[  121.050984][ T5155]  ? evdev_read+0xdf0/0xdf0
[  121.055495][ T5155]  ? security_file_permission+0x8e/0xb0
[  121.061059][ T5155]  ? evdev_read+0xdf0/0xdf0
[  121.065583][ T5155]  vfs_write+0x294/0x1100
[  121.069943][ T5155]  ? reacquire_held_locks+0x4c0/0x4c0
[  121.075327][ T5155]  ? kernel_write+0x6c0/0x6c0
[  121.080033][ T5155]  ? __fget_files+0x256/0x400
[  121.084719][ T5155]  ? __fget_light+0x173/0x200
[  121.089428][ T5155]  ksys_write+0x1f0/0x250
[  121.093800][ T5155]  ? __ia32_sys_read+0xb0/0xb0
[  121.098588][ T5155]  do_syscall_64+0xd3/0x250
[  121.103102][ T5155]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  121.109012][ T5155] RIP: 0033:0x7f321d319da9
[  121.113423][ T5155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  121.115397][  T726] usb 5-1: Using ep0 maxpacket: 16
[  121.133019][ T5155] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  121.133050][ T5155] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  121.133070][ T5155] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  121.133089][ T5155] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:07 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 15)

[  121.133112][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.133130][ T5155] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  121.133154][ T5155]  </TASK>
[  121.229465][ T5157] FAULT_INJECTION: forcing a failure.
[  121.229465][ T5157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.242801][ T5157] CPU: 0 PID: 5157 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  121.248023][ T4789] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  121.253118][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  121.253136][ T5157] Call Trace:
[  121.253146][ T5157]  <TASK>
[  121.253158][ T5157]  dump_stack_lvl+0x125/0x1b0
[  121.270434][ T4789] usb 2-1: USB disconnect, device number 15
[  121.273849][ T5157]  should_fail_ex+0x496/0x5b0
[  121.273898][ T5157]  _copy_from_user+0x30/0xf0
[  121.282501][ T4789] usblp0: removed
[  121.284801][ T5157]  input_event_from_user+0x136/0x3b0
[  121.284840][ T5157]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  121.314788][ T5157]  ? preempt_count_sub+0x160/0x160
[  121.319935][ T5157]  ? input_inject_event+0x193/0x370
[  121.325178][ T5157]  evdev_write+0x378/0x750
[  121.329649][ T5157]  ? evdev_read+0xdf0/0xdf0
[  121.334200][ T5157]  ? security_file_permission+0x8e/0xb0
[  121.339790][ T5157]  ? evdev_read+0xdf0/0xdf0
[  121.344304][ T5157]  vfs_write+0x294/0x1100
[  121.348658][ T5157]  ? reacquire_held_locks+0x4c0/0x4c0
[  121.354058][ T5157]  ? kernel_write+0x6c0/0x6c0
[  121.358757][ T5157]  ? __fget_files+0x256/0x400
[  121.363466][ T5157]  ? __fget_light+0x173/0x200
[  121.368150][ T5157]  ksys_write+0x1f0/0x250
[  121.372488][ T5157]  ? __ia32_sys_read+0xb0/0xb0
[  121.377276][ T5157]  do_syscall_64+0xd3/0x250
[  121.381822][ T5157]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  121.387771][ T5157] RIP: 0033:0x7f321d319da9
[  121.392214][ T5157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  121.411857][ T5157] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  121.420302][ T5157] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  121.428279][ T5157] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  121.436250][ T5157] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  121.444237][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.452226][ T5157] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  121.460213][ T5157]  </TASK>
[  121.469024][  T726] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  121.477466][  T726] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  121.485775][  T726] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  121.493952][  T726] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  121.502152][  T726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  121.511045][  T726] usb 5-1: config 0 has no interface number 0
[  121.517507][  T726] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
16:49:08 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 16)

[  121.528653][  T726] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  121.538609][  T726] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.548638][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  121.554686][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  121.564878][    T8] usb 1-1: USB disconnect, device number 17
[  121.581187][  T726] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  121.583044][ T5159] FAULT_INJECTION: forcing a failure.
[  121.583044][ T5159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.594275][  T726] usb 5-1: config 0 interface 125 has no altsetting 0
[  121.594306][  T726] usb 5-1: config 0 interface 125 has no altsetting 2
[  121.621980][ T5159] CPU: 1 PID: 5159 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  121.632323][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  121.642389][ T5159] Call Trace:
[  121.645676][ T5159]  <TASK>
[  121.648630][ T5159]  dump_stack_lvl+0x125/0x1b0
[  121.653347][ T5159]  should_fail_ex+0x496/0x5b0
[  121.658054][ T5159]  _copy_from_user+0x30/0xf0
[  121.662668][ T5159]  input_event_from_user+0x136/0x3b0
[  121.667988][ T5159]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  121.673835][ T5159]  ? preempt_count_sub+0x160/0x160
[  121.678963][ T5159]  ? input_inject_event+0x193/0x370
[  121.684185][ T5159]  evdev_write+0x378/0x750
[  121.688665][ T5159]  ? evdev_read+0xdf0/0xdf0
[  121.693192][ T5159]  ? security_file_permission+0x8e/0xb0
[  121.698789][ T5159]  ? evdev_read+0xdf0/0xdf0
[  121.703339][ T5159]  vfs_write+0x294/0x1100
[  121.707711][ T5159]  ? reacquire_held_locks+0x4c0/0x4c0
[  121.713134][ T5159]  ? kernel_write+0x6c0/0x6c0
[  121.717837][ T5159]  ? __fget_files+0x256/0x400
[  121.722555][ T5159]  ? __fget_light+0x173/0x200
[  121.727270][ T5159]  ksys_write+0x1f0/0x250
[  121.731650][ T5159]  ? __ia32_sys_read+0xb0/0xb0
[  121.736448][ T5159]  do_syscall_64+0xd3/0x250
[  121.740966][ T5159]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  121.746881][ T5159] RIP: 0033:0x7f321d319da9
[  121.751294][ T5159] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  121.755604][  T726] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  121.770890][ T5159] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  121.770921][ T5159] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  121.770941][ T5159] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  121.770958][ T5159] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  121.770976][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.780094][  T726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
16:49:08 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 17)

[  121.788358][ T5159] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  121.788385][ T5159]  </TASK>
[  121.839920][  T726] usb 5-1: Product: syz
[  121.844085][  T726] usb 5-1: Manufacturer: syz
[  121.848736][  T726] usb 5-1: SerialNumber: syz
[  121.867146][  T726] usb 5-1: config 0 descriptor??
[  121.895932][ T5161] FAULT_INJECTION: forcing a failure.
[  121.895932][ T5161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.909100][ T5161] CPU: 0 PID: 5161 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  121.919458][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  121.929538][ T5161] Call Trace:
[  121.932849][ T5161]  <TASK>
[  121.935800][ T5161]  dump_stack_lvl+0x125/0x1b0
[  121.940522][ T5161]  should_fail_ex+0x496/0x5b0
16:49:08 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  121.945245][ T5161]  _copy_from_user+0x30/0xf0
[  121.950786][ T5161]  input_event_from_user+0x136/0x3b0
[  121.956113][ T5161]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  121.961963][ T5161]  ? preempt_count_sub+0x160/0x160
[  121.967110][ T5161]  ? input_inject_event+0x193/0x370
[  121.972348][ T5161]  evdev_write+0x378/0x750
[  121.976810][ T5161]  ? evdev_read+0xdf0/0xdf0
[  121.981348][ T5161]  ? security_file_permission+0x8e/0xb0
[  121.986953][ T5161]  ? evdev_read+0xdf0/0xdf0
[  121.991493][ T5161]  vfs_write+0x294/0x1100
[  121.995840][ T5161]  ? reacquire_held_locks+0x4c0/0x4c0
[  122.001230][ T5161]  ? kernel_write+0x6c0/0x6c0
[  122.005924][ T5161]  ? __fget_files+0x256/0x400
[  122.010611][ T5161]  ? __fget_light+0x173/0x200
[  122.015297][ T5161]  ksys_write+0x1f0/0x250
[  122.019656][ T5161]  ? __ia32_sys_read+0xb0/0xb0
[  122.024441][ T5161]  do_syscall_64+0xd3/0x250
[  122.028984][ T5161]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  122.034910][ T5161] RIP: 0033:0x7f321d319da9
[  122.039324][ T5161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  122.058940][ T5161] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.067375][ T5161] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  122.075359][ T5161] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  122.083338][ T5161] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  122.091315][ T5161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.099317][ T5161] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  122.107310][ T5161]  </TASK>
[  122.113312][  T726] usb 5-1: selecting invalid altsetting 2
[  122.135426][    C0] usb 5-1: async_complete: urb error -71
[  122.141724][    C0] usb 5-1: async_complete: urb error -71
16:49:08 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 18)

[  122.147477][    C0] usb 5-1: async_complete: urb error -71
[  122.153229][    C0] usb 5-1: async_complete: urb error -71
[  122.159237][  T726] get_1284_register: usb error -71
[  122.164500][  T726] parport2: fix this legacy no-device port driver!
[  122.182898][  T726] usb 5-1: USB disconnect, device number 15
[  122.188921][    T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  122.192432][ T4789] usb 3-1: USB disconnect, device number 15
[  122.215240][ T5165] FAULT_INJECTION: forcing a failure.
[  122.215240][ T5165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.228757][ T5165] CPU: 1 PID: 5165 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  122.239119][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  122.249201][ T5165] Call Trace:
[  122.252503][ T5165]  <TASK>
[  122.255458][ T5165]  dump_stack_lvl+0x125/0x1b0
[  122.260186][ T5165]  should_fail_ex+0x496/0x5b0
[  122.264908][ T5165]  _copy_from_user+0x30/0xf0
[  122.269608][ T5165]  input_event_from_user+0x136/0x3b0
[  122.274944][ T5165]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  122.280795][ T5165]  ? preempt_count_sub+0x160/0x160
[  122.285937][ T5165]  ? input_inject_event+0x193/0x370
[  122.291174][ T5165]  evdev_write+0x378/0x750
16:49:08 executing program 2:
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003576c5beb000000010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xb3, 0xc3, 0xf4, 0x0, 0x3334, 0x1701, 0x3d6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x69, 0xbf, 0xd7}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xd0000)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/99)

[  122.295641][ T5165]  ? evdev_read+0xdf0/0xdf0
[  122.300190][ T5165]  ? security_file_permission+0x8e/0xb0
[  122.305789][ T5165]  ? evdev_read+0xdf0/0xdf0
[  122.310336][ T5165]  vfs_write+0x294/0x1100
[  122.314707][ T5165]  ? reacquire_held_locks+0x4c0/0x4c0
[  122.320120][ T5165]  ? kernel_write+0x6c0/0x6c0
[  122.324843][ T5165]  ? __fget_files+0x256/0x400
[  122.329557][ T5165]  ? __fget_light+0x173/0x200
[  122.334276][ T5165]  ksys_write+0x1f0/0x250
[  122.338656][ T5165]  ? __ia32_sys_read+0xb0/0xb0
[  122.343462][ T5165]  do_syscall_64+0xd3/0x250
[  122.348019][ T5165]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  122.353950][ T5165] RIP: 0033:0x7f321d319da9
[  122.358364][ T5165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  122.377977][ T5165] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.386420][ T5165] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:09 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 19)

[  122.394392][ T5165] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  122.402363][ T5165] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  122.410347][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.418324][ T5165] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  122.426309][ T5165]  </TASK>
[  122.430578][   T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  122.436359][    T8] usb 1-1: Using ep0 maxpacket: 16
[  122.478044][ T5169] FAULT_INJECTION: forcing a failure.
[  122.478044][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.491197][ T5169] CPU: 1 PID: 5169 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  122.501545][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  122.511618][ T5169] Call Trace:
[  122.514921][ T5169]  <TASK>
[  122.517872][ T5169]  dump_stack_lvl+0x125/0x1b0
[  122.522568][ T5169]  should_fail_ex+0x496/0x5b0
[  122.527252][ T5169]  _copy_from_user+0x30/0xf0
[  122.531872][ T5169]  input_event_from_user+0x136/0x3b0
[  122.537184][ T5169]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  122.543009][ T5169]  ? preempt_count_sub+0x160/0x160
[  122.548147][ T5169]  ? input_inject_event+0x193/0x370
[  122.553364][ T5169]  evdev_write+0x378/0x750
[  122.555766][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.557827][ T5169]  ? evdev_read+0xdf0/0xdf0
[  122.568712][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.573133][ T5169]  ? security_file_permission+0x8e/0xb0
[  122.582892][    T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  122.588346][ T5169]  ? evdev_read+0xdf0/0xdf0
[  122.588385][ T5169]  vfs_write+0x294/0x1100
[  122.597431][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.601865][ T5169]  ? reacquire_held_locks+0x4c0/0x4c0
[  122.619633][ T5169]  ? kernel_write+0x6c0/0x6c0
16:49:09 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="005f6cfa813d955cb5cc80000000d50008"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_disconnect(r0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000100)=ANY=[], 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="005f6cfa813d955cb5cc80000000d50008"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

[  122.624357][ T5169]  ? __fget_files+0x256/0x400
[  122.629076][ T5169]  ? __fget_light+0x173/0x200
[  122.633801][ T5169]  ksys_write+0x1f0/0x250
[  122.638177][ T5169]  ? __ia32_sys_read+0xb0/0xb0
[  122.642987][ T5169]  do_syscall_64+0xd3/0x250
[  122.647536][ T5169]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  122.653497][ T5169] RIP: 0033:0x7f321d319da9
[  122.657960][ T5169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  122.677600][ T5169] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.686050][ T5169] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  122.691291][    T8] usb 1-1: config 0 descriptor??
[  122.694026][ T5169] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  122.694047][ T5169] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  122.694066][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:09 executing program 4:
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000240)=""/66)
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000025c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x1, 0x9e3}, {0x6}, [@mdlm_detail={0x4}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x0, 0x1}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0xb5, 0x10, 0x1f}, 0x5, &(0x7f0000002800)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x421}}, {0x98, &(0x7f00000002c0)=ANY=[]}, {0x2, &(0x7f0000002a40)=@string={0x2}}, {0x0, 0x0}, {0x13, &(0x7f0000002b80)=@string={0x13, 0x3, "e8ef917017aca0229f0832178c65c959c0"}}]})
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x485}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x56}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7f, 0xde, 0x7f, 0x20, 0xd}, 0x9a, &(0x7f0000000080)={0x5, 0xf, 0x9a, 0x6, [@generic={0x2e, 0x10, 0x2, "3004f37094af5b2acc16db8752a0a49d8a29b176e464d60dbc8a4046f1979cc4e1facd2a17063fb3134c6b"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cd3649edf3603088ac3287281cae7fc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "5a7e84d6ffa0dd85fa02a5c0ab5d2b73"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf00f, 0x9, [0x3f38, 0xc030, 0xc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x2b, 0x5, 0xed4, 0xf0f, 0x6, [0xffa0ff, 0x0, 0xf, 0x30, 0xffc00f]}]}, 0x2, [{0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="5e03c398bd8379bfb1d85f3b4f05a0b8c87c5c050b30eb3fbe15cbb44d8480eef38e7f38ee0a6804f5892f822c5daa5891191d7160f8c19e705716262e79131f8c3c2a8effeb208cd97d79e095c7575b0aaaa243b3c384bc606653991af4bdea1987bb83d6e91e"]}, {0x20, &(0x7f00000001c0)=@string={0x20, 0x3, "a34ba01cc513be5f749058af446c0cb6d200d6dd260b9726a34ebad2bba9"}}]})
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffffffff, 0x2000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x6, 0x1b, 0x800, 0x100000, "8c356ad4f183bd50ba77470bacd3970e1ef70e6baf4aed3f2c563be7cbf167b1"})

[  122.694084][ T5169] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  122.715704][    T8] usb 1-1: can't set config #0, error -71
[  122.722915][ T5169]  </TASK>
16:49:09 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 20)

[  122.774373][    T8] usb 1-1: USB disconnect, device number 18
[  122.828819][ T5175] FAULT_INJECTION: forcing a failure.
[  122.828819][ T5175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.841956][ T5175] CPU: 1 PID: 5175 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  122.852284][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  122.862337][ T5175] Call Trace:
[  122.865613][ T5175]  <TASK>
[  122.868543][ T5175]  dump_stack_lvl+0x125/0x1b0
[  122.873232][ T5175]  should_fail_ex+0x496/0x5b0
[  122.877914][ T5175]  _copy_from_user+0x30/0xf0
[  122.882511][ T5175]  input_event_from_user+0x136/0x3b0
[  122.887802][ T5175]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  122.893612][ T5175]  ? preempt_count_sub+0x160/0x160
[  122.898729][ T5175]  ? input_inject_event+0x193/0x370
[  122.903945][ T5175]  evdev_write+0x378/0x750
[  122.908388][ T5175]  ? evdev_read+0xdf0/0xdf0
[  122.912935][ T5175]  ? security_file_permission+0x8e/0xb0
[  122.918535][ T5175]  ? evdev_read+0xdf0/0xdf0
[  122.923086][ T5175]  vfs_write+0x294/0x1100
[  122.927450][ T5175]  ? reacquire_held_locks+0x4c0/0x4c0
[  122.932835][ T5175]  ? kernel_write+0x6c0/0x6c0
[  122.937523][ T5175]  ? __fget_files+0x256/0x400
[  122.942220][ T5175]  ? __fget_light+0x173/0x200
[  122.946940][ T5175]  ksys_write+0x1f0/0x250
[  122.951309][ T5175]  ? __ia32_sys_read+0xb0/0xb0
[  122.956123][ T5175]  do_syscall_64+0xd3/0x250
[  122.960666][ T5175]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  122.966597][ T5175] RIP: 0033:0x7f321d319da9
[  122.971023][ T5175] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  122.990649][ T5175] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.999070][ T5175] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  123.007051][ T5175] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  123.015039][ T5175] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:09 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 21)

[  123.023009][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.030990][ T5175] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  123.038985][ T5175]  </TASK>
[  123.085603][ T5177] FAULT_INJECTION: forcing a failure.
[  123.085603][ T5177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.098981][ T5177] CPU: 1 PID: 5177 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  123.109308][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  123.119367][ T5177] Call Trace:
[  123.122654][ T5177]  <TASK>
[  123.125582][ T5177]  dump_stack_lvl+0x125/0x1b0
[  123.130276][ T5177]  should_fail_ex+0x496/0x5b0
[  123.134957][ T5177]  _copy_from_user+0x30/0xf0
[  123.139557][ T5177]  input_event_from_user+0x136/0x3b0
[  123.144850][ T5177]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  123.145454][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  123.150653][ T5177]  ? preempt_count_sub+0x160/0x160
[  123.150685][ T5177]  ? input_inject_event+0x193/0x370
[  123.168531][ T5177]  evdev_write+0x378/0x750
[  123.172980][ T5177]  ? evdev_read+0xdf0/0xdf0
[  123.177519][ T5177]  ? security_file_permission+0x8e/0xb0
[  123.183092][ T5177]  ? evdev_read+0xdf0/0xdf0
[  123.187604][ T5177]  vfs_write+0x294/0x1100
[  123.191953][ T5177]  ? reacquire_held_locks+0x4c0/0x4c0
[  123.197368][ T5177]  ? kernel_write+0x6c0/0x6c0
[  123.202079][ T5177]  ? __fget_files+0x256/0x400
[  123.206763][ T5177]  ? __fget_light+0x173/0x200
[  123.211445][ T5177]  ksys_write+0x1f0/0x250
[  123.215798][ T5177]  ? __ia32_sys_read+0xb0/0xb0
[  123.220574][ T5177]  do_syscall_64+0xd3/0x250
[  123.225084][ T5177]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  123.230993][ T5177] RIP: 0033:0x7f321d319da9
[  123.235413][ T5177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  123.255047][ T5177] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.263473][ T5177] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  123.271450][ T5177] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:09 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 22)

[  123.279437][ T5177] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  123.287433][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.295414][ T5177] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  123.303406][ T5177]  </TASK>
[  123.306956][   T45] usb 2-1: Using ep0 maxpacket: 32
[  123.343842][ T5179] FAULT_INJECTION: forcing a failure.
[  123.343842][ T5179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.356920][ T5179] CPU: 0 PID: 5179 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  123.367251][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  123.377313][ T5179] Call Trace:
[  123.380605][ T5179]  <TASK>
[  123.383545][ T5179]  dump_stack_lvl+0x125/0x1b0
[  123.388243][ T5179]  should_fail_ex+0x496/0x5b0
[  123.392943][ T5179]  _copy_from_user+0x30/0xf0
[  123.397543][ T5179]  input_event_from_user+0x136/0x3b0
[  123.402844][ T5179]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  123.408675][ T5179]  ? preempt_count_sub+0x160/0x160
[  123.413786][ T5179]  ? input_inject_event+0x193/0x370
[  123.416466][   T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  123.418977][ T5179]  evdev_write+0x378/0x750
[  123.419019][ T5179]  ? evdev_read+0xdf0/0xdf0
[  123.435496][ T5179]  ? security_file_permission+0x8e/0xb0
[  123.441086][ T5179]  ? evdev_read+0xdf0/0xdf0
[  123.445600][ T5179]  vfs_write+0x294/0x1100
[  123.449939][ T5179]  ? reacquire_held_locks+0x4c0/0x4c0
[  123.455318][ T5179]  ? kernel_write+0x6c0/0x6c0
[  123.460022][ T5179]  ? __fget_files+0x256/0x400
[  123.464707][ T5179]  ? __fget_light+0x173/0x200
[  123.469395][ T5179]  ksys_write+0x1f0/0x250
[  123.473755][ T5179]  ? __ia32_sys_read+0xb0/0xb0
[  123.478541][ T5179]  do_syscall_64+0xd3/0x250
[  123.483055][ T5179]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  123.488964][ T5179] RIP: 0033:0x7f321d319da9
[  123.493378][ T5179] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  123.512993][ T5179] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.515530][ T4789] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  123.521506][ T5179] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  123.521529][ T5179] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  123.521548][ T5179] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  123.552983][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.560967][ T5179] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  123.565617][   T45] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  123.568935][ T5179]  </TASK>
[  123.580598][   T45] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
16:49:10 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 23)

[  123.588822][   T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  123.598895][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  123.608640][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  123.615638][    T8] usb 1-1: Using ep0 maxpacket: 16
[  123.618862][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.634372][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.644259][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  123.664746][ T5181] FAULT_INJECTION: forcing a failure.
[  123.664746][ T5181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.677911][ T5181] CPU: 1 PID: 5181 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  123.688273][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  123.698339][ T5181] Call Trace:
[  123.701627][ T5181]  <TASK>
[  123.704561][ T5181]  dump_stack_lvl+0x125/0x1b0
[  123.709266][ T5181]  should_fail_ex+0x496/0x5b0
[  123.713976][ T5181]  _copy_from_user+0x30/0xf0
[  123.718574][ T5181]  input_event_from_user+0x136/0x3b0
[  123.723881][ T5181]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  123.729697][ T5181]  ? preempt_count_sub+0x160/0x160
[  123.734819][ T5181]  ? input_inject_event+0x193/0x370
[  123.735566][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.740030][ T5181]  evdev_write+0x378/0x750
[  123.740072][ T5181]  ? evdev_read+0xdf0/0xdf0
[  123.750964][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.755307][ T5181]  ? security_file_permission+0x8e/0xb0
[  123.759859][    T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  123.769476][ T5181]  ? evdev_read+0xdf0/0xdf0
[  123.769515][ T5181]  vfs_write+0x294/0x1100
[  123.775030][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.784023][ T5181]  ? reacquire_held_locks+0x4c0/0x4c0
[  123.784062][ T5181]  ? kernel_write+0x6c0/0x6c0
[  123.784099][ T5181]  ? __fget_files+0x256/0x400
[  123.797674][    T8] usb 1-1: config 0 descriptor??
[  123.800864][ T5181]  ? __fget_light+0x173/0x200
[  123.800905][ T5181]  ksys_write+0x1f0/0x250
[  123.829660][ T5181]  ? __ia32_sys_read+0xb0/0xb0
[  123.834441][ T5181]  do_syscall_64+0xd3/0x250
[  123.838953][ T5181]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  123.844871][ T5181] RIP: 0033:0x7f321d319da9
[  123.849312][ T5181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  123.868956][ T5181] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  123.877395][ T5181] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  123.885390][ T5181] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:10 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 24)

[  123.893382][ T5181] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  123.901364][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.909355][ T5181] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  123.917328][ T5181]  </TASK>
[  123.956862][ T5183] FAULT_INJECTION: forcing a failure.
[  123.956862][ T5183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.965704][   T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  123.969947][ T5183] CPU: 0 PID: 5183 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  123.978993][   T45] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  123.989236][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  123.989254][ T5183] Call Trace:
[  123.989264][ T5183]  <TASK>
[  123.989275][ T5183]  dump_stack_lvl+0x125/0x1b0
[  123.997612][   T45] usb 2-1: Product: syz
[  124.008318][ T5183]  should_fail_ex+0x496/0x5b0
[  124.008350][ T5183]  _copy_from_user+0x30/0xf0
[  124.011635][   T22] usb 5-1: Using ep0 maxpacket: 16
[  124.014530][ T5183]  input_event_from_user+0x136/0x3b0
[  124.027504][   T45] usb 2-1: config 0 descriptor??
[  124.027997][ T5183]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  124.053788][ T5183]  ? preempt_count_sub+0x160/0x160
[  124.058906][ T5183]  ? input_inject_event+0x193/0x370
[  124.064131][ T5183]  evdev_write+0x378/0x750
[  124.068563][ T5183]  ? evdev_read+0xdf0/0xdf0
[  124.073079][ T5183]  ? security_file_permission+0x8e/0xb0
[  124.078643][ T5183]  ? evdev_read+0xdf0/0xdf0
[  124.083155][ T5183]  vfs_write+0x294/0x1100
[  124.087497][ T5183]  ? reacquire_held_locks+0x4c0/0x4c0
[  124.092876][ T5183]  ? kernel_write+0x6c0/0x6c0
[  124.097587][ T5183]  ? __fget_files+0x256/0x400
[  124.102287][ T5183]  ? __fget_light+0x173/0x200
[  124.106969][ T5183]  ksys_write+0x1f0/0x250
[  124.111306][ T5183]  ? __ia32_sys_read+0xb0/0xb0
[  124.116079][ T5183]  do_syscall_64+0xd3/0x250
[  124.120619][ T5183]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  124.125594][ T4789] usb 3-1: Using ep0 maxpacket: 32
[  124.126533][ T5183] RIP: 0033:0x7f321d319da9
[  124.126561][ T5183] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
16:49:10 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 25)

[  124.155716][ T5183] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.164141][ T5183] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  124.172120][ T5183] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  124.180091][ T5183] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  124.188069][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.196054][ T5183] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  124.204038][ T5183]  </TASK>
[  124.246069][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.246150][ T5185] FAULT_INJECTION: forcing a failure.
[  124.246150][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.255955][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  124.268902][ T5185] CPU: 0 PID: 5185 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  124.278926][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  124.289159][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  124.289177][ T5185] Call Trace:
[  124.289187][ T5185]  <TASK>
[  124.315159][ T5185]  dump_stack_lvl+0x125/0x1b0
[  124.319849][ T5185]  should_fail_ex+0x496/0x5b0
[  124.324528][ T5185]  _copy_from_user+0x30/0xf0
[  124.329129][ T5185]  input_event_from_user+0x136/0x3b0
[  124.334424][ T5185]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  124.340246][ T5185]  ? preempt_count_sub+0x160/0x160
[  124.345380][ T5185]  ? input_inject_event+0x193/0x370
[  124.350621][ T5185]  evdev_write+0x378/0x750
[  124.355088][ T5185]  ? evdev_read+0xdf0/0xdf0
[  124.359634][ T5185]  ? security_file_permission+0x8e/0xb0
[  124.365234][ T5185]  ? evdev_read+0xdf0/0xdf0
[  124.369784][ T5185]  vfs_write+0x294/0x1100
[  124.374151][ T5185]  ? reacquire_held_locks+0x4c0/0x4c0
[  124.379347][   T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  124.379524][ T5185]  ? kernel_write+0x6c0/0x6c0
[  124.394884][ T5185]  ? __fget_files+0x256/0x400
[  124.399606][ T5185]  ? __fget_light+0x173/0x200
[  124.403692][   T45] usb 2-1: USB disconnect, device number 16
[  124.404299][ T5185]  ksys_write+0x1f0/0x250
[  124.404340][ T5185]  ? __ia32_sys_read+0xb0/0xb0
[  124.419391][ T5185]  do_syscall_64+0xd3/0x250
[  124.423942][ T5185]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  124.425579][ T4789] usb 3-1: config 0 has no interfaces?
[  124.429865][ T5185] RIP: 0033:0x7f321d319da9
[  124.429888][ T5185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  124.429916][ T5185] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246
[  124.435433][ T4789] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c57, bcdDevice=eb.5b
[  124.439755][ T5185]  ORIG_RAX: 0000000000000001
[  124.439767][ T5185] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  124.459396][ T4789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:49:11 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 26)

[  124.465394][ T5185] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  124.465414][ T5185] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  124.493689][   T45] usblp0: removed
[  124.495025][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.495046][ T5185] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  124.495071][ T5185]  </TASK>
[  124.532927][ T4789] usb 3-1: config 0 descriptor??
[  124.583822][ T5187] FAULT_INJECTION: forcing a failure.
[  124.583822][ T5187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.586127][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  124.597079][ T5187] CPU: 1 PID: 5187 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  124.602874][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  124.613055][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  124.613072][ T5187] Call Trace:
[  124.613082][ T5187]  <TASK>
[  124.613091][ T5187]  dump_stack_lvl+0x125/0x1b0
[  124.635193][    T8] usb 1-1: USB disconnect, device number 19
[  124.635680][ T5187]  should_fail_ex+0x496/0x5b0
[  124.635715][ T5187]  _copy_from_user+0x30/0xf0
[  124.655616][ T5187]  input_event_from_user+0x136/0x3b0
[  124.660940][ T5187]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  124.666781][ T5187]  ? preempt_count_sub+0x160/0x160
[  124.671897][ T5187]  ? input_inject_event+0x193/0x370
[  124.677099][ T5187]  evdev_write+0x378/0x750
[  124.681526][ T5187]  ? evdev_read+0xdf0/0xdf0
[  124.686036][ T5187]  ? security_file_permission+0x8e/0xb0
[  124.691600][ T5187]  ? evdev_read+0xdf0/0xdf0
[  124.696111][ T5187]  vfs_write+0x294/0x1100
[  124.700486][ T5187]  ? reacquire_held_locks+0x4c0/0x4c0
[  124.705871][ T5187]  ? kernel_write+0x6c0/0x6c0
[  124.710559][ T5187]  ? __fget_files+0x256/0x400
[  124.715253][ T5187]  ? __fget_light+0x173/0x200
[  124.719961][ T5187]  ksys_write+0x1f0/0x250
[  124.724311][ T5187]  ? __ia32_sys_read+0xb0/0xb0
[  124.729108][ T5187]  do_syscall_64+0xd3/0x250
[  124.733616][ T5187]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  124.739524][ T5187] RIP: 0033:0x7f321d319da9
[  124.743934][ T5187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  124.763551][ T5187] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.771975][ T5187] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:11 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 27)

[  124.779957][ T5187] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  124.787938][ T5187] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  124.795938][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  124.803916][ T5187] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  124.811891][ T5187]  </TASK>
[  124.858606][ T5189] FAULT_INJECTION: forcing a failure.
[  124.858606][ T5189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.871768][ T5189] CPU: 0 PID: 5189 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  124.882116][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  124.892171][ T5189] Call Trace:
[  124.895448][ T5189]  <TASK>
[  124.898383][ T5189]  dump_stack_lvl+0x125/0x1b0
[  124.903104][ T5189]  should_fail_ex+0x496/0x5b0
[  124.907800][ T5189]  _copy_from_user+0x30/0xf0
[  124.912407][ T5189]  input_event_from_user+0x136/0x3b0
[  124.917699][ T5189]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  124.923511][ T5189]  ? preempt_count_sub+0x160/0x160
[  124.928625][ T5189]  ? input_inject_event+0x193/0x370
[  124.933831][ T5189]  evdev_write+0x378/0x750
[  124.938257][ T5189]  ? evdev_read+0xdf0/0xdf0
[  124.942781][ T5189]  ? security_file_permission+0x8e/0xb0
[  124.948342][ T5189]  ? evdev_read+0xdf0/0xdf0
[  124.952856][ T5189]  vfs_write+0x294/0x1100
[  124.957207][ T5189]  ? reacquire_held_locks+0x4c0/0x4c0
[  124.962599][ T5189]  ? kernel_write+0x6c0/0x6c0
[  124.967299][ T5189]  ? __fget_files+0x256/0x400
[  124.972005][ T5189]  ? __fget_light+0x173/0x200
[  124.976690][ T5189]  ksys_write+0x1f0/0x250
[  124.981052][ T5189]  ? __ia32_sys_read+0xb0/0xb0
[  124.985825][ T5189]  do_syscall_64+0xd3/0x250
[  124.990336][ T5189]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  124.996247][ T5189] RIP: 0033:0x7f321d319da9
[  125.000659][ T5189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  125.020282][ T5189] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  125.028733][ T5189] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  125.036735][ T5189] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  125.044743][ T5189] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:11 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  125.052741][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.060740][ T5189] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  125.068747][ T5189]  </TASK>
[  125.074359][ T5167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.085640][ T5167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:49:11 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 28)

[  125.107095][  T726] usb 3-1: USB disconnect, device number 16
[  125.145695][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  125.155586][   T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.162803][ T5193] FAULT_INJECTION: forcing a failure.
[  125.162803][ T5193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.164678][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.177783][ T5193] CPU: 0 PID: 5193 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  125.185765][   T22] usb 5-1: Product: С
[  125.196031][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  125.196049][ T5193] Call Trace:
[  125.196060][ T5193]  <TASK>
[  125.200198][   T22] usb 5-1: Manufacturer: 䀁
[  125.210233][ T5193]  dump_stack_lvl+0x125/0x1b0
[  125.225813][ T5193]  should_fail_ex+0x496/0x5b0
[  125.230531][ T5193]  _copy_from_user+0x30/0xf0
[  125.235149][ T5193]  input_event_from_user+0x136/0x3b0
[  125.240441][ T5193]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  125.246263][ T5193]  ? preempt_count_sub+0x160/0x160
[  125.251396][ T5193]  ? input_inject_event+0x193/0x370
[  125.256597][ T5193]  evdev_write+0x378/0x750
[  125.261022][ T5193]  ? evdev_read+0xdf0/0xdf0
[  125.265533][ T5193]  ? security_file_permission+0x8e/0xb0
[  125.271093][ T5193]  ? evdev_read+0xdf0/0xdf0
[  125.275613][ T5193]  vfs_write+0x294/0x1100
[  125.279984][ T5193]  ? reacquire_held_locks+0x4c0/0x4c0
[  125.285395][ T5193]  ? kernel_write+0x6c0/0x6c0
[  125.290114][ T5193]  ? __fget_files+0x256/0x400
[  125.294808][ T5193]  ? __fget_light+0x173/0x200
[  125.299497][ T5193]  ksys_write+0x1f0/0x250
[  125.303840][ T5193]  ? __ia32_sys_read+0xb0/0xb0
[  125.308617][ T5193]  do_syscall_64+0xd3/0x250
[  125.313132][ T5193]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  125.319048][ T5193] RIP: 0033:0x7f321d319da9
[  125.323484][ T5193] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
16:49:12 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 29)

[  125.343113][ T5193] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  125.351527][ T5193] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  125.359497][ T5193] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  125.367466][ T5193] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  125.375434][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.383420][ T5193] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  125.391407][ T5193]  </TASK>
[  125.430843][ T5195] FAULT_INJECTION: forcing a failure.
[  125.430843][ T5195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.443931][ T5195] CPU: 0 PID: 5195 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  125.454275][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  125.464328][ T5195] Call Trace:
[  125.467614][ T5195]  <TASK>
[  125.470552][ T5195]  dump_stack_lvl+0x125/0x1b0
[  125.475248][ T5195]  should_fail_ex+0x496/0x5b0
[  125.479950][ T5195]  _copy_from_user+0x30/0xf0
[  125.484573][ T5195]  input_event_from_user+0x136/0x3b0
[  125.489888][ T5195]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  125.495735][ T5195]  ? preempt_count_sub+0x160/0x160
[  125.500887][ T5195]  ? input_inject_event+0x193/0x370
[  125.506132][ T5195]  evdev_write+0x378/0x750
[  125.510596][ T5195]  ? evdev_read+0xdf0/0xdf0
[  125.515110][ T5195]  ? security_file_permission+0x8e/0xb0
[  125.520678][ T5195]  ? evdev_read+0xdf0/0xdf0
[  125.525191][ T5195]  vfs_write+0x294/0x1100
[  125.529544][ T5195]  ? reacquire_held_locks+0x4c0/0x4c0
[  125.534996][ T5195]  ? kernel_write+0x6c0/0x6c0
[  125.539712][ T5195]  ? __fget_files+0x256/0x400
[  125.544419][ T5195]  ? __fget_light+0x173/0x200
[  125.545729][   T22] cdc_ncm 5-1:1.0: bind() failure
[  125.549097][ T5195]  ksys_write+0x1f0/0x250
[  125.549137][ T5195]  ? __ia32_sys_read+0xb0/0xb0
[  125.561010][   T22] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  125.563230][ T5195]  do_syscall_64+0xd3/0x250
[  125.563268][ T5195]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  125.570097][   T22] cdc_ncm 5-1:1.1: bind() failure
[  125.574507][ T5195] RIP: 0033:0x7f321d319da9
[  125.589925][ T5195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  125.590953][   T22] usb 5-1: USB disconnect, device number 16
[  125.609547][ T5195] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  125.609579][ T5195] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  125.609599][ T5195] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  125.609618][ T5195] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  125.609636][ T5195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.609654][ T5195] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  125.609678][ T5195]  </TASK>
16:49:12 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 30)

16:49:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/4096)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, "2a000000000000004b99344ea300020000000000000dbd314884350b9900"})
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/25)

[  125.675553][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  125.725427][    T8] usb 1-1: Using ep0 maxpacket: 16
[  125.747342][ T5197] FAULT_INJECTION: forcing a failure.
[  125.747342][ T5197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.760461][ T5197] CPU: 1 PID: 5197 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  125.770819][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  125.780898][ T5197] Call Trace:
[  125.784198][ T5197]  <TASK>
[  125.785514][    T8] usb 1-1: device descriptor read/all, error -71
16:49:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/4096) (async)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, "2a000000000000004b99344ea300020000000000000dbd314884350b9900"})
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/25)

[  125.787130][ T5197]  dump_stack_lvl+0x125/0x1b0
[  125.787174][ T5197]  should_fail_ex+0x496/0x5b0
[  125.802864][ T5197]  _copy_from_user+0x30/0xf0
[  125.807496][ T5197]  input_event_from_user+0x136/0x3b0
[  125.812827][ T5197]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  125.818675][ T5197]  ? preempt_count_sub+0x160/0x160
[  125.823824][ T5197]  ? input_inject_event+0x193/0x370
[  125.829063][ T5197]  evdev_write+0x378/0x750
[  125.833525][ T5197]  ? evdev_read+0xdf0/0xdf0
[  125.838074][ T5197]  ? security_file_permission+0x8e/0xb0
16:49:12 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x400, 0x0)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/4096) (async)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, "2a000000000000004b99344ea300020000000000000dbd314884350b9900"}) (async)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000000)=""/25)

[  125.843682][ T5197]  ? evdev_read+0xdf0/0xdf0
[  125.848231][ T5197]  vfs_write+0x294/0x1100
[  125.852610][ T5197]  ? reacquire_held_locks+0x4c0/0x4c0
[  125.858028][ T5197]  ? kernel_write+0x6c0/0x6c0
[  125.862752][ T5197]  ? __fget_files+0x256/0x400
[  125.867482][ T5197]  ? __fget_light+0x173/0x200
[  125.872205][ T5197]  ksys_write+0x1f0/0x250
[  125.876581][ T5197]  ? __ia32_sys_read+0xb0/0xb0
[  125.881394][ T5197]  do_syscall_64+0xd3/0x250
[  125.885941][ T5197]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  125.891886][ T5197] RIP: 0033:0x7f321d319da9
[  125.896330][ T5197] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  125.915969][ T5197] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  125.916083][    T9] usb 2-1: Using ep0 maxpacket: 32
[  125.924395][ T5197] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  125.924417][ T5197] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:12 executing program 2:
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003576c5beb000000010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xb3, 0xc3, 0xf4, 0x0, 0x3334, 0x1701, 0x3d6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x69, 0xbf, 0xd7}}]}}]}}, 0x0) (async)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xd0000)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/99)

[  125.924437][ T5197] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  125.924455][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.961486][ T5197] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  125.969497][ T5197]  </TASK>
16:49:12 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 31)

16:49:12 executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

16:49:12 executing program 4:
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000240)=""/66) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000025c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x1, 0x9e3}, {0x6}, [@mdlm_detail={0x4}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x0, 0x1}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0xb5, 0x10, 0x1f}, 0x5, &(0x7f0000002800)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x421}}, {0x98, &(0x7f00000002c0)=ANY=[]}, {0x2, &(0x7f0000002a40)=@string={0x2}}, {0x0, 0x0}, {0x13, &(0x7f0000002b80)=@string={0x13, 0x3, "e8ef917017aca0229f0832178c65c959c0"}}]}) (async, rerun: 64)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x485}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x56}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7f, 0xde, 0x7f, 0x20, 0xd}, 0x9a, &(0x7f0000000080)={0x5, 0xf, 0x9a, 0x6, [@generic={0x2e, 0x10, 0x2, "3004f37094af5b2acc16db8752a0a49d8a29b176e464d60dbc8a4046f1979cc4e1facd2a17063fb3134c6b"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cd3649edf3603088ac3287281cae7fc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "5a7e84d6ffa0dd85fa02a5c0ab5d2b73"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf00f, 0x9, [0x3f38, 0xc030, 0xc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x2b, 0x5, 0xed4, 0xf0f, 0x6, [0xffa0ff, 0x0, 0xf, 0x30, 0xffc00f]}]}, 0x2, [{0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="5e03c398bd8379bfb1d85f3b4f05a0b8c87c5c050b30eb3fbe15cbb44d8480eef38e7f38ee0a6804f5892f822c5daa5891191d7160f8c19e705716262e79131f8c3c2a8effeb208cd97d79e095c7575b0aaaa243b3c384bc606653991af4bdea1987bb83d6e91e"]}, {0x20, &(0x7f00000001c0)=@string={0x20, 0x3, "a34ba01cc513be5f749058af446c0cb6d200d6dd260b9726a34ebad2bba9"}}]}) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffffffff, 0x2000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x6, 0x1b, 0x800, 0x100000, "8c356ad4f183bd50ba77470bacd3970e1ef70e6baf4aed3f2c563be7cbf167b1"})

[  126.075527][    T9] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  126.083947][    T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  126.092088][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  126.116225][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.126015][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  126.135795][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.145594][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  126.151895][ T5210] FAULT_INJECTION: forcing a failure.
[  126.151895][ T5210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.155419][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  126.168445][ T5210] CPU: 1 PID: 5210 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  126.191712][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  126.201779][ T5210] Call Trace:
[  126.205083][ T5210]  <TASK>
[  126.208016][ T5210]  dump_stack_lvl+0x125/0x1b0
[  126.212710][ T5210]  should_fail_ex+0x496/0x5b0
[  126.217402][ T5210]  _copy_from_user+0x30/0xf0
[  126.222021][ T5210]  input_event_from_user+0x136/0x3b0
[  126.227316][ T5210]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  126.233136][ T5210]  ? preempt_count_sub+0x160/0x160
[  126.238260][ T5210]  ? input_inject_event+0x193/0x370
[  126.243483][ T5210]  evdev_write+0x378/0x750
[  126.247909][ T5210]  ? evdev_read+0xdf0/0xdf0
[  126.252420][ T5210]  ? security_file_permission+0x8e/0xb0
[  126.256538][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  126.257972][ T5210]  ? evdev_read+0xdf0/0xdf0
[  126.258011][ T5210]  vfs_write+0x294/0x1100
[  126.267057][    T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  126.271482][ T5210]  ? reacquire_held_locks+0x4c0/0x4c0
[  126.275844][    T9] usb 2-1: Product: syz
[  126.283829][ T5210]  ? kernel_write+0x6c0/0x6c0
[  126.296581][    T9] usb 2-1: config 0 descriptor??
[  126.297987][ T5210]  ? __fget_files+0x256/0x400
[  126.298027][ T5210]  ? __fget_light+0x173/0x200
[  126.312424][ T5210]  ksys_write+0x1f0/0x250
[  126.316797][ T5210]  ? __ia32_sys_read+0xb0/0xb0
[  126.321572][ T5210]  do_syscall_64+0xd3/0x250
[  126.325418][  T726] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  126.326072][ T5210]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  126.339522][ T5210] RIP: 0033:0x7f321d319da9
[  126.343948][ T5210] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  126.363568][ T5210] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:13 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 32)

[  126.372005][ T5210] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  126.379977][ T5210] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  126.387951][ T5210] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  126.395951][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.403949][ T5210] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  126.411940][ T5210]  </TASK>
[  126.452136][ T5214] FAULT_INJECTION: forcing a failure.
[  126.452136][ T5214] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.465409][    T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  126.473121][ T5214] CPU: 1 PID: 5214 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  126.483455][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  126.493522][ T5214] Call Trace:
[  126.496811][ T5214]  <TASK>
[  126.499742][ T5214]  dump_stack_lvl+0x125/0x1b0
[  126.504448][ T5214]  should_fail_ex+0x496/0x5b0
[  126.509132][ T5214]  _copy_from_user+0x30/0xf0
[  126.513744][ T5214]  input_event_from_user+0x136/0x3b0
[  126.519056][ T5214]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  126.524871][ T5214]  ? preempt_count_sub+0x160/0x160
[  126.530013][ T5214]  ? input_inject_event+0x193/0x370
[  126.535225][ T5214]  evdev_write+0x378/0x750
[  126.539678][ T5214]  ? evdev_read+0xdf0/0xdf0
[  126.544233][ T5214]  ? security_file_permission+0x8e/0xb0
[  126.549841][ T5214]  ? evdev_read+0xdf0/0xdf0
[  126.554378][ T5214]  vfs_write+0x294/0x1100
[  126.558746][ T5214]  ? reacquire_held_locks+0x4c0/0x4c0
[  126.559484][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  126.564144][ T5214]  ? kernel_write+0x6c0/0x6c0
[  126.564188][ T5214]  ? __fget_files+0x256/0x400
[  126.575105][  T726] usb 3-1: Using ep0 maxpacket: 32
[  126.579525][ T5214]  ? __fget_light+0x173/0x200
[  126.579565][ T5214]  ksys_write+0x1f0/0x250
[  126.579603][ T5214]  ? __ia32_sys_read+0xb0/0xb0
[  126.603226][ T5214]  do_syscall_64+0xd3/0x250
[  126.607783][ T5214]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  126.611756][    T9] usb 2-1: USB disconnect, device number 17
[  126.613704][ T5214] RIP: 0033:0x7f321d319da9
[  126.613730][ T5214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  126.613764][ T5214] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  126.636506][    T9] usblp0: removed
[  126.643652][ T5214] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  126.643674][ T5214] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  126.643694][ T5214] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  126.643712][ T5214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.643730][ T5214] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  126.695532][  T726] usb 3-1: config 0 has no interfaces?
16:49:13 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 33)

[  126.695688][ T5214]  </TASK>
[  126.701194][  T726] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c57, bcdDevice=eb.5b
[  126.713376][  T726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.721432][    T8] usb 1-1: Using ep0 maxpacket: 8
[  126.729556][  T726] usb 3-1: config 0 descriptor??
[  126.764333][ T5216] FAULT_INJECTION: forcing a failure.
[  126.764333][ T5216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.777719][ T5216] CPU: 0 PID: 5216 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  126.785618][   T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  126.788033][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  126.788051][ T5216] Call Trace:
[  126.788062][ T5216]  <TASK>
[  126.788071][ T5216]  dump_stack_lvl+0x125/0x1b0
[  126.788111][ T5216]  should_fail_ex+0x496/0x5b0
[  126.821255][ T5216]  _copy_from_user+0x30/0xf0
[  126.825860][ T5216]  input_event_from_user+0x136/0x3b0
[  126.831153][ T5216]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  126.836974][ T5216]  ? preempt_count_sub+0x160/0x160
[  126.842124][ T5216]  ? input_inject_event+0x193/0x370
[  126.847343][ T5216]  evdev_write+0x378/0x750
[  126.851777][ T5216]  ? evdev_read+0xdf0/0xdf0
[  126.856308][ T5216]  ? security_file_permission+0x8e/0xb0
[  126.861879][ T5216]  ? evdev_read+0xdf0/0xdf0
[  126.866392][ T5216]  vfs_write+0x294/0x1100
[  126.870735][ T5216]  ? reacquire_held_locks+0x4c0/0x4c0
[  126.876117][ T5216]  ? kernel_write+0x6c0/0x6c0
[  126.880805][ T5216]  ? __fget_files+0x256/0x400
[  126.885519][ T5216]  ? __fget_light+0x173/0x200
[  126.890228][ T5216]  ksys_write+0x1f0/0x250
[  126.894590][ T5216]  ? __ia32_sys_read+0xb0/0xb0
[  126.899382][ T5216]  do_syscall_64+0xd3/0x250
[  126.903916][ T5216]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  126.909841][ T5216] RIP: 0033:0x7f321d319da9
[  126.914257][ T5216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  126.933879][ T5216] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  126.942328][ T5216] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  126.950309][ T5216] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:13 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 34)

[  126.958292][ T5216] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  126.966262][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.974232][ T5216] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  126.982225][ T5216]  </TASK>
[  126.988808][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.997625][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.039574][ T5220] FAULT_INJECTION: forcing a failure.
[  127.039574][ T5220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.052727][ T5220] CPU: 0 PID: 5220 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  127.063081][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  127.073148][ T5220] Call Trace:
[  127.076443][ T5220]  <TASK>
[  127.079386][ T5220]  dump_stack_lvl+0x125/0x1b0
[  127.084078][ T5220]  should_fail_ex+0x496/0x5b0
[  127.088784][ T5220]  _copy_from_user+0x30/0xf0
[  127.093381][ T5220]  input_event_from_user+0x136/0x3b0
[  127.098680][ T5220]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  127.104518][ T5220]  ? preempt_count_sub+0x160/0x160
[  127.109642][ T5220]  ? input_inject_event+0x193/0x370
[  127.114859][ T5220]  evdev_write+0x378/0x750
[  127.119301][ T5220]  ? evdev_read+0xdf0/0xdf0
[  127.123822][ T5220]  ? security_file_permission+0x8e/0xb0
[  127.129390][ T5220]  ? evdev_read+0xdf0/0xdf0
[  127.133901][ T5220]  vfs_write+0x294/0x1100
[  127.138279][ T5220]  ? reacquire_held_locks+0x4c0/0x4c0
[  127.143686][ T5220]  ? kernel_write+0x6c0/0x6c0
[  127.148386][ T5220]  ? __fget_files+0x256/0x400
[  127.153100][ T5220]  ? __fget_light+0x173/0x200
[  127.157788][ T5220]  ksys_write+0x1f0/0x250
[  127.162127][ T5220]  ? __ia32_sys_read+0xb0/0xb0
[  127.166911][ T5220]  do_syscall_64+0xd3/0x250
[  127.171422][ T5220]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  127.177331][ T5220] RIP: 0033:0x7f321d319da9
[  127.181742][ T5220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  127.194089][   T45] usb 3-1: USB disconnect, device number 17
[  127.201338][ T5220] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  127.201370][ T5220] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  127.201389][ T5220] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  127.201407][ T5220] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:13 executing program 1:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  127.207502][   T22] usb 5-1: Using ep0 maxpacket: 16
[  127.215672][ T5220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  127.215692][ T5220] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  127.215717][ T5220]  </TASK>
[  127.217573][    T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  127.272315][    T8] usb 1-1: config 179 has no interface number 0
[  127.282370][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  127.293498][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  127.304799][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  127.316014][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  127.327475][    T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
16:49:13 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 35)

[  127.340780][    T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  127.345751][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.349914][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.374482][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  127.384599][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  127.401625][ T5224] FAULT_INJECTION: forcing a failure.
[  127.401625][ T5224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.414741][ T5224] CPU: 0 PID: 5224 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  127.425094][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  127.435145][ T5224] Call Trace:
[  127.438429][ T5224]  <TASK>
[  127.441367][ T5224]  dump_stack_lvl+0x125/0x1b0
[  127.446077][ T5224]  should_fail_ex+0x496/0x5b0
[  127.450756][ T5224]  _copy_from_user+0x30/0xf0
[  127.455369][ T5224]  input_event_from_user+0x136/0x3b0
[  127.460677][ T5224]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  127.466510][ T5224]  ? preempt_count_sub+0x160/0x160
[  127.471640][ T5224]  ? input_inject_event+0x193/0x370
[  127.476866][ T5224]  evdev_write+0x378/0x750
[  127.481293][ T5224]  ? evdev_read+0xdf0/0xdf0
[  127.485807][ T5224]  ? security_file_permission+0x8e/0xb0
[  127.491378][ T5224]  ? evdev_read+0xdf0/0xdf0
[  127.495923][ T5224]  vfs_write+0x294/0x1100
[  127.500294][ T5224]  ? reacquire_held_locks+0x4c0/0x4c0
[  127.505700][ T5224]  ? kernel_write+0x6c0/0x6c0
[  127.510398][ T5224]  ? __fget_files+0x256/0x400
[  127.515108][ T5224]  ? __fget_light+0x173/0x200
[  127.519808][ T5224]  ksys_write+0x1f0/0x250
[  127.524179][ T5224]  ? __ia32_sys_read+0xb0/0xb0
[  127.528998][ T5224]  do_syscall_64+0xd3/0x250
[  127.533533][ T5224]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  127.539459][ T5224] RIP: 0033:0x7f321d319da9
[  127.543888][ T5224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  127.563503][ T5224] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  127.571934][ T5224] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  127.579907][ T5224] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:14 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 36)

[  127.587883][ T5224] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  127.595859][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  127.603833][ T5224] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  127.611821][ T5224]  </TASK>
[  127.619338][ T5208] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  127.661552][ T5226] FAULT_INJECTION: forcing a failure.
[  127.661552][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.675587][ T5226] CPU: 0 PID: 5226 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  127.685919][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  127.695975][ T5226] Call Trace:
[  127.699255][ T5226]  <TASK>
[  127.702185][ T5226]  dump_stack_lvl+0x125/0x1b0
[  127.706881][ T5226]  should_fail_ex+0x496/0x5b0
[  127.711592][ T5226]  _copy_from_user+0x30/0xf0
[  127.716193][ T5226]  input_event_from_user+0x136/0x3b0
[  127.721498][ T5226]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  127.727322][ T5226]  ? preempt_count_sub+0x160/0x160
[  127.732436][ T5226]  ? input_inject_event+0x193/0x370
[  127.735657][   T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.737628][ T5226]  evdev_write+0x378/0x750
[  127.737677][ T5226]  ? evdev_read+0xdf0/0xdf0
[  127.746703][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.751062][ T5226]  ? security_file_permission+0x8e/0xb0
[  127.755581][   T22] usb 5-1: Product: С
[  127.763500][ T5226]  ? evdev_read+0xdf0/0xdf0
[  127.769047][   T22] usb 5-1: Manufacturer: 䀁
[  127.773066][ T5226]  vfs_write+0x294/0x1100
[  127.777572][   T22] usb 5-1: SerialNumber: 飃莽뽹㭟Տ뢠糈՜》㿫ᖾ듋葍軳㡿૮Ѩ觵舯崬墪ᦑ焝黁坰☖礮ἓ㲌踪谠緙잕字ꨊ䎢쎳버晠饓
[  127.782115][ T5226]  ? reacquire_held_locks+0x4c0/0x4c0
[  127.788598][ T4792] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  127.802193][ T5226]  ? kernel_write+0x6c0/0x6c0
[  127.802236][ T5226]  ? __fget_files+0x256/0x400
[  127.824686][ T5226]  ? __fget_light+0x173/0x200
[  127.829405][ T5226]  ksys_write+0x1f0/0x250
[  127.833777][ T5226]  ? __ia32_sys_read+0xb0/0xb0
[  127.838676][ T5226]  do_syscall_64+0xd3/0x250
[  127.843225][ T5226]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  127.849170][ T5226] RIP: 0033:0x7f321d319da9
16:49:14 executing program 2:
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003576c5beb000000010902"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xb3, 0xc3, 0xf4, 0x0, 0x3334, 0x1701, 0x3d6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x69, 0xbf, 0xd7}}]}}]}}, 0x0) (async)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xd0000)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/99)

[  127.853608][ T5226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  127.873253][ T5226] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  127.881706][ T5226] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  127.889708][ T5226] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  127.897707][ T5226] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:14 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 37)

[  127.905712][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  127.913719][ T5226] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  127.921726][ T5226]  </TASK>
[  127.962287][ T5230] FAULT_INJECTION: forcing a failure.
[  127.962287][ T5230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.975561][ T5230] CPU: 0 PID: 5230 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  127.985916][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  127.995985][ T5230] Call Trace:
[  127.999265][ T5230]  <TASK>
[  128.002211][ T5230]  dump_stack_lvl+0x125/0x1b0
[  128.006912][ T5230]  should_fail_ex+0x496/0x5b0
[  128.011596][ T5230]  _copy_from_user+0x30/0xf0
[  128.016197][ T5230]  input_event_from_user+0x136/0x3b0
[  128.021487][ T5230]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  128.027311][ T5230]  ? preempt_count_sub+0x160/0x160
[  128.032443][ T5230]  ? input_inject_event+0x193/0x370
[  128.037651][ T5230]  evdev_write+0x378/0x750
[  128.042079][ T5230]  ? evdev_read+0xdf0/0xdf0
[  128.046590][ T5230]  ? security_file_permission+0x8e/0xb0
[  128.052164][ T5230]  ? evdev_read+0xdf0/0xdf0
[  128.052435][ T4789] usb 1-1: USB disconnect, device number 21
[  128.056685][ T5230]  vfs_write+0x294/0x1100
[  128.056725][ T5230]  ? reacquire_held_locks+0x4c0/0x4c0
[  128.056762][ T5230]  ? kernel_write+0x6c0/0x6c0
[  128.077064][ T5230]  ? __fget_files+0x256/0x400
[  128.081787][ T5230]  ? __fget_light+0x173/0x200
[  128.086489][ T5230]  ksys_write+0x1f0/0x250
[  128.087355][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.090839][ T5230]  ? __ia32_sys_read+0xb0/0xb0
[  128.090883][ T5230]  do_syscall_64+0xd3/0x250
[  128.105007][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.108476][ T5230]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  128.122119][ T5230] RIP: 0033:0x7f321d319da9
[  128.122147][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.126544][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  128.126574][ T5230] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.126603][ T5230] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  128.126623][ T5230] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  128.137520][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.154530][ T5230] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  128.173676][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.178899][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  128.178921][ T5230] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  128.178946][ T5230]  </TASK>
[  128.179084][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  128.187744][ T4792] usb 2-1: Using ep0 maxpacket: 32
[  128.197377][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.245715][   T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  128.247335][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
16:49:14 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 38)

[  128.264349][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.309152][ T5232] FAULT_INJECTION: forcing a failure.
[  128.309152][ T5232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.322234][ T5232] CPU: 0 PID: 5232 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  128.325828][   T22] cdc_ncm 5-1:1.0: bind() failure
[  128.332546][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  128.332564][ T5232] Call Trace:
[  128.332575][ T5232]  <TASK>
[  128.332585][ T5232]  dump_stack_lvl+0x125/0x1b0
[  128.344557][   T22] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  128.347661][ T5232]  should_fail_ex+0x496/0x5b0
[  128.347694][ T5232]  _copy_from_user+0x30/0xf0
[  128.347730][ T5232]  input_event_from_user+0x136/0x3b0
[  128.351056][   T22] cdc_ncm 5-1:1.1: bind() failure
[  128.353931][ T5232]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  128.367525][   T22] usb 5-1: USB disconnect, device number 17
[  128.370004][ T5232]  ? preempt_count_sub+0x160/0x160
[  128.370036][ T5232]  ? input_inject_event+0x193/0x370
[  128.370068][ T5232]  evdev_write+0x378/0x750
[  128.411478][ T5232]  ? evdev_read+0xdf0/0xdf0
[  128.416029][ T5232]  ? security_file_permission+0x8e/0xb0
[  128.421653][ T5232]  ? evdev_read+0xdf0/0xdf0
[  128.426205][ T5232]  vfs_write+0x294/0x1100
[  128.426879][ T4792] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  128.430553][ T5232]  ? reacquire_held_locks+0x4c0/0x4c0
[  128.438909][ T4792] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  128.444229][ T5232]  ? kernel_write+0x6c0/0x6c0
[  128.452305][ T4792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  128.456927][ T5232]  ? __fget_files+0x256/0x400
[  128.467928][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  128.470421][ T5232]  ? __fget_light+0x173/0x200
[  128.470461][ T5232]  ksys_write+0x1f0/0x250
[  128.480160][ T4792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  128.484748][ T5232]  ? __ia32_sys_read+0xb0/0xb0
[  128.489098][ T4792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  128.498659][ T5232]  do_syscall_64+0xd3/0x250
[  128.498695][ T5232]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  128.503438][ T4792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  128.513125][ T5232] RIP: 0033:0x7f321d319da9
[  128.513147][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  128.517649][ T4792] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  128.523493][ T5232] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.578772][ T5232] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  128.586744][ T5232] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  128.594714][ T5232] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:15 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 39)

16:49:15 executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[  128.602694][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  128.610693][ T5232] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  128.618679][ T5232]  </TASK>
[  128.626097][   T45] usb 3-1: Using ep0 maxpacket: 32
[  128.665737][ T4792] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  128.674814][ T4792] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  128.683258][ T4792] usb 2-1: Product: syz
[  128.691355][ T5234] FAULT_INJECTION: forcing a failure.
[  128.691355][ T5234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.704468][ T5234] CPU: 1 PID: 5234 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  128.714825][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  128.724905][ T5234] Call Trace:
[  128.728214][ T5234]  <TASK>
[  128.731165][ T5234]  dump_stack_lvl+0x125/0x1b0
[  128.735878][ T5234]  should_fail_ex+0x496/0x5b0
[  128.740562][ T5234]  _copy_from_user+0x30/0xf0
[  128.745173][ T5234]  input_event_from_user+0x136/0x3b0
[  128.750472][ T5234]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  128.756295][ T5234]  ? preempt_count_sub+0x160/0x160
[  128.761411][ T5234]  ? input_inject_event+0x193/0x370
[  128.766615][ T5234]  evdev_write+0x378/0x750
[  128.771040][ T5234]  ? evdev_read+0xdf0/0xdf0
[  128.775563][ T5234]  ? security_file_permission+0x8e/0xb0
[  128.781127][ T5234]  ? evdev_read+0xdf0/0xdf0
[  128.785638][ T5234]  vfs_write+0x294/0x1100
[  128.789979][ T5234]  ? reacquire_held_locks+0x4c0/0x4c0
[  128.795371][ T5234]  ? kernel_write+0x6c0/0x6c0
[  128.800066][ T5234]  ? __fget_files+0x256/0x400
[  128.804766][ T5234]  ? __fget_light+0x173/0x200
[  128.809470][ T5234]  ksys_write+0x1f0/0x250
[  128.813817][ T5234]  ? __ia32_sys_read+0xb0/0xb0
[  128.818598][ T5234]  do_syscall_64+0xd3/0x250
[  128.823112][ T5234]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  128.829021][ T5234] RIP: 0033:0x7f321d319da9
[  128.833433][ T5234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  128.853055][ T5234] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:15 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 40)

[  128.861501][ T5234] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  128.869509][ T5234] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  128.877488][ T5234] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  128.885474][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  128.893457][ T5234] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  128.901454][ T5234]  </TASK>
[  128.907319][ T4792] usb 2-1: config 0 descriptor??
[  128.949694][ T5238] FAULT_INJECTION: forcing a failure.
[  128.949694][ T5238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.962771][ T5238] CPU: 0 PID: 5238 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  128.967727][   T45] usb 3-1: config 0 has no interfaces?
[  128.973104][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  128.978611][   T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c57, bcdDevice=eb.5b
[  128.988582][ T5238] Call Trace:
[  128.988593][ T5238]  <TASK>
[  128.988603][ T5238]  dump_stack_lvl+0x125/0x1b0
[  128.997658][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.000900][ T5238]  should_fail_ex+0x496/0x5b0
[  129.000932][ T5238]  _copy_from_user+0x30/0xf0
[  129.008379][   T45] usb 3-1: config 0 descriptor??
[  129.008502][ T5238]  input_event_from_user+0x136/0x3b0
[  129.036056][ T5238]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  129.041908][ T5238]  ? preempt_count_sub+0x160/0x160
16:49:15 executing program 4:
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000240)=""/66) (async)
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000025c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x1, 0x9e3}, {0x6}, [@mdlm_detail={0x4}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x45, 0x6, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x0, 0x1}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0xb5, 0x10, 0x1f}, 0x5, &(0x7f0000002800)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x421}}, {0x98, &(0x7f00000002c0)=ANY=[]}, {0x2, &(0x7f0000002a40)=@string={0x2}}, {0x0, 0x0}, {0x13, &(0x7f0000002b80)=@string={0x13, 0x3, "e8ef917017aca0229f0832178c65c959c0"}}]})
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x485}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x56}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7f, 0xde, 0x7f, 0x20, 0xd}, 0x9a, &(0x7f0000000080)={0x5, 0xf, 0x9a, 0x6, [@generic={0x2e, 0x10, 0x2, "3004f37094af5b2acc16db8752a0a49d8a29b176e464d60dbc8a4046f1979cc4e1facd2a17063fb3134c6b"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cd3649edf3603088ac3287281cae7fc6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "5a7e84d6ffa0dd85fa02a5c0ab5d2b73"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8, 0xf00f, 0x9, [0x3f38, 0xc030, 0xc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x2b, 0x5, 0xed4, 0xf0f, 0x6, [0xffa0ff, 0x0, 0xf, 0x30, 0xffc00f]}]}, 0x2, [{0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="5e03c398bd8379bfb1d85f3b4f05a0b8c87c5c050b30eb3fbe15cbb44d8480eef38e7f38ee0a6804f5892f822c5daa5891191d7160f8c19e705716262e79131f8c3c2a8effeb208cd97d79e095c7575b0aaaa243b3c384bc606653991af4bdea1987bb83d6e91e"]}, {0x20, &(0x7f00000001c0)=@string={0x20, 0x3, "a34ba01cc513be5f749058af446c0cb6d200d6dd260b9726a34ebad2bba9"}}]})
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffffffff, 0x2000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x6, 0x1b, 0x800, 0x100000, "8c356ad4f183bd50ba77470bacd3970e1ef70e6baf4aed3f2c563be7cbf167b1"})

[  129.047054][ T5238]  ? input_inject_event+0x193/0x370
[  129.052302][ T5238]  evdev_write+0x378/0x750
[  129.056768][ T5238]  ? evdev_read+0xdf0/0xdf0
[  129.061318][ T5238]  ? security_file_permission+0x8e/0xb0
[  129.066923][ T5238]  ? evdev_read+0xdf0/0xdf0
[  129.071474][ T5238]  vfs_write+0x294/0x1100
[  129.075867][ T5238]  ? reacquire_held_locks+0x4c0/0x4c0
[  129.081319][ T5238]  ? kernel_write+0x6c0/0x6c0
[  129.086060][ T5238]  ? __fget_files+0x256/0x400
[  129.090797][ T5238]  ? __fget_light+0x173/0x200
[  129.095521][ T5238]  ksys_write+0x1f0/0x250
[  129.099918][ T5238]  ? __ia32_sys_read+0xb0/0xb0
[  129.104730][ T5238]  do_syscall_64+0xd3/0x250
[  129.109275][ T5238]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  129.115224][ T5238] RIP: 0033:0x7f321d319da9
[  129.119666][ T5238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  129.139309][ T5238] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:15 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 41)

[  129.147749][ T5238] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  129.155730][ T5238] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  129.163733][ T5238] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  129.171721][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  129.179692][ T5238] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  129.187670][ T5238]  </TASK>
[  129.191000][    T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  129.233785][ T5243] FAULT_INJECTION: forcing a failure.
[  129.233785][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.247131][ T5243] CPU: 0 PID: 5243 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  129.257466][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  129.267525][ T5243] Call Trace:
[  129.270809][ T5243]  <TASK>
[  129.273746][ T5243]  dump_stack_lvl+0x125/0x1b0
[  129.278451][ T5243]  should_fail_ex+0x496/0x5b0
[  129.283145][ T5243]  _copy_from_user+0x30/0xf0
[  129.287751][ T5243]  input_event_from_user+0x136/0x3b0
[  129.293050][ T5243]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  129.298873][ T5243]  ? preempt_count_sub+0x160/0x160
[  129.303995][ T5243]  ? input_inject_event+0x193/0x370
[  129.309213][ T5243]  evdev_write+0x378/0x750
[  129.313655][ T5243]  ? evdev_read+0xdf0/0xdf0
[  129.318185][ T5243]  ? security_file_permission+0x8e/0xb0
[  129.323768][ T5243]  ? evdev_read+0xdf0/0xdf0
[  129.328285][ T5243]  vfs_write+0x294/0x1100
[  129.332639][ T5243]  ? reacquire_held_locks+0x4c0/0x4c0
[  129.338036][ T5243]  ? kernel_write+0x6c0/0x6c0
[  129.342739][ T5243]  ? __fget_files+0x256/0x400
[  129.347440][ T5243]  ? __fget_light+0x173/0x200
[  129.352152][ T5243]  ksys_write+0x1f0/0x250
[  129.356507][ T5243]  ? __ia32_sys_read+0xb0/0xb0
[  129.361346][ T5243]  do_syscall_64+0xd3/0x250
[  129.365906][ T5243]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  129.371849][ T5243] RIP: 0033:0x7f321d319da9
[  129.376275][ T5243] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  129.395897][ T5243] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.404333][ T5243] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  129.405467][   T22] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  129.412309][ T5243] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  129.412331][ T5243] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  129.412349][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  129.443836][ T5243] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  129.451830][ T5243]  </TASK>
[  129.457850][ T4792] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  129.473143][ T4792] usb 2-1: USB disconnect, device number 18
16:49:16 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 42)

[  129.483899][ T4792] usblp0: removed
[  129.528458][ T5245] FAULT_INJECTION: forcing a failure.
[  129.528458][ T5245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.541769][ T5245] CPU: 0 PID: 5245 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  129.552120][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  129.562174][ T5245] Call Trace:
[  129.565463][ T5245]  <TASK>
[  129.568395][ T5245]  dump_stack_lvl+0x125/0x1b0
[  129.573097][ T5245]  should_fail_ex+0x496/0x5b0
[  129.577796][ T5245]  _copy_from_user+0x30/0xf0
[  129.582393][ T5245]  input_event_from_user+0x136/0x3b0
[  129.587687][ T5245]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  129.593513][ T5245]  ? preempt_count_sub+0x160/0x160
[  129.598627][ T5245]  ? input_inject_event+0x193/0x370
[  129.603842][ T5245]  evdev_write+0x378/0x750
[  129.608290][ T5245]  ? evdev_read+0xdf0/0xdf0
[  129.612830][ T5245]  ? security_file_permission+0x8e/0xb0
[  129.618455][ T5245]  ? evdev_read+0xdf0/0xdf0
[  129.623029][ T5245]  vfs_write+0x294/0x1100
[  129.627406][ T5245]  ? reacquire_held_locks+0x4c0/0x4c0
[  129.632798][ T5245]  ? kernel_write+0x6c0/0x6c0
[  129.637492][ T5245]  ? __fget_files+0x256/0x400
[  129.642199][ T5245]  ? __fget_light+0x173/0x200
[  129.646907][ T5245]  ksys_write+0x1f0/0x250
[  129.651295][ T5245]  ? __ia32_sys_read+0xb0/0xb0
[  129.656115][ T5245]  do_syscall_64+0xd3/0x250
[  129.659647][ T5228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.660637][ T5245]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  129.660694][ T5245] RIP: 0033:0x7f321d319da9
[  129.679330][ T5245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  129.682565][ T5228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.698946][ T5245] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.713928][   T45] usb 3-1: USB disconnect, device number 18
[  129.715074][ T5245] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:16 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 43)

[  129.715097][ T5245] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  129.715116][ T5245] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  129.715135][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  129.752951][ T5245] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  129.760958][ T5245]  </TASK>
[  129.795392][   T22] usb 5-1: Using ep0 maxpacket: 16
[  129.809415][ T5249] FAULT_INJECTION: forcing a failure.
[  129.809415][ T5249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.822893][ T5249] CPU: 0 PID: 5249 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  129.833232][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  129.843295][ T5249] Call Trace:
[  129.846587][ T5249]  <TASK>
[  129.849517][ T5249]  dump_stack_lvl+0x125/0x1b0
[  129.854203][ T5249]  should_fail_ex+0x496/0x5b0
[  129.858885][ T5249]  _copy_from_user+0x30/0xf0
[  129.863510][ T5249]  input_event_from_user+0x136/0x3b0
[  129.868801][ T5249]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  129.874610][ T5249]  ? preempt_count_sub+0x160/0x160
[  129.879727][ T5249]  ? input_inject_event+0x193/0x370
[  129.884944][ T5249]  evdev_write+0x378/0x750
[  129.889392][ T5249]  ? evdev_read+0xdf0/0xdf0
[  129.893929][ T5249]  ? security_file_permission+0x8e/0xb0
[  129.899524][ T5249]  ? evdev_read+0xdf0/0xdf0
[  129.904067][ T5249]  vfs_write+0x294/0x1100
[  129.908426][ T5249]  ? reacquire_held_locks+0x4c0/0x4c0
[  129.913815][ T5249]  ? kernel_write+0x6c0/0x6c0
[  129.918502][ T5249]  ? __fget_files+0x256/0x400
[  129.923201][ T5249]  ? __fget_light+0x173/0x200
[  129.927909][ T5249]  ksys_write+0x1f0/0x250
[  129.932248][ T5249]  ? __ia32_sys_read+0xb0/0xb0
[  129.937053][ T5249]  do_syscall_64+0xd3/0x250
16:49:16 executing program 1:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  129.941595][ T5249]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  129.947537][ T5249] RIP: 0033:0x7f321d319da9
[  129.951982][ T5249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  129.971630][ T5249] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.980081][ T5249] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  129.988126][ T5249] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:16 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 44)

[  129.996132][ T5249] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  130.004137][ T5249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.012136][ T5249] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  130.020144][ T5249]  </TASK>
[  130.045587][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.055575][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  130.065748][   T22] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  130.067016][ T5253] FAULT_INJECTION: forcing a failure.
[  130.067016][ T5253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.088897][ T5253] CPU: 0 PID: 5253 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  130.099227][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  130.109282][ T5253] Call Trace:
[  130.112569][ T5253]  <TASK>
[  130.115499][ T5253]  dump_stack_lvl+0x125/0x1b0
[  130.120203][ T5253]  should_fail_ex+0x496/0x5b0
[  130.124904][ T5253]  _copy_from_user+0x30/0xf0
[  130.129501][ T5253]  input_event_from_user+0x136/0x3b0
[  130.134805][ T5253]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  130.141106][ T5253]  ? preempt_count_sub+0x160/0x160
[  130.146462][ T5253]  ? input_inject_event+0x193/0x370
[  130.151696][ T5253]  evdev_write+0x378/0x750
[  130.156143][ T5253]  ? evdev_read+0xdf0/0xdf0
[  130.160670][ T5253]  ? security_file_permission+0x8e/0xb0
[  130.166273][ T5253]  ? evdev_read+0xdf0/0xdf0
[  130.170827][ T5253]  vfs_write+0x294/0x1100
[  130.175183][ T5253]  ? reacquire_held_locks+0x4c0/0x4c0
[  130.180592][ T5253]  ? kernel_write+0x6c0/0x6c0
[  130.185283][ T5253]  ? __fget_files+0x256/0x400
[  130.189992][ T5253]  ? __fget_light+0x173/0x200
[  130.194714][ T5253]  ksys_write+0x1f0/0x250
[  130.199056][ T5253]  ? __ia32_sys_read+0xb0/0xb0
[  130.203831][ T5253]  do_syscall_64+0xd3/0x250
[  130.208342][ T5253]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  130.214264][ T5253] RIP: 0033:0x7f321d319da9
[  130.218676][ T5253] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  130.238286][ T5253] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:16 executing program 2:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12015008000000086b1d010140000102030109027e0003010000000904000000010100000a2401000005020102092403000000000000072405056960160904010000010200000904010101010200000824020100000105090501094000000006072501030101800904020000010200000904020101010200000724010000000009058209000000000007250194143cfa7500000000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "c8d95aba"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1000, 0x7, 0x79}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x75, 0x6}, @obex={0x5, 0x24, 0x15, 0x886}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @mbim_extended={0x0, 0x24, 0x1c, 0x4, 0x40, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x1, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x8, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x6, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x6e, 0xc0, 0x10}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0xff, 0x7f}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf000, 0x3, [0xc030, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x1, 0x84}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x0, 0x1}]}, 0x4, [{0x102, &(0x7f00000001c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44c}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e0385b3b944affdb3549aa22e861a3bbe42bea8ad01f9fed94d056a00c387c63baa179a5249ddb0b3833dcf19efef459c6e2b31eed23b5d0f4dbdfb20199c8a30b3b7dd8e5e1395c5c46b43f4058f56b4923a9693b15c531eaef407d74d0b4a9aa08263d5682491c4bf69cea83ea08a59d8bc15ee31c3653c24ce4658a3e6161847"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x281c}}]})

[  130.246719][ T5253] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  130.254690][ T5253] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  130.262673][ T5253] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  130.270674][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.278673][ T5253] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  130.286678][ T5253]  </TASK>
[  130.290050][    T8] usb 1-1: Using ep0 maxpacket: 8
16:49:16 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 45)

[  130.317980][   T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  130.352812][ T5257] FAULT_INJECTION: forcing a failure.
[  130.352812][ T5257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.366040][ T5257] CPU: 1 PID: 5257 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  130.376392][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  130.386445][ T5257] Call Trace:
[  130.389721][ T5257]  <TASK>
[  130.392658][ T5257]  dump_stack_lvl+0x125/0x1b0
[  130.397376][ T5257]  should_fail_ex+0x496/0x5b0
[  130.402058][ T5257]  _copy_from_user+0x30/0xf0
[  130.405514][    T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  130.406652][ T5257]  input_event_from_user+0x136/0x3b0
[  130.406690][ T5257]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  130.406725][ T5257]  ? preempt_count_sub+0x160/0x160
[  130.414947][    T8] usb 1-1: config 179 has no interface number 0
[  130.420209][ T5257]  ? input_inject_event+0x193/0x370
[  130.420243][ T5257]  evdev_write+0x378/0x750
[  130.420283][ T5257]  ? evdev_read+0xdf0/0xdf0
[  130.429791][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  130.431170][ T5257]  ? security_file_permission+0x8e/0xb0
[  130.431222][ T5257]  ? evdev_read+0xdf0/0xdf0
[  130.437481][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  130.442627][ T5257]  vfs_write+0x294/0x1100
[  130.447086][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  130.451508][ T5257]  ? reacquire_held_locks+0x4c0/0x4c0
[  130.462540][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  130.468028][ T5257]  ? kernel_write+0x6c0/0x6c0
[  130.468069][ T5257]  ? __fget_files+0x256/0x400
[  130.472551][    T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  130.483716][ T5257]  ? __fget_light+0x173/0x200
[  130.483754][ T5257]  ksys_write+0x1f0/0x250
[  130.488103][    T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  130.499126][ T5257]  ? __ia32_sys_read+0xb0/0xb0
[  130.499169][ T5257]  do_syscall_64+0xd3/0x250
[  130.504514][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.515849][ T5257]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  130.546144][ T5236] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  130.547346][ T5257] RIP: 0033:0x7f321d319da9
[  130.591232][ T5257] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  130.610875][ T5257] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.619295][ T5257] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  130.627266][ T5257] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  130.635246][ T5257] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  130.643245][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.651245][ T5257] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  130.659245][ T5257]  </TASK>
16:49:17 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 46)

[  130.665504][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  130.708253][ T5259] FAULT_INJECTION: forcing a failure.
[  130.708253][ T5259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.721547][ T5259] CPU: 0 PID: 5259 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  130.731875][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  130.741926][ T5259] Call Trace:
[  130.745203][ T5259]  <TASK>
[  130.748138][ T5259]  dump_stack_lvl+0x125/0x1b0
[  130.752850][ T5259]  should_fail_ex+0x496/0x5b0
[  130.757529][ T5259]  _copy_from_user+0x30/0xf0
[  130.762127][ T5259]  input_event_from_user+0x136/0x3b0
[  130.767417][ T5259]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  130.773227][ T5259]  ? preempt_count_sub+0x160/0x160
[  130.778350][ T5259]  ? input_inject_event+0x193/0x370
[  130.783569][ T5259]  evdev_write+0x378/0x750
[  130.788002][ T5259]  ? evdev_read+0xdf0/0xdf0
[  130.792518][ T5259]  ? security_file_permission+0x8e/0xb0
[  130.798081][ T5259]  ? evdev_read+0xdf0/0xdf0
[  130.802593][ T5259]  vfs_write+0x294/0x1100
[  130.806932][ T5259]  ? reacquire_held_locks+0x4c0/0x4c0
[  130.812320][ T5259]  ? kernel_write+0x6c0/0x6c0
[  130.817009][ T5259]  ? __fget_files+0x256/0x400
[  130.821709][ T5259]  ? __fget_light+0x173/0x200
[  130.826393][ T5259]  ksys_write+0x1f0/0x250
[  130.830739][ T5259]  ? __ia32_sys_read+0xb0/0xb0
[  130.835976][ T5259]  do_syscall_64+0xd3/0x250
[  130.840509][ T5259]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  130.846420][ T5259] RIP: 0033:0x7f321d319da9
[  130.850831][ T5259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  130.870448][ T5259] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.878883][ T5259] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  130.886856][ T5259] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  130.894844][ T5259] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:17 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 47)

[  130.902834][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.910806][ T5259] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  130.918780][ T5259]  </TASK>
[  130.955736][   T45] usb 2-1: Using ep0 maxpacket: 32
[  130.965100][ T5262] FAULT_INJECTION: forcing a failure.
[  130.965100][ T5262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.978365][ T5262] CPU: 0 PID: 5262 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  130.988723][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  130.998803][ T5262] Call Trace:
[  131.002101][ T5262]  <TASK>
[  131.005057][ T5262]  dump_stack_lvl+0x125/0x1b0
[  131.009796][ T5262]  should_fail_ex+0x496/0x5b0
[  131.014511][ T5262]  _copy_from_user+0x30/0xf0
[  131.019127][ T5262]  input_event_from_user+0x136/0x3b0
[  131.024437][ T5262]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  131.030279][ T5262]  ? preempt_count_sub+0x160/0x160
[  131.035413][ T5262]  ? input_inject_event+0x193/0x370
[  131.040650][ T5262]  evdev_write+0x378/0x750
[  131.045089][ T5262]  ? evdev_read+0xdf0/0xdf0
[  131.049614][ T5262]  ? security_file_permission+0x8e/0xb0
[  131.055189][ T5262]  ? evdev_read+0xdf0/0xdf0
[  131.059710][ T5262]  vfs_write+0x294/0x1100
[  131.064062][ T5262]  ? reacquire_held_locks+0x4c0/0x4c0
[  131.069451][ T5262]  ? kernel_write+0x6c0/0x6c0
[  131.074146][ T5262]  ? __fget_files+0x256/0x400
[  131.078845][ T5262]  ? __fget_light+0x173/0x200
[  131.083554][ T5262]  ksys_write+0x1f0/0x250
[  131.085624][   T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.087919][ T5262]  ? __ia32_sys_read+0xb0/0xb0
[  131.087969][ T5262]  do_syscall_64+0xd3/0x250
[  131.097039][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.101758][ T5262]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  131.106283][   T22] usb 5-1: Product: С
[  131.114204][ T5262] RIP: 0033:0x7f321d319da9
[  131.120104][   T22] usb 5-1: Manufacturer: 䀁
[  131.124128][ T5262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  131.152844][ T5262] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.161268][ T5262] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  131.169243][ T5262] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  131.177217][ T5262] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  131.185205][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.193215][ T5262] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  131.201224][ T5262]  </TASK>
[  131.205748][   T45] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  131.214146][   T45] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  131.216111][  T726] usb 1-1: USB disconnect, device number 22
[  131.222323][   T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  131.235483][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  131.242754][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
16:49:17 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 48)

[  131.254916][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  131.258027][    T9] usb 3-1: Using ep0 maxpacket: 8
[  131.264633][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.279492][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  131.289290][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  131.310719][ T5264] FAULT_INJECTION: forcing a failure.
[  131.310719][ T5264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.323831][ T5264] CPU: 0 PID: 5264 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  131.334156][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  131.344212][ T5264] Call Trace:
[  131.347490][ T5264]  <TASK>
[  131.350417][ T5264]  dump_stack_lvl+0x125/0x1b0
[  131.355106][ T5264]  should_fail_ex+0x496/0x5b0
[  131.359788][ T5264]  _copy_from_user+0x30/0xf0
[  131.364383][ T5264]  input_event_from_user+0x136/0x3b0
[  131.369672][ T5264]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  131.375489][ T5264]  ? preempt_count_sub+0x160/0x160
[  131.380621][ T5264]  ? input_inject_event+0x193/0x370
[  131.385825][ T5264]  evdev_write+0x378/0x750
[  131.390269][ T5264]  ? evdev_read+0xdf0/0xdf0
[  131.394803][ T5264]  ? security_file_permission+0x8e/0xb0
[  131.400400][ T5264]  ? evdev_read+0xdf0/0xdf0
[  131.404943][ T5264]  vfs_write+0x294/0x1100
[  131.409308][ T5264]  ? reacquire_held_locks+0x4c0/0x4c0
[  131.414710][ T5264]  ? kernel_write+0x6c0/0x6c0
[  131.419406][ T5264]  ? __fget_files+0x256/0x400
[  131.424113][ T5264]  ? __fget_light+0x173/0x200
[  131.428802][ T5264]  ksys_write+0x1f0/0x250
[  131.433142][ T5264]  ? __ia32_sys_read+0xb0/0xb0
[  131.437922][ T5264]  do_syscall_64+0xd3/0x250
[  131.442433][ T5264]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  131.448340][ T5264] RIP: 0033:0x7f321d319da9
[  131.452758][ T5264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  131.472370][ T5264] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.480793][ T5264] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  131.488791][ T5264] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  131.496782][ T5264] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  131.504761][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.512753][ T5264] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  131.520735][ T5264]  </TASK>
[  131.527113][   T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  131.536584][   T45] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  131.544695][   T45] usb 2-1: Product: syz
[  131.553545][   T45] usb 2-1: config 0 descriptor??
16:49:18 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 49)

[  131.565608][   T22] cdc_ncm 5-1:1.0: bind() failure
[  131.578975][   T22] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  131.585877][   T22] cdc_ncm 5-1:1.1: bind() failure
[  131.602977][   T22] usb 5-1: USB disconnect, device number 18
[  131.614117][ T5266] FAULT_INJECTION: forcing a failure.
[  131.614117][ T5266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.627328][ T5266] CPU: 0 PID: 5266 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  131.637687][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  131.647761][ T5266] Call Trace:
[  131.651041][ T5266]  <TASK>
[  131.653986][ T5266]  dump_stack_lvl+0x125/0x1b0
[  131.658680][ T5266]  should_fail_ex+0x496/0x5b0
[  131.663361][ T5266]  _copy_from_user+0x30/0xf0
[  131.667963][ T5266]  input_event_from_user+0x136/0x3b0
[  131.673261][ T5266]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  131.679072][ T5266]  ? preempt_count_sub+0x160/0x160
[  131.684185][ T5266]  ? input_inject_event+0x193/0x370
[  131.689391][ T5266]  evdev_write+0x378/0x750
[  131.693842][ T5266]  ? evdev_read+0xdf0/0xdf0
[  131.698390][ T5266]  ? security_file_permission+0x8e/0xb0
[  131.703990][ T5266]  ? evdev_read+0xdf0/0xdf0
[  131.708539][ T5266]  vfs_write+0x294/0x1100
[  131.712907][ T5266]  ? reacquire_held_locks+0x4c0/0x4c0
[  131.718309][ T5266]  ? kernel_write+0x6c0/0x6c0
[  131.723007][ T5266]  ? __fget_files+0x256/0x400
[  131.727705][ T5266]  ? __fget_light+0x173/0x200
[  131.732389][ T5266]  ksys_write+0x1f0/0x250
[  131.736730][ T5266]  ? __ia32_sys_read+0xb0/0xb0
[  131.741510][ T5266]  do_syscall_64+0xd3/0x250
[  131.746021][ T5266]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  131.751936][ T5266] RIP: 0033:0x7f321d319da9
[  131.756374][ T5266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  131.776004][ T5266] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.784418][ T5266] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  131.792399][ T5266] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  131.800386][ T5266] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  131.808371][ T5266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:18 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 50)

[  131.816369][ T5266] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  131.826079][ T5266]  </TASK>
[  131.829994][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  131.871652][ T5268] FAULT_INJECTION: forcing a failure.
[  131.871652][ T5268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.885043][ T5268] CPU: 0 PID: 5268 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  131.895384][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  131.905451][ T5268] Call Trace:
[  131.908742][ T5268]  <TASK>
[  131.911684][ T5268]  dump_stack_lvl+0x125/0x1b0
[  131.916382][ T5268]  should_fail_ex+0x496/0x5b0
[  131.921090][ T5268]  _copy_from_user+0x30/0xf0
[  131.925717][ T5268]  input_event_from_user+0x136/0x3b0
[  131.931038][ T5268]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  131.936881][ T5268]  ? preempt_count_sub+0x160/0x160
[  131.942041][ T5268]  ? input_inject_event+0x193/0x370
[  131.947282][ T5268]  evdev_write+0x378/0x750
[  131.951740][ T5268]  ? evdev_read+0xdf0/0xdf0
[  131.956289][ T5268]  ? security_file_permission+0x8e/0xb0
[  131.961899][ T5268]  ? evdev_read+0xdf0/0xdf0
[  131.966448][ T5268]  vfs_write+0x294/0x1100
16:49:18 executing program 0:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) (async)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x5d, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[  131.970849][ T5268]  ? reacquire_held_locks+0x4c0/0x4c0
[  131.976277][ T5268]  ? kernel_write+0x6c0/0x6c0
[  131.981001][ T5268]  ? __fget_files+0x256/0x400
[  131.985728][ T5268]  ? __fget_light+0x173/0x200
[  131.990454][ T5268]  ksys_write+0x1f0/0x250
[  131.994841][ T5268]  ? __ia32_sys_read+0xb0/0xb0
[  131.999669][ T5268]  do_syscall_64+0xd3/0x250
[  132.004217][ T5268]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  132.010151][ T5268] RIP: 0033:0x7f321d319da9
[  132.014594][ T5268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  132.034240][ T5268] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.038200][   T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  132.042675][ T5268] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  132.042699][ T5268] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:18 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 51)

[  132.042720][ T5268] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  132.042740][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.067218][   T45] usb 2-1: USB disconnect, device number 19
[  132.069327][ T5268] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  132.069356][ T5268]  </TASK>
[  132.125575][    T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  132.135741][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.137138][   T45] usblp0: removed
[  132.184770][ T5272] FAULT_INJECTION: forcing a failure.
[  132.184770][ T5272] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.199293][ T5272] CPU: 0 PID: 5272 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  132.209633][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  132.219693][ T5272] Call Trace:
[  132.222995][ T5272]  <TASK>
[  132.225937][ T5272]  dump_stack_lvl+0x125/0x1b0
16:49:18 executing program 4:
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000000))
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

[  132.230637][ T5272]  should_fail_ex+0x496/0x5b0
[  132.235344][ T5272]  _copy_from_user+0x30/0xf0
[  132.239955][ T5272]  input_event_from_user+0x136/0x3b0
[  132.245251][ T5272]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  132.251063][ T5272]  ? preempt_count_sub+0x160/0x160
[  132.256196][ T5272]  ? input_inject_event+0x193/0x370
[  132.261438][ T5272]  evdev_write+0x378/0x750
[  132.265900][ T5272]  ? evdev_read+0xdf0/0xdf0
[  132.270448][ T5272]  ? security_file_permission+0x8e/0xb0
[  132.276057][ T5272]  ? evdev_read+0xdf0/0xdf0
[  132.280603][ T5272]  vfs_write+0x294/0x1100
[  132.284976][ T5272]  ? reacquire_held_locks+0x4c0/0x4c0
[  132.290397][ T5272]  ? kernel_write+0x6c0/0x6c0
[  132.295118][ T5272]  ? __fget_files+0x256/0x400
[  132.299842][ T5272]  ? __fget_light+0x173/0x200
[  132.304568][ T5272]  ksys_write+0x1f0/0x250
[  132.308946][ T5272]  ? __ia32_sys_read+0xb0/0xb0
[  132.313759][ T5272]  do_syscall_64+0xd3/0x250
[  132.318309][ T5272]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  132.324255][ T5272] RIP: 0033:0x7f321d319da9
[  132.328696][ T5272] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  132.348339][ T5272] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.356833][ T5272] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  132.364817][ T5272] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  132.372787][ T5272] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:19 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 52)

[  132.380769][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.388756][ T5272] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  132.396732][ T5272]  </TASK>
[  132.439721][ T5276] FAULT_INJECTION: forcing a failure.
[  132.439721][ T5276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.453008][ T5276] CPU: 0 PID: 5276 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  132.463336][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  132.473390][ T5276] Call Trace:
[  132.476666][ T5276]  <TASK>
[  132.479594][ T5276]  dump_stack_lvl+0x125/0x1b0
[  132.484283][ T5276]  should_fail_ex+0x496/0x5b0
16:49:19 executing program 1:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  132.488985][ T5276]  _copy_from_user+0x30/0xf0
[  132.493588][ T5276]  input_event_from_user+0x136/0x3b0
[  132.498882][ T5276]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  132.504693][ T5276]  ? preempt_count_sub+0x160/0x160
[  132.509811][ T5276]  ? input_inject_event+0x193/0x370
[  132.515029][ T5276]  evdev_write+0x378/0x750
[  132.519490][ T5276]  ? evdev_read+0xdf0/0xdf0
[  132.524034][ T5276]  ? security_file_permission+0x8e/0xb0
[  132.529629][ T5276]  ? evdev_read+0xdf0/0xdf0
[  132.534174][ T5276]  vfs_write+0x294/0x1100
[  132.538549][ T5276]  ? reacquire_held_locks+0x4c0/0x4c0
[  132.543969][ T5276]  ? kernel_write+0x6c0/0x6c0
[  132.548693][ T5276]  ? __fget_files+0x256/0x400
[  132.553416][ T5276]  ? __fget_light+0x173/0x200
[  132.558147][ T5276]  ksys_write+0x1f0/0x250
[  132.562532][ T5276]  ? __ia32_sys_read+0xb0/0xb0
[  132.567346][ T5276]  do_syscall_64+0xd3/0x250
[  132.571899][ T5276]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  132.577846][ T5276] RIP: 0033:0x7f321d319da9
[  132.582292][ T5276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  132.601938][ T5276] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.606190][   T22] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  132.610368][ T5276] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  132.610391][ T5276] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:19 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 53)

[  132.610410][ T5276] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  132.610428][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.610446][ T5276] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  132.657818][ T5276]  </TASK>
[  132.675701][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.684791][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.692869][    T9] usb 3-1: Product: syz
[  132.697093][    T9] usb 3-1: Manufacturer: syz
[  132.701714][    T9] usb 3-1: SerialNumber: syz
[  132.711354][ T5280] FAULT_INJECTION: forcing a failure.
[  132.711354][ T5280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.724563][ T5280] CPU: 0 PID: 5280 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  132.734935][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  132.744994][ T5280] Call Trace:
[  132.748272][ T5280]  <TASK>
[  132.751198][ T5280]  dump_stack_lvl+0x125/0x1b0
[  132.755885][ T5280]  should_fail_ex+0x496/0x5b0
[  132.760565][ T5280]  _copy_from_user+0x30/0xf0
[  132.765162][ T5280]  input_event_from_user+0x136/0x3b0
[  132.770453][ T5280]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  132.776274][ T5280]  ? preempt_count_sub+0x160/0x160
[  132.781419][ T5280]  ? input_inject_event+0x193/0x370
[  132.786638][ T5280]  evdev_write+0x378/0x750
[  132.791063][ T5280]  ? evdev_read+0xdf0/0xdf0
[  132.795575][ T5280]  ? security_file_permission+0x8e/0xb0
[  132.801137][ T5280]  ? evdev_read+0xdf0/0xdf0
[  132.805651][ T5280]  vfs_write+0x294/0x1100
[  132.809990][ T5280]  ? reacquire_held_locks+0x4c0/0x4c0
[  132.815375][ T5280]  ? kernel_write+0x6c0/0x6c0
[  132.820062][ T5280]  ? __fget_files+0x256/0x400
[  132.824755][ T5280]  ? __fget_light+0x173/0x200
[  132.829451][ T5280]  ksys_write+0x1f0/0x250
[  132.833801][ T5280]  ? __ia32_sys_read+0xb0/0xb0
[  132.838604][ T5280]  do_syscall_64+0xd3/0x250
[  132.843114][ T5280]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  132.849023][ T5280] RIP: 0033:0x7f321d319da9
[  132.853434][ T5280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  132.873040][ T5280] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.875576][   T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  132.881447][ T5280] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  132.881471][ T5280] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  132.881491][ T5280] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  132.881511][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  132.920907][ T5280] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  132.928885][ T5280]  </TASK>
16:49:19 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 54)

[  132.949893][    T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  132.965414][   T22] usb 5-1: Using ep0 maxpacket: 16
[  132.996401][ T5282] FAULT_INJECTION: forcing a failure.
[  132.996401][ T5282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.009602][ T5282] CPU: 1 PID: 5282 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  133.019951][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  133.030023][ T5282] Call Trace:
[  133.033319][ T5282]  <TASK>
[  133.036265][ T5282]  dump_stack_lvl+0x125/0x1b0
[  133.040978][ T5282]  should_fail_ex+0x496/0x5b0
[  133.045687][ T5282]  _copy_from_user+0x30/0xf0
[  133.050316][ T5282]  input_event_from_user+0x136/0x3b0
[  133.055633][ T5282]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  133.061467][ T5282]  ? __cond_resched+0x17/0x20
[  133.066172][ T5282]  evdev_write+0x378/0x750
[  133.070624][ T5282]  ? evdev_read+0xdf0/0xdf0
[  133.075157][ T5282]  ? security_file_permission+0x8e/0xb0
[  133.080746][ T5282]  ? evdev_read+0xdf0/0xdf0
[  133.085279][ T5282]  vfs_write+0x294/0x1100
[  133.089650][ T5282]  ? reacquire_held_locks+0x4c0/0x4c0
[  133.095053][ T5282]  ? kernel_write+0x6c0/0x6c0
[  133.099762][ T5282]  ? __fget_files+0x256/0x400
[  133.104471][ T5282]  ? __fget_light+0x173/0x200
[  133.109181][ T5282]  ksys_write+0x1f0/0x250
[  133.113549][ T5282]  ? __ia32_sys_read+0xb0/0xb0
[  133.118355][ T5282]  do_syscall_64+0xd3/0x250
[  133.122896][ T5282]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  133.128830][ T5282] RIP: 0033:0x7f321d319da9
[  133.133269][ T5282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  133.152908][ T5282] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.161355][ T5282] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  133.169353][ T5282] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  133.177350][ T5282] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  133.185345][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:19 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 55)

[  133.193337][ T5282] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  133.201340][ T5282]  </TASK>
[  133.209631][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.218173][    T8] usb 1-1: Using ep0 maxpacket: 8
[  133.228002][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.284015][ T5284] FAULT_INJECTION: forcing a failure.
[  133.284015][ T5284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.297720][ T5284] CPU: 1 PID: 5284 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  133.305745][    T9] usb 3-1: 0:2 : does not exist
[  133.308061][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  133.308080][ T5284] Call Trace:
[  133.308091][ T5284]  <TASK>
[  133.308101][ T5284]  dump_stack_lvl+0x125/0x1b0
[  133.331502][    T9] usb 3-1: USB disconnect, device number 19
[  133.333894][ T5284]  should_fail_ex+0x496/0x5b0
[  133.333927][ T5284]  _copy_from_user+0x30/0xf0
[  133.340100][    T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  133.344477][ T5284]  input_event_from_user+0x136/0x3b0
[  133.344513][ T5284]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  133.349174][    T8] usb 1-1: config 179 has no interface number 0
[  133.357296][ T5284]  ? preempt_count_sub+0x160/0x160
[  133.357328][ T5284]  ? input_inject_event+0x193/0x370
[  133.385083][ T5284]  evdev_write+0x378/0x750
[  133.389545][ T5284]  ? evdev_read+0xdf0/0xdf0
[  133.394091][ T5284]  ? security_file_permission+0x8e/0xb0
[  133.399684][ T5284]  ? evdev_read+0xdf0/0xdf0
[  133.404233][ T5284]  vfs_write+0x294/0x1100
[  133.408618][ T5284]  ? reacquire_held_locks+0x4c0/0x4c0
[  133.414036][ T5284]  ? kernel_write+0x6c0/0x6c0
[  133.418280][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  133.418738][ T5284]  ? __fget_files+0x256/0x400
[  133.429809][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  133.434390][ T5284]  ? __fget_light+0x173/0x200
[  133.445611][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  133.450212][ T5284]  ksys_write+0x1f0/0x250
[  133.461324][    T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  133.465600][ T5284]  ? __ia32_sys_read+0xb0/0xb0
[  133.477004][    T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  133.481718][ T5284]  do_syscall_64+0xd3/0x250
[  133.494931][    T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  133.499358][ T5284]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  133.508417][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.514243][ T5284] RIP: 0033:0x7f321d319da9
[  133.526803][ T5284] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  133.546449][ T5284] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.554894][ T5284] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  133.562903][ T5284] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  133.570903][ T5284] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  133.578903][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  133.586903][ T5284] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  133.594906][ T5284]  </TASK>
[  133.598776][   T22] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping
[  133.607687][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.617819][   T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
16:49:20 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 56)

[  133.628070][   T22] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  133.675595][   T45] usb 2-1: Using ep0 maxpacket: 32
[  133.705699][ T5270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.738958][ T5286] FAULT_INJECTION: forcing a failure.
[  133.738958][ T5286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.752214][ T5286] CPU: 1 PID: 5286 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  133.762589][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  133.772645][ T5286] Call Trace:
[  133.775925][ T5286]  <TASK>
[  133.778861][ T5286]  dump_stack_lvl+0x125/0x1b0
[  133.783572][ T5286]  should_fail_ex+0x496/0x5b0
[  133.788260][ T5286]  _copy_from_user+0x30/0xf0
[  133.792884][ T5286]  input_event_from_user+0x136/0x3b0
[  133.798192][ T5286]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  133.804018][ T5286]  ? preempt_count_sub+0x160/0x160
[  133.809140][ T5286]  ? input_inject_event+0x193/0x370
[  133.814368][ T5286]  evdev_write+0x378/0x750
[  133.818800][ T5286]  ? evdev_read+0xdf0/0xdf0
[  133.823315][ T5286]  ? security_file_permission+0x8e/0xb0
[  133.828878][ T5286]  ? evdev_read+0xdf0/0xdf0
[  133.833393][ T5286]  vfs_write+0x294/0x1100
[  133.837736][ T5286]  ? reacquire_held_locks+0x4c0/0x4c0
[  133.843123][ T5286]  ? kernel_write+0x6c0/0x6c0
[  133.847813][ T5286]  ? __fget_files+0x256/0x400
[  133.852501][ T5286]  ? __fget_light+0x173/0x200
[  133.857237][ T5286]  ksys_write+0x1f0/0x250
[  133.861586][ T5286]  ? __ia32_sys_read+0xb0/0xb0
[  133.866362][ T5286]  do_syscall_64+0xd3/0x250
[  133.870871][ T5286]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  133.876792][ T5286] RIP: 0033:0x7f321d319da9
[  133.881207][ T5286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
16:49:20 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 57)

[  133.900820][ T5286] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.909240][ T5286] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  133.917254][ T5286] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  133.925235][ T5286] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  133.933209][ T5286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  133.941181][ T5286] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  133.949162][ T5286]  </TASK>
[  133.988422][ T5288] FAULT_INJECTION: forcing a failure.
[  133.988422][ T5288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.001543][ T5288] CPU: 0 PID: 5288 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  134.005854][   T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.011876][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  134.011895][ T5288] Call Trace:
[  134.011906][ T5288]  <TASK>
[  134.011916][ T5288]  dump_stack_lvl+0x125/0x1b0
[  134.020976][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.030989][ T5288]  should_fail_ex+0x496/0x5b0
[  134.031021][ T5288]  _copy_from_user+0x30/0xf0
[  134.034292][   T22] usb 5-1: Product: syz
[  134.037210][ T5288]  input_event_from_user+0x136/0x3b0
[  134.041910][   T22] usb 5-1: Manufacturer: syz
[  134.049842][ T5288]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  134.054518][   T22] usb 5-1: SerialNumber: syz
[  134.059080][ T5288]  ? preempt_count_sub+0x160/0x160
[  134.059111][ T5288]  ? input_inject_event+0x193/0x370
[  134.059142][ T5288]  evdev_write+0x378/0x750
[  134.063382][   T45] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  134.068548][ T5288]  ? evdev_read+0xdf0/0xdf0
[  134.073139][   T45] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  134.078920][ T5288]  ? security_file_permission+0x8e/0xb0
[  134.083511][   T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  134.088598][ T5288]  ? evdev_read+0xdf0/0xdf0
[  134.094231][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.098189][ T5288]  vfs_write+0x294/0x1100
[  134.098231][ T5288]  ? reacquire_held_locks+0x4c0/0x4c0
[  134.098269][ T5288]  ? kernel_write+0x6c0/0x6c0
[  134.106634][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  134.111055][ T5288]  ? __fget_files+0x256/0x400
[  134.119122][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  134.124621][ T5288]  ? __fget_light+0x173/0x200
[  134.133467][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  134.137926][ T5288]  ksys_write+0x1f0/0x250
[  134.147577][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  134.151862][ T5288]  ? __ia32_sys_read+0xb0/0xb0
[  134.222562][ T5288]  do_syscall_64+0xd3/0x250
[  134.227076][ T5288]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  134.232983][ T5288] RIP: 0033:0x7f321d319da9
[  134.237397][ T5288] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  134.257019][ T5288] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.265469][ T5288] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  134.273445][ T5288] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  134.281418][ T5288] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  134.289388][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.297360][ T5288] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  134.305346][ T5288]  </TASK>
[  134.311714][    T9] usb 1-1: USB disconnect, device number 23
[  134.325453][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
16:49:20 executing program 2:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12015008000000086b1d010140000102030109027e0003010000000904000000010100000a2401000005020102092403000000000000072405056960160904010000010200000904010101010200000824020100000105090501094000000006072501030101800904020000010200000904020101010200000724010000000009058209000000000007250194143cfa7500000000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "c8d95aba"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1000, 0x7, 0x79}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x75, 0x6}, @obex={0x5, 0x24, 0x15, 0x886}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @mbim_extended={0x0, 0x24, 0x1c, 0x4, 0x40, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x1, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x8, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x6, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x6e, 0xc0, 0x10}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0xff, 0x7f}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf000, 0x3, [0xc030, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x1, 0x84}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x0, 0x1}]}, 0x4, [{0x102, &(0x7f00000001c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44c}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e0385b3b944affdb3549aa22e861a3bbe42bea8ad01f9fed94d056a00c387c63baa179a5249ddb0b3833dcf19efef459c6e2b31eed23b5d0f4dbdfb20199c8a30b3b7dd8e5e1395c5c46b43f4058f56b4923a9693b15c531eaef407d74d0b4a9aa08263d5682491c4bf69cea83ea08a59d8bc15ee31c3653c24ce4658a3e6161847"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x281c}}]})

16:49:20 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 58)

[  134.335811][   T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  134.344929][   T45] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  134.353074][   T45] usb 2-1: Product: syz
[  134.396575][   T45] usb 2-1: config 0 descriptor??
[  134.413919][ T5293] FAULT_INJECTION: forcing a failure.
[  134.413919][ T5293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.427298][ T5293] CPU: 1 PID: 5293 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  134.437629][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  134.447684][ T5293] Call Trace:
[  134.450961][ T5293]  <TASK>
[  134.453889][ T5293]  dump_stack_lvl+0x125/0x1b0
[  134.458593][ T5293]  should_fail_ex+0x496/0x5b0
[  134.463293][ T5293]  _copy_from_user+0x30/0xf0
[  134.467891][ T5293]  input_event_from_user+0x136/0x3b0
[  134.473185][ T5293]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  134.479001][ T5293]  ? preempt_count_sub+0x160/0x160
[  134.484113][ T5293]  ? input_inject_event+0x193/0x370
[  134.489324][ T5293]  evdev_write+0x378/0x750
[  134.493783][ T5293]  ? evdev_read+0xdf0/0xdf0
[  134.498323][ T5293]  ? security_file_permission+0x8e/0xb0
[  134.503891][ T5293]  ? evdev_read+0xdf0/0xdf0
[  134.508401][ T5293]  vfs_write+0x294/0x1100
[  134.512750][ T5293]  ? reacquire_held_locks+0x4c0/0x4c0
[  134.518133][ T5293]  ? kernel_write+0x6c0/0x6c0
[  134.522843][ T5293]  ? __fget_files+0x256/0x400
[  134.527540][ T5293]  ? __fget_light+0x173/0x200
[  134.532228][ T5293]  ksys_write+0x1f0/0x250
[  134.536700][ T5293]  ? __ia32_sys_read+0xb0/0xb0
[  134.541487][ T5293]  do_syscall_64+0xd3/0x250
[  134.546006][ T5293]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  134.551924][ T5293] RIP: 0033:0x7f321d319da9
[  134.556339][ T5293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  134.575962][ T5293] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.584389][ T5293] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:21 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 59)

[  134.592371][ T5293] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  134.600348][ T5293] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  134.608322][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.616306][ T5293] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  134.624300][ T5293]  </TASK>
[  134.671416][ T5295] FAULT_INJECTION: forcing a failure.
[  134.671416][ T5295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.675489][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  134.684827][ T5295] CPU: 1 PID: 5295 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  134.702356][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  134.712408][ T5295] Call Trace:
[  134.715687][ T5295]  <TASK>
[  134.718617][ T5295]  dump_stack_lvl+0x125/0x1b0
[  134.723304][ T5295]  should_fail_ex+0x496/0x5b0
[  134.727987][ T5295]  _copy_from_user+0x30/0xf0
[  134.732586][ T5295]  input_event_from_user+0x136/0x3b0
[  134.737914][ T5295]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  134.743736][ T5295]  ? preempt_count_sub+0x160/0x160
[  134.748920][ T5295]  ? input_inject_event+0x193/0x370
[  134.754135][ T5295]  evdev_write+0x378/0x750
[  134.758562][ T5295]  ? evdev_read+0xdf0/0xdf0
[  134.763075][ T5295]  ? security_file_permission+0x8e/0xb0
[  134.768637][ T5295]  ? evdev_read+0xdf0/0xdf0
[  134.773150][ T5295]  vfs_write+0x294/0x1100
[  134.777489][ T5295]  ? reacquire_held_locks+0x4c0/0x4c0
[  134.782883][ T5295]  ? kernel_write+0x6c0/0x6c0
[  134.787568][ T5295]  ? __fget_files+0x256/0x400
[  134.792252][ T5295]  ? __fget_light+0x173/0x200
[  134.796951][ T5295]  ksys_write+0x1f0/0x250
[  134.801325][ T5295]  ? __ia32_sys_read+0xb0/0xb0
[  134.806138][ T5295]  do_syscall_64+0xd3/0x250
[  134.810681][ T5295]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  134.816608][ T5295] RIP: 0033:0x7f321d319da9
[  134.821040][ T5295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  134.840648][ T5295] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.849064][ T5295] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  134.857041][ T5295] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:21 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 60)

[  134.865022][ T5295] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  134.873008][ T5295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  134.881002][ T5295] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  134.888993][ T5295]  </TASK>
[  134.925961][    T8] usb 3-1: Using ep0 maxpacket: 8
[  134.935764][   T22] usb 5-1: 0:2 : does not exist
[  134.942370][ T5297] FAULT_INJECTION: forcing a failure.
[  134.942370][ T5297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.949373][   T22] usb 5-1: USB disconnect, device number 19
[  134.955846][ T5297] CPU: 0 PID: 5297 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  134.971658][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  134.981743][ T5297] Call Trace:
[  134.985046][ T5297]  <TASK>
[  134.988006][ T5297]  dump_stack_lvl+0x125/0x1b0
[  134.992746][ T5297]  should_fail_ex+0x496/0x5b0
[  134.997471][ T5297]  _copy_from_user+0x30/0xf0
[  134.998185][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  135.002084][ T5297]  input_event_from_user+0x136/0x3b0
[  135.002121][ T5297]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  135.028926][ T5297]  ? preempt_count_sub+0x160/0x160
[  135.034087][ T5297]  ? input_inject_event+0x193/0x370
[  135.039332][ T5297]  evdev_write+0x378/0x750
[  135.043801][ T5297]  ? evdev_read+0xdf0/0xdf0
[  135.048353][ T5297]  ? security_file_permission+0x8e/0xb0
[  135.053958][ T5297]  ? evdev_read+0xdf0/0xdf0
[  135.058505][ T5297]  vfs_write+0x294/0x1100
[  135.062878][ T5297]  ? reacquire_held_locks+0x4c0/0x4c0
[  135.068295][ T5297]  ? kernel_write+0x6c0/0x6c0
[  135.073016][ T5297]  ? __fget_files+0x256/0x400
[  135.077739][ T5297]  ? __fget_light+0x173/0x200
[  135.082448][ T5297]  ksys_write+0x1f0/0x250
[  135.086789][ T5297]  ? __ia32_sys_read+0xb0/0xb0
[  135.091582][ T5297]  do_syscall_64+0xd3/0x250
[  135.096125][ T5297]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  135.102064][ T5297] RIP: 0033:0x7f321d319da9
[  135.106485][ T5297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  135.126095][ T5297] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.134510][ T5297] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  135.142486][ T5297] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  135.150457][ T5297] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  135.158428][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.166402][ T5297] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
16:49:21 executing program 0:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x10, 0x16, {0x16, 0x1, "db27d5b8ea23e287d26def5ffad8800d8a84eb54"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x2, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x1, 0x3, "e797476d", "5a596a95"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0xf6, 0x3f, 0x7f, 0x5, 0x3}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x8, 0x6b, "7ecbfb7d56f61e3d1a4f6c5056797a27f92674780cc7a51d48c9cbd69f36995140b054796bfd515049fb11e5ad0167c23ae6f57e6588a4b3eb99c3b5acc8c6682f97928144d39320c5eced120bda5076033ed2d6e26dac30e2a26d34ffd31bd64840b6916eadb4f0019f2e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000400)={0x40, 0xb, 0x2, "43d2"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "ba1e"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x93}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x3, "0675bf"}, 0x0, 0x0})

[  135.174382][ T5297]  </TASK>
16:49:21 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 61)

[  135.213621][   T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  135.239910][   T45] usb 2-1: USB disconnect, device number 20
[  135.250362][   T45] usblp0: removed
[  135.288908][ T5301] FAULT_INJECTION: forcing a failure.
[  135.288908][ T5301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.296232][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.302228][ T5301] CPU: 1 PID: 5301 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  135.319912][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  135.330069][ T5301] Call Trace:
[  135.333362][ T5301]  <TASK>
[  135.336309][ T5301]  dump_stack_lvl+0x125/0x1b0
[  135.341024][ T5301]  should_fail_ex+0x496/0x5b0
[  135.345726][ T5301]  _copy_from_user+0x30/0xf0
[  135.350362][ T5301]  input_event_from_user+0x136/0x3b0
[  135.355668][ T5301]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  135.361513][ T5301]  ? preempt_count_sub+0x160/0x160
[  135.366635][ T5301]  ? input_inject_event+0x193/0x370
[  135.371849][ T5301]  evdev_write+0x378/0x750
[  135.376295][ T5301]  ? evdev_read+0xdf0/0xdf0
[  135.380830][ T5301]  ? security_file_permission+0x8e/0xb0
[  135.385518][    T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  135.386391][ T5301]  ? evdev_read+0xdf0/0xdf0
[  135.396560][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.400979][ T5301]  vfs_write+0x294/0x1100
[  135.414227][ T5301]  ? reacquire_held_locks+0x4c0/0x4c0
[  135.419661][ T5301]  ? kernel_write+0x6c0/0x6c0
[  135.424400][ T5301]  ? __fget_files+0x256/0x400
[  135.429122][ T5301]  ? __fget_light+0x173/0x200
[  135.433825][ T5301]  ksys_write+0x1f0/0x250
[  135.438192][ T5301]  ? __ia32_sys_read+0xb0/0xb0
[  135.442983][ T5301]  do_syscall_64+0xd3/0x250
[  135.447512][ T5301]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  135.453443][ T5301] RIP: 0033:0x7f321d319da9
[  135.457871][ T5301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  135.477498][ T5301] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:22 executing program 4:
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000000)) (async, rerun: 32)
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (rerun: 32)

16:49:22 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 62)

[  135.485931][ T5301] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  135.493914][ T5301] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  135.501896][ T5301] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  135.509875][ T5301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.517864][ T5301] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  135.525854][ T5301]  </TASK>
[  135.575806][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.584941][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.593451][    T8] usb 3-1: Product: syz
[  135.597693][    T8] usb 3-1: Manufacturer: syz
[  135.602316][    T8] usb 3-1: SerialNumber: syz
[  135.619189][ T5306] FAULT_INJECTION: forcing a failure.
[  135.619189][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.632533][ T5306] CPU: 1 PID: 5306 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  135.642863][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  135.652919][ T5306] Call Trace:
[  135.656197][ T5306]  <TASK>
[  135.659137][ T5306]  dump_stack_lvl+0x125/0x1b0
[  135.663849][ T5306]  should_fail_ex+0x496/0x5b0
[  135.668546][ T5306]  _copy_from_user+0x30/0xf0
[  135.673184][ T5306]  input_event_from_user+0x136/0x3b0
[  135.678499][ T5306]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  135.684317][ T5306]  ? preempt_count_sub+0x160/0x160
[  135.689429][ T5306]  ? input_inject_event+0x193/0x370
[  135.694630][ T5306]  evdev_write+0x378/0x750
[  135.699060][ T5306]  ? evdev_read+0xdf0/0xdf0
[  135.703571][ T5306]  ? security_file_permission+0x8e/0xb0
[  135.709170][ T5306]  ? evdev_read+0xdf0/0xdf0
[  135.713713][ T5306]  vfs_write+0x294/0x1100
[  135.718087][ T5306]  ? reacquire_held_locks+0x4c0/0x4c0
16:49:22 executing program 1:
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  135.723509][ T5306]  ? kernel_write+0x6c0/0x6c0
[  135.728234][ T5306]  ? __fget_files+0x256/0x400
[  135.732957][ T5306]  ? __fget_light+0x173/0x200
[  135.737701][ T5306]  ksys_write+0x1f0/0x250
[  135.742084][ T5306]  ? __ia32_sys_read+0xb0/0xb0
[  135.746910][ T5306]  do_syscall_64+0xd3/0x250
[  135.751467][ T5306]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  135.757409][ T5306] RIP: 0033:0x7f321d319da9
[  135.761859][ T5306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  135.781502][ T5306] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.789940][ T5306] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  135.797912][ T5306] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  135.805900][ T5306] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  135.813888][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:22 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 63)

[  135.821886][ T5306] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  135.829865][ T5306]  </TASK>
[  135.836583][   T22] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  135.866971][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.875939][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.893661][ T5310] FAULT_INJECTION: forcing a failure.
[  135.893661][ T5310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.907036][ T5310] CPU: 0 PID: 5310 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  135.917369][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  135.927423][ T5310] Call Trace:
[  135.930706][ T5310]  <TASK>
[  135.933642][ T5310]  dump_stack_lvl+0x125/0x1b0
[  135.938336][ T5310]  should_fail_ex+0x496/0x5b0
[  135.943030][ T5310]  _copy_from_user+0x30/0xf0
[  135.947630][ T5310]  input_event_from_user+0x136/0x3b0
[  135.952945][ T5310]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  135.958760][ T5310]  ? preempt_count_sub+0x160/0x160
[  135.963895][ T5310]  ? input_inject_event+0x193/0x370
[  135.969143][ T5310]  evdev_write+0x378/0x750
[  135.973598][ T5310]  ? evdev_read+0xdf0/0xdf0
[  135.978116][ T5310]  ? security_file_permission+0x8e/0xb0
[  135.983693][ T5310]  ? evdev_read+0xdf0/0xdf0
[  135.988210][ T5310]  vfs_write+0x294/0x1100
[  135.992569][ T5310]  ? reacquire_held_locks+0x4c0/0x4c0
[  135.997952][ T5310]  ? kernel_write+0x6c0/0x6c0
[  136.002642][ T5310]  ? __fget_files+0x256/0x400
[  136.007329][ T5310]  ? __fget_light+0x173/0x200
[  136.012045][ T5310]  ksys_write+0x1f0/0x250
[  136.016403][ T5310]  ? __ia32_sys_read+0xb0/0xb0
[  136.021189][ T5310]  do_syscall_64+0xd3/0x250
[  136.025699][ T5310]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  136.031610][ T5310] RIP: 0033:0x7f321d319da9
[  136.036023][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  136.055649][ T5310] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.064066][ T5310] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:22 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 64)

[  136.065633][ T4792] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  136.072025][ T5310] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  136.087557][ T5310] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  136.095545][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.103515][ T5310] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  136.111494][ T5310]  </TASK>
[  136.145592][   T22] usb 1-1: Using ep0 maxpacket: 16
[  136.151601][ T5312] FAULT_INJECTION: forcing a failure.
[  136.151601][ T5312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.164730][ T5312] CPU: 0 PID: 5312 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  136.175087][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  136.185172][ T5312] Call Trace:
[  136.188461][ T5312]  <TASK>
[  136.191401][ T5312]  dump_stack_lvl+0x125/0x1b0
[  136.196090][ T5312]  should_fail_ex+0x496/0x5b0
[  136.200777][ T5312]  _copy_from_user+0x30/0xf0
[  136.205387][ T5312]  input_event_from_user+0x136/0x3b0
[  136.210709][ T5312]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  136.216567][ T5312]  ? preempt_count_sub+0x160/0x160
[  136.221714][ T5312]  ? input_inject_event+0x193/0x370
[  136.226915][ T5312]  evdev_write+0x378/0x750
[  136.231341][ T5312]  ? evdev_read+0xdf0/0xdf0
[  136.235853][ T5312]  ? security_file_permission+0x8e/0xb0
[  136.241416][ T5312]  ? evdev_read+0xdf0/0xdf0
[  136.245929][ T5312]  vfs_write+0x294/0x1100
[  136.250276][ T5312]  ? reacquire_held_locks+0x4c0/0x4c0
[  136.255666][ T5312]  ? kernel_write+0x6c0/0x6c0
[  136.260370][ T5312]  ? __fget_files+0x256/0x400
[  136.265060][ T5312]  ? __fget_light+0x173/0x200
[  136.269752][ T5312]  ksys_write+0x1f0/0x250
[  136.274099][ T5312]  ? __ia32_sys_read+0xb0/0xb0
[  136.278897][ T5312]  do_syscall_64+0xd3/0x250
[  136.283405][ T5312]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  136.289314][ T5312] RIP: 0033:0x7f321d319da9
[  136.293730][ T5312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  136.313350][ T5312] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.321775][ T5312] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  136.329748][ T5312] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  136.337718][ T5312] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:23 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 65)

[  136.345703][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.353689][ T5312] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  136.361663][ T5312]  </TASK>
[  136.365544][    T8] usb 3-1: 0:2 : does not exist
[  136.377172][    T8] usb 3-1: USB disconnect, device number 20
[  136.406132][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  136.426629][ T4792] usb 5-1: Using ep0 maxpacket: 16
[  136.428447][ T5314] FAULT_INJECTION: forcing a failure.
[  136.428447][ T5314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.434862][   T22] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  136.445101][ T5314] CPU: 0 PID: 5314 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  136.445136][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  136.445153][ T5314] Call Trace:
[  136.445162][ T5314]  <TASK>
[  136.445173][ T5314]  dump_stack_lvl+0x125/0x1b0
[  136.453800][   T22] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  136.463782][ T5314]  should_fail_ex+0x496/0x5b0
[  136.463815][ T5314]  _copy_from_user+0x30/0xf0
16:49:23 executing program 2:
syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12015008000000086b1d010140000102030109027e0003010000000904000000010100000a2401000005020102092403000000000000072405056960160904010000010200000904010101010200000824020100000105090501094000000006072501030101800904020000010200000904020101010200000724010000000009058209000000000007250194143cfa7500000000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ecm(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "c8d95aba"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1000, 0x7, 0x79}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x75, 0x6}, @obex={0x5, 0x24, 0x15, 0x886}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @mbim_extended={0x0, 0x24, 0x1c, 0x4, 0x40, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x1, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x8, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x6, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x6e, 0xc0, 0x10}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0xff, 0x7f}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf000, 0x3, [0xc030, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x1, 0x84}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x0, 0x1}]}, 0x4, [{0x102, &(0x7f00000001c0)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44c}}, {0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="7e0385b3b944affdb3549aa22e861a3bbe42bea8ad01f9fed94d056a00c387c63baa179a5249ddb0b3833dcf19efef459c6e2b31eed23b5d0f4dbdfb20199c8a30b3b7dd8e5e1395c5c46b43f4058f56b4923a9693b15c531eaef407d74d0b4a9aa08263d5682491c4bf69cea83ea08a59d8bc15ee31c3653c24ce4658a3e6161847"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x281c}}]})

[  136.463850][ T5314]  input_event_from_user+0x136/0x3b0
[  136.463883][ T5314]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  136.463915][ T5314]  ? preempt_count_sub+0x160/0x160
[  136.463942][ T5314]  ? input_inject_event+0x193/0x370
[  136.463972][ T5314]  evdev_write+0x378/0x750
[  136.464010][ T5314]  ? evdev_read+0xdf0/0xdf0
[  136.464045][ T5314]  ? security_file_permission+0x8e/0xb0
[  136.464091][ T5314]  ? evdev_read+0xdf0/0xdf0
[  136.464125][ T5314]  vfs_write+0x294/0x1100
[  136.464161][ T5314]  ? reacquire_held_locks+0x4c0/0x4c0
[  136.464196][ T5314]  ? kernel_write+0x6c0/0x6c0
[  136.464233][ T5314]  ? __fget_files+0x256/0x400
[  136.474622][   T22] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  136.477561][ T5314]  ? __fget_light+0x173/0x200
[  136.477607][ T5314]  ksys_write+0x1f0/0x250
[  136.477663][ T5314]  ? __ia32_sys_read+0xb0/0xb0
[  136.477705][ T5314]  do_syscall_64+0xd3/0x250
[  136.477752][ T5314]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  136.477796][ T5314] RIP: 0033:0x7f321d319da9
16:49:23 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 66)

[  136.477817][ T5314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  136.477847][ T5314] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.477875][ T5314] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  136.477896][ T5314] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  136.480819][   T22] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  136.485467][ T5314] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  136.485486][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.485506][ T5314] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  136.485530][ T5314]  </TASK>
[  136.595203][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.598075][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  136.598111][   T22] usb 1-1: config 0 has no interface number 0
[  136.598947][   T22] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  136.621500][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.622328][   T22] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  136.681780][ T5319] FAULT_INJECTION: forcing a failure.
[  136.681780][ T5319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.682107][   T22] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  136.690522][ T5319] CPU: 0 PID: 5319 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  136.711794][   T22] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  136.716342][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  136.716361][ T5319] Call Trace:
[  136.716372][ T5319]  <TASK>
[  136.716383][ T5319]  dump_stack_lvl+0x125/0x1b0
[  136.724073][   T22] usb 1-1: config 0 interface 125 has no altsetting 0
[  136.733850][ T5319]  should_fail_ex+0x496/0x5b0
[  136.733883][ T5319]  _copy_from_user+0x30/0xf0
[  136.746887][   T22] usb 1-1: config 0 interface 125 has no altsetting 2
[  136.756638][ T5319]  input_event_from_user+0x136/0x3b0
[  136.756674][ T5319]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  136.756706][ T5319]  ? preempt_count_sub+0x160/0x160
[  136.756734][ T5319]  ? input_inject_event+0x193/0x370
[  136.756765][ T5319]  evdev_write+0x378/0x750
[  136.756803][ T5319]  ? evdev_read+0xdf0/0xdf0
16:49:23 executing program 1:
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  136.756840][ T5319]  ? security_file_permission+0x8e/0xb0
[  136.805564][ T4792] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping
[  136.807855][ T5319]  ? evdev_read+0xdf0/0xdf0
[  136.807896][ T5319]  vfs_write+0x294/0x1100
[  136.812559][ T4792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.817125][ T5319]  ? reacquire_held_locks+0x4c0/0x4c0
[  136.823887][ T4792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.829146][ T5319]  ? kernel_write+0x6c0/0x6c0
[  136.842370][ T4792] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  136.845241][ T5319]  ? __fget_files+0x256/0x400
[  136.845286][ T5319]  ? __fget_light+0x173/0x200
[  136.845324][ T5319]  ksys_write+0x1f0/0x250
[  136.929454][ T5319]  ? __ia32_sys_read+0xb0/0xb0
[  136.934249][ T5319]  do_syscall_64+0xd3/0x250
[  136.938779][ T5319]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  136.944731][ T5319] RIP: 0033:0x7f321d319da9
[  136.949181][ T5319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  136.968828][ T5319] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.977299][ T5319] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  136.985303][ T5319] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  136.993300][ T5319] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:23 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 67)

[  137.001289][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.009298][ T5319] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  137.017319][ T5319]  </TASK>
[  137.058012][ T5323] FAULT_INJECTION: forcing a failure.
[  137.058012][ T5323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.071202][ T5323] CPU: 1 PID: 5323 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  137.081563][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  137.091643][ T5323] Call Trace:
[  137.094944][ T5323]  <TASK>
[  137.097886][ T5323]  dump_stack_lvl+0x125/0x1b0
[  137.102583][ T5323]  should_fail_ex+0x496/0x5b0
[  137.107285][ T5323]  _copy_from_user+0x30/0xf0
[  137.111880][ T5323]  input_event_from_user+0x136/0x3b0
[  137.117185][ T5323]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  137.123017][ T5323]  ? preempt_count_sub+0x160/0x160
[  137.128141][ T5323]  ? input_inject_event+0x193/0x370
[  137.133365][ T5323]  evdev_write+0x378/0x750
[  137.137792][ T5323]  ? evdev_read+0xdf0/0xdf0
[  137.142303][ T5323]  ? security_file_permission+0x8e/0xb0
[  137.147863][ T5323]  ? evdev_read+0xdf0/0xdf0
[  137.152373][ T5323]  vfs_write+0x294/0x1100
[  137.156711][ T5323]  ? reacquire_held_locks+0x4c0/0x4c0
[  137.162096][ T5323]  ? kernel_write+0x6c0/0x6c0
[  137.166784][ T5323]  ? __fget_files+0x256/0x400
[  137.171470][ T5323]  ? __fget_light+0x173/0x200
[  137.176155][ T5323]  ksys_write+0x1f0/0x250
[  137.180497][ T5323]  ? __ia32_sys_read+0xb0/0xb0
[  137.185285][ T5323]  do_syscall_64+0xd3/0x250
[  137.189824][ T5323]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  137.195755][ T5323] RIP: 0033:0x7f321d319da9
[  137.200166][ T5323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  137.219779][ T5323] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.228194][ T5323] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  137.236167][ T5323] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  137.244201][ T5323] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  137.252217][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.260214][ T5323] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  137.268194][ T5323]  </TASK>
[  137.271546][   T22] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  137.280697][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.288731][   T22] usb 1-1: Product: syz
[  137.292906][   T22] usb 1-1: Manufacturer: syz
[  137.297544][   T22] usb 1-1: SerialNumber: syz
16:49:23 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 68)

[  137.305391][   T22] usb 1-1: config 0 descriptor??
[  137.315660][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  137.318128][ T4792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.332420][ T4792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.340707][ T4792] usb 5-1: Product: syz
[  137.344898][ T4792] usb 5-1: Manufacturer: syz
[  137.349576][ T4792] usb 5-1: SerialNumber: syz
[  137.364057][ T5325] FAULT_INJECTION: forcing a failure.
[  137.364057][ T5325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.377302][ T5325] CPU: 1 PID: 5325 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  137.387665][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  137.397723][ T5325] Call Trace:
[  137.401000][ T5325]  <TASK>
[  137.403933][ T5325]  dump_stack_lvl+0x125/0x1b0
[  137.408634][ T5325]  should_fail_ex+0x496/0x5b0
[  137.413330][ T5325]  _copy_from_user+0x30/0xf0
[  137.417951][ T5325]  input_event_from_user+0x136/0x3b0
[  137.423247][ T5325]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  137.429078][ T5325]  ? preempt_count_sub+0x160/0x160
[  137.434192][ T5325]  ? input_inject_event+0x193/0x370
[  137.439398][ T5325]  evdev_write+0x378/0x750
[  137.443830][ T5325]  ? evdev_read+0xdf0/0xdf0
[  137.448345][ T5325]  ? security_file_permission+0x8e/0xb0
[  137.453907][ T5325]  ? evdev_read+0xdf0/0xdf0
[  137.458420][ T5325]  vfs_write+0x294/0x1100
[  137.462761][ T5325]  ? reacquire_held_locks+0x4c0/0x4c0
[  137.468146][ T5325]  ? kernel_write+0x6c0/0x6c0
[  137.472831][ T5325]  ? __fget_files+0x256/0x400
[  137.477539][ T5325]  ? __fget_light+0x173/0x200
[  137.482250][ T5325]  ksys_write+0x1f0/0x250
[  137.486594][ T5325]  ? __ia32_sys_read+0xb0/0xb0
[  137.491379][ T5325]  do_syscall_64+0xd3/0x250
[  137.495913][ T5325]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  137.501822][ T5325] RIP: 0033:0x7f321d319da9
[  137.506238][ T5325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  137.525847][ T5325] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.534263][ T5325] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  137.542247][ T5325] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  137.550226][ T5325] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:24 executing program 1:
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:24 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 69)

[  137.558207][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.565438][    T8] usb 3-1: Using ep0 maxpacket: 8
[  137.566177][ T5325] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  137.566205][ T5325]  </TASK>
[  137.585296][   T22] usb 1-1: selecting invalid altsetting 2
[  137.659622][ T5329] FAULT_INJECTION: forcing a failure.
[  137.659622][ T5329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.672821][ T5329] CPU: 0 PID: 5329 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  137.683149][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  137.693205][ T5329] Call Trace:
[  137.696482][ T5329]  <TASK>
[  137.699424][ T5329]  dump_stack_lvl+0x125/0x1b0
[  137.704144][ T5329]  should_fail_ex+0x496/0x5b0
[  137.708826][ T5329]  _copy_from_user+0x30/0xf0
[  137.713423][ T5329]  input_event_from_user+0x136/0x3b0
[  137.718716][ T5329]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  137.724528][ T5329]  ? preempt_count_sub+0x160/0x160
[  137.729651][ T5329]  ? input_inject_event+0x193/0x370
[  137.734876][ T5329]  evdev_write+0x378/0x750
[  137.739304][ T5329]  ? evdev_read+0xdf0/0xdf0
[  137.743815][ T5329]  ? security_file_permission+0x8e/0xb0
[  137.749379][ T5329]  ? evdev_read+0xdf0/0xdf0
[  137.753890][ T5329]  vfs_write+0x294/0x1100
[  137.758228][ T5329]  ? reacquire_held_locks+0x4c0/0x4c0
[  137.763611][ T5329]  ? kernel_write+0x6c0/0x6c0
[  137.768297][ T5329]  ? __fget_files+0x256/0x400
[  137.772982][ T5329]  ? __fget_light+0x173/0x200
[  137.777693][ T5329]  ksys_write+0x1f0/0x250
[  137.782054][ T5329]  ? __ia32_sys_read+0xb0/0xb0
[  137.786831][ T5329]  do_syscall_64+0xd3/0x250
[  137.791341][ T5329]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  137.797252][ T5329] RIP: 0033:0x7f321d319da9
[  137.801663][ T5329] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  137.821277][ T5329] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.829696][ T5329] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  137.837686][ T5329] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  137.845685][ T5329] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  137.853662][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  137.861643][ T5329] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  137.869637][ T5329]  </TASK>
[  137.876099][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.885988][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.895612][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
16:49:24 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 70)

[  137.904333][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.912432][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  137.922426][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.931464][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.940690][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.949644][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.958990][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.965083][ T5331] FAULT_INJECTION: forcing a failure.
[  137.965083][ T5331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.968076][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.981027][ T5331] CPU: 1 PID: 5331 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  137.998763][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  138.005850][    T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  138.008818][ T5331] Call Trace:
[  138.008831][ T5331]  <TASK>
[  138.008841][ T5331]  dump_stack_lvl+0x125/0x1b0
[  138.019050][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.022256][ T5331]  should_fail_ex+0x496/0x5b0
[  138.043370][ T5331]  _copy_from_user+0x30/0xf0
[  138.047972][ T5331]  input_event_from_user+0x136/0x3b0
[  138.053278][ T5331]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  138.059102][ T5331]  ? preempt_count_sub+0x160/0x160
[  138.064215][ T5331]  ? input_inject_event+0x193/0x370
[  138.069426][ T5331]  evdev_write+0x378/0x750
[  138.073882][ T5331]  ? evdev_read+0xdf0/0xdf0
[  138.078433][ T5331]  ? security_file_permission+0x8e/0xb0
[  138.084046][ T5331]  ? evdev_read+0xdf0/0xdf0
[  138.088658][ T5331]  vfs_write+0x294/0x1100
[  138.093027][ T5331]  ? reacquire_held_locks+0x4c0/0x4c0
[  138.098431][ T5331]  ? __switch_to+0x75d/0x1380
[  138.103135][ T5331]  ? kernel_write+0x6c0/0x6c0
[  138.107825][ T5331]  ? __fget_files+0x256/0x400
[  138.112512][ T5331]  ? __fget_light+0x173/0x200
[  138.117210][ T5331]  ksys_write+0x1f0/0x250
[  138.121602][ T5331]  ? __ia32_sys_read+0xb0/0xb0
[  138.126401][ T5331]  do_syscall_64+0xd3/0x250
[  138.130912][ T5331]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  138.136823][ T5331] RIP: 0033:0x7f321d319da9
[  138.141238][ T5331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  138.160858][ T5331] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.169291][ T5331] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  138.177262][ T5331] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  138.185242][ T5331] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  138.193237][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.195639][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
16:49:24 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 71)

[  138.201215][ T5331] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  138.201243][ T5331]  </TASK>
[  138.221518][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.229543][    T8] usb 3-1: Product: syz
[  138.233730][    T8] usb 3-1: Manufacturer: syz
[  138.238389][    T8] usb 3-1: SerialNumber: syz
[  138.265791][ T4792] usb 5-1: 0:2 : does not exist
[  138.277675][ T4792] usb 5-1: USB disconnect, device number 20
[  138.303326][ T5333] FAULT_INJECTION: forcing a failure.
[  138.303326][ T5333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.304869][ T4794] udevd[4794]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.316533][ T5333] CPU: 0 PID: 5333 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  138.343159][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  138.353241][ T5333] Call Trace:
[  138.356546][ T5333]  <TASK>
[  138.359494][ T5333]  dump_stack_lvl+0x125/0x1b0
[  138.364191][ T5333]  should_fail_ex+0x496/0x5b0
[  138.368894][ T5333]  _copy_from_user+0x30/0xf0
[  138.373506][ T5333]  input_event_from_user+0x136/0x3b0
[  138.378805][ T5333]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  138.384628][ T5333]  ? preempt_count_sub+0x160/0x160
[  138.389763][ T5333]  ? input_inject_event+0x193/0x370
[  138.394965][ T5333]  evdev_write+0x378/0x750
[  138.399392][ T5333]  ? evdev_read+0xdf0/0xdf0
[  138.403907][ T5333]  ? security_file_permission+0x8e/0xb0
[  138.409476][ T5333]  ? evdev_read+0xdf0/0xdf0
[  138.413992][ T5333]  vfs_write+0x294/0x1100
[  138.418349][ T5333]  ? reacquire_held_locks+0x4c0/0x4c0
[  138.423762][ T5333]  ? kernel_write+0x6c0/0x6c0
[  138.428466][ T5333]  ? __fget_files+0x256/0x400
[  138.433169][ T5333]  ? __fget_light+0x173/0x200
[  138.437856][ T5333]  ksys_write+0x1f0/0x250
[  138.442206][ T5333]  ? __ia32_sys_read+0xb0/0xb0
[  138.446989][ T5333]  do_syscall_64+0xd3/0x250
[  138.451538][ T5333]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  138.457478][ T5333] RIP: 0033:0x7f321d319da9
[  138.461933][ T5333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  138.475428][    C1] usb 1-1: async_complete: urb error -32
[  138.481541][ T5333] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.487441][   T22] get_1284_register: usb error -32
[  138.495589][ T5333] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  138.495612][ T5333] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:25 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  138.500839][   T22] parport3: fix this legacy no-device port driver!
[  138.508917][ T5333] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  138.508938][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.539391][ T5333] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  138.547398][ T5333]  </TASK>
16:49:25 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 72)

[  138.634539][ T5337] FAULT_INJECTION: forcing a failure.
[  138.634539][ T5337] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.645776][    T8] usb 3-1: 0:2 : does not exist
[  138.647908][ T5337] CPU: 1 PID: 5337 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  138.662752][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  138.671122][    T8] usb 3-1: USB disconnect, device number 21
[  138.672809][ T5337] Call Trace:
[  138.672821][ T5337]  <TASK>
[  138.672831][ T5337]  dump_stack_lvl+0x125/0x1b0
[  138.672872][ T5337]  should_fail_ex+0x496/0x5b0
[  138.694348][ T5337]  _copy_from_user+0x30/0xf0
[  138.698988][ T5337]  input_event_from_user+0x136/0x3b0
[  138.704316][ T5337]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  138.710164][ T5337]  ? preempt_count_sub+0x160/0x160
[  138.715309][ T5337]  ? input_inject_event+0x193/0x370
[  138.720549][ T5337]  evdev_write+0x378/0x750
[  138.725012][ T5337]  ? evdev_read+0xdf0/0xdf0
[  138.725634][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.729539][ T5337]  ? security_file_permission+0x8e/0xb0
[  138.729596][ T5337]  ? evdev_read+0xdf0/0xdf0
[  138.755389][ T5337]  vfs_write+0x294/0x1100
[  138.759771][ T5337]  ? reacquire_held_locks+0x4c0/0x4c0
[  138.765194][ T5337]  ? kernel_write+0x6c0/0x6c0
[  138.769923][ T5337]  ? __fget_files+0x256/0x400
[  138.774649][ T5337]  ? __fget_light+0x173/0x200
[  138.779370][ T5337]  ksys_write+0x1f0/0x250
[  138.783732][ T5337]  ? __ia32_sys_read+0xb0/0xb0
[  138.788534][ T5337]  do_syscall_64+0xd3/0x250
[  138.793087][ T5337]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  138.798996][ T5337] RIP: 0033:0x7f321d319da9
[  138.803414][ T5337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  138.823026][ T5337] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
16:49:25 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 73)

[  138.831456][ T5337] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  138.839449][ T5337] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  138.847422][ T5337] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  138.855405][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.863382][ T5337] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  138.871378][ T5337]  </TASK>
16:49:25 executing program 4:
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000000))
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

[  139.021214][ T5339] FAULT_INJECTION: forcing a failure.
[  139.021214][ T5339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.034339][ T5339] CPU: 1 PID: 5339 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  139.044702][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  139.054773][ T5339] Call Trace:
[  139.058055][ T5339]  <TASK>
[  139.060985][ T5339]  dump_stack_lvl+0x125/0x1b0
[  139.065688][ T5339]  should_fail_ex+0x496/0x5b0
[  139.070398][ T5339]  _copy_from_user+0x30/0xf0
[  139.075003][ T5339]  input_event_from_user+0x136/0x3b0
[  139.080313][ T5339]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  139.086144][ T5339]  ? preempt_count_sub+0x160/0x160
[  139.091269][ T5339]  ? input_inject_event+0x193/0x370
[  139.096483][ T5339]  evdev_write+0x378/0x750
[  139.100927][ T5339]  ? evdev_read+0xdf0/0xdf0
[  139.105471][ T5339]  ? security_file_permission+0x8e/0xb0
[  139.111042][ T5339]  ? evdev_read+0xdf0/0xdf0
[  139.115563][ T5339]  vfs_write+0x294/0x1100
[  139.119907][ T5339]  ? reacquire_held_locks+0x4c0/0x4c0
[  139.125286][ T5339]  ? kernel_write+0x6c0/0x6c0
[  139.129989][ T5339]  ? __fget_files+0x256/0x400
[  139.134679][ T5339]  ? __fget_light+0x173/0x200
[  139.139363][ T5339]  ksys_write+0x1f0/0x250
[  139.143706][ T5339]  ? __ia32_sys_read+0xb0/0xb0
[  139.148497][ T5339]  do_syscall_64+0xd3/0x250
[  139.153007][ T5339]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  139.158921][ T5339] RIP: 0033:0x7f321d319da9
[  139.163337][ T5339] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  139.182953][ T5339] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.191378][ T5339] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  139.199376][ T5339] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  139.207363][ T5339] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:25 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 74)

[  139.215342][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.223324][ T5339] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  139.231306][ T5339]  </TASK>
[  139.274481][ T5343] FAULT_INJECTION: forcing a failure.
[  139.274481][ T5343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.287875][ T5343] CPU: 1 PID: 5343 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  139.298223][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  139.305445][    T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  139.308271][ T5343] Call Trace:
[  139.308284][ T5343]  <TASK>
[  139.308294][ T5343]  dump_stack_lvl+0x125/0x1b0
[  139.326828][ T5343]  should_fail_ex+0x496/0x5b0
[  139.331540][ T5343]  _copy_from_user+0x30/0xf0
[  139.336174][ T5343]  input_event_from_user+0x136/0x3b0
[  139.341491][ T5343]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  139.347315][ T5343]  ? preempt_count_sub+0x160/0x160
[  139.352452][ T5343]  ? input_inject_event+0x193/0x370
[  139.357662][ T5343]  evdev_write+0x378/0x750
[  139.362100][ T5343]  ? evdev_read+0xdf0/0xdf0
[  139.366617][ T5343]  ? security_file_permission+0x8e/0xb0
16:49:26 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  139.372180][ T5343]  ? evdev_read+0xdf0/0xdf0
[  139.376693][ T5343]  vfs_write+0x294/0x1100
[  139.381048][ T5343]  ? reacquire_held_locks+0x4c0/0x4c0
[  139.386465][ T5343]  ? kernel_write+0x6c0/0x6c0
[  139.391185][ T5343]  ? __fget_files+0x256/0x400
[  139.395910][ T5343]  ? __fget_light+0x173/0x200
[  139.400627][ T5343]  ksys_write+0x1f0/0x250
[  139.404999][ T5343]  ? __ia32_sys_read+0xb0/0xb0
[  139.409774][ T5343]  do_syscall_64+0xd3/0x250
[  139.414307][ T5343]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  139.420238][ T5343] RIP: 0033:0x7f321d319da9
16:49:26 executing program 0:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x10, 0x16, {0x16, 0x1, "db27d5b8ea23e287d26def5ffad8800d8a84eb54"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x2, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x1, 0x3, "e797476d", "5a596a95"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0xf6, 0x3f, 0x7f, 0x5, 0x3}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x8, 0x6b, "7ecbfb7d56f61e3d1a4f6c5056797a27f92674780cc7a51d48c9cbd69f36995140b054796bfd515049fb11e5ad0167c23ae6f57e6588a4b3eb99c3b5acc8c6682f97928144d39320c5eced120bda5076033ed2d6e26dac30e2a26d34ffd31bd64840b6916eadb4f0019f2e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000400)={0x40, 0xb, 0x2, "43d2"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "ba1e"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x93}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x3, "0675bf"}, 0x0, 0x0})
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x10, 0x16, {0x16, 0x1, "db27d5b8ea23e287d26def5ffad8800d8a84eb54"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x2, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x1, 0x3, "e797476d", "5a596a95"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0xf6, 0x3f, 0x7f, 0x5, 0x3}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x8, 0x6b, "7ecbfb7d56f61e3d1a4f6c5056797a27f92674780cc7a51d48c9cbd69f36995140b054796bfd515049fb11e5ad0167c23ae6f57e6588a4b3eb99c3b5acc8c6682f97928144d39320c5eced120bda5076033ed2d6e26dac30e2a26d34ffd31bd64840b6916eadb4f0019f2e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000400)={0x40, 0xb, 0x2, "43d2"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "ba1e"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x93}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1f}}) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x3, "0675bf"}, 0x0, 0x0}) (async)

[  139.424663][ T5343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  139.442426][    T9] usb 1-1: USB disconnect, device number 24
[  139.444264][ T5343] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.444300][ T5343] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  139.444322][ T5343] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:26 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 75)

[  139.474598][ T5343] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  139.482599][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.490596][ T5343] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  139.498598][ T5343]  </TASK>
16:49:26 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x0, 0x0, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x16, &(0x7f00000000c0)=@string={0x16, 0x3, "c748fabe8a17426ba82cac8c2a1ed517401606f8"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]})
syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}]})
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7f, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^4'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x89, 0x58, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x1f}, 0x8, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9d, 0x2, 0x3, 0x1, 0x0, 0xf6, {0x9, 0x21, 0x20, 0x7f, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x51, 0x4, 0xf6, 0x1, 0x30, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "10cec12b"}}]})

[  139.555776][    T8] usb 5-1: Using ep0 maxpacket: 16
[  139.602287][ T5349] FAULT_INJECTION: forcing a failure.
[  139.602287][ T5349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.615789][ T5349] CPU: 0 PID: 5349 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  139.626153][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  139.636241][ T5349] Call Trace:
[  139.639542][ T5349]  <TASK>
[  139.642497][ T5349]  dump_stack_lvl+0x125/0x1b0
[  139.647225][ T5349]  should_fail_ex+0x496/0x5b0
[  139.651941][ T5349]  _copy_from_user+0x30/0xf0
[  139.656565][ T5349]  input_event_from_user+0x136/0x3b0
[  139.661870][ T5349]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  139.667701][ T5349]  ? preempt_count_sub+0x160/0x160
[  139.672813][ T5349]  ? input_inject_event+0x193/0x370
[  139.678015][ T5349]  evdev_write+0x378/0x750
[  139.682443][ T5349]  ? evdev_read+0xdf0/0xdf0
[  139.686956][ T5349]  ? security_file_permission+0x8e/0xb0
[  139.692516][ T5349]  ? evdev_read+0xdf0/0xdf0
[  139.697029][ T5349]  vfs_write+0x294/0x1100
[  139.701368][ T5349]  ? reacquire_held_locks+0x4c0/0x4c0
[  139.706764][ T5349]  ? kernel_write+0x6c0/0x6c0
[  139.711456][ T5349]  ? __fget_files+0x256/0x400
[  139.716140][ T5349]  ? __fget_light+0x173/0x200
[  139.720822][ T5349]  ksys_write+0x1f0/0x250
[  139.725159][ T5349]  ? __ia32_sys_read+0xb0/0xb0
[  139.729953][ T5349]  do_syscall_64+0xd3/0x250
[  139.734496][ T5349]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  139.740427][ T5349] RIP: 0033:0x7f321d319da9
[  139.744838][ T5349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  139.764453][ T5349] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.772888][ T5349] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  139.780860][ T5349] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  139.788833][ T5349] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:26 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 76)

[  139.796807][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  139.804778][ T5349] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  139.812760][ T5349]  </TASK>
[  139.858241][ T5353] FAULT_INJECTION: forcing a failure.
[  139.858241][ T5353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.871570][ T5353] CPU: 1 PID: 5353 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  139.881925][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  139.891981][ T5353] Call Trace:
[  139.895258][ T5353]  <TASK>
[  139.895497][    T8] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping
[  139.898178][ T5353]  dump_stack_lvl+0x125/0x1b0
[  139.898220][ T5353]  should_fail_ex+0x496/0x5b0
[  139.907106][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.911718][ T5353]  _copy_from_user+0x30/0xf0
[  139.916459][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.926438][ T5353]  input_event_from_user+0x136/0x3b0
[  139.926474][ T5353]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  139.933100][    T8] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  139.939856][ T5353]  ? preempt_count_sub+0x160/0x160
[  139.939887][ T5353]  ? input_inject_event+0x193/0x370
[  139.939924][ T5353]  evdev_write+0x378/0x750
[  139.939963][ T5353]  ? evdev_read+0xdf0/0xdf0
[  139.979266][ T5353]  ? security_file_permission+0x8e/0xb0
[  139.984828][ T5353]  ? evdev_read+0xdf0/0xdf0
[  139.989350][ T5353]  vfs_write+0x294/0x1100
[  139.993702][ T5353]  ? reacquire_held_locks+0x4c0/0x4c0
[  139.999108][ T5353]  ? kernel_write+0x6c0/0x6c0
[  140.003806][ T5353]  ? __fget_files+0x256/0x400
[  140.008520][ T5353]  ? __fget_light+0x173/0x200
[  140.013225][ T5353]  ksys_write+0x1f0/0x250
[  140.017573][ T5353]  ? __ia32_sys_read+0xb0/0xb0
[  140.022351][ T5353]  do_syscall_64+0xd3/0x250
[  140.026860][ T5353]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  140.032772][ T5353] RIP: 0033:0x7f321d319da9
[  140.037183][ T5353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  140.056799][ T5353] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.065231][ T5353] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  140.073232][ T5353] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  140.075439][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  140.081190][ T5353] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  140.081212][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
16:49:26 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 77)

[  140.081231][ T5353] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  140.106103][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.112639][ T5353]  </TASK>
[  140.124814][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.132892][    T8] usb 5-1: Product: syz
[  140.137106][    T8] usb 5-1: Manufacturer: syz
[  140.141707][    T8] usb 5-1: SerialNumber: syz
[  140.175415][   T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  140.184853][ T5355] FAULT_INJECTION: forcing a failure.
[  140.184853][ T5355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.198045][ T5355] CPU: 0 PID: 5355 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  140.208376][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  140.218436][ T5355] Call Trace:
[  140.221711][ T5355]  <TASK>
[  140.224648][ T5355]  dump_stack_lvl+0x125/0x1b0
[  140.229348][ T5355]  should_fail_ex+0x496/0x5b0
[  140.234044][ T5355]  _copy_from_user+0x30/0xf0
[  140.238663][ T5355]  input_event_from_user+0x136/0x3b0
[  140.243970][ T5355]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  140.249806][ T5355]  ? preempt_count_sub+0x160/0x160
[  140.254937][ T5355]  ? input_inject_event+0x193/0x370
[  140.260153][ T5355]  evdev_write+0x378/0x750
[  140.264581][ T5355]  ? evdev_read+0xdf0/0xdf0
[  140.269095][ T5355]  ? security_file_permission+0x8e/0xb0
[  140.274659][ T5355]  ? evdev_read+0xdf0/0xdf0
[  140.279169][ T5355]  vfs_write+0x294/0x1100
[  140.283508][ T5355]  ? reacquire_held_locks+0x4c0/0x4c0
[  140.288889][ T5355]  ? kernel_write+0x6c0/0x6c0
[  140.293578][ T5355]  ? __fget_files+0x256/0x400
[  140.298263][ T5355]  ? __fget_light+0x173/0x200
[  140.302951][ T5355]  ksys_write+0x1f0/0x250
[  140.307289][ T5355]  ? __ia32_sys_read+0xb0/0xb0
[  140.312065][ T5355]  do_syscall_64+0xd3/0x250
[  140.316592][ T5355]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  140.322528][ T5355] RIP: 0033:0x7f321d319da9
[  140.326953][ T5355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  140.346584][ T5355] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.355102][ T5355] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  140.363120][ T5355] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:27 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 78)

[  140.371129][ T5355] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  140.379123][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.387095][ T5355] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  140.395091][ T5355]  </TASK>
[  140.444623][ T5357] FAULT_INJECTION: forcing a failure.
[  140.444623][ T5357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.457778][ T5357] CPU: 1 PID: 5357 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  140.468114][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  140.475782][    T8] usb 5-1: 0:2 : does not exist
[  140.478160][ T5357] Call Trace:
[  140.478173][ T5357]  <TASK>
[  140.478184][ T5357]  dump_stack_lvl+0x125/0x1b0
[  140.478227][ T5357]  should_fail_ex+0x496/0x5b0
[  140.494362][    T8] usb 5-1: USB disconnect, device number 21
[  140.498639][ T5357]  _copy_from_user+0x30/0xf0
[  140.498682][ T5357]  input_event_from_user+0x136/0x3b0
[  140.498716][ T5357]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  140.515894][    T9] usb 1-1: Using ep0 maxpacket: 16
[  140.520255][ T5357]  ? preempt_count_sub+0x160/0x160
[  140.520287][ T5357]  ? input_inject_event+0x193/0x370
[  140.535786][ T5357]  evdev_write+0x378/0x750
[  140.540248][ T5357]  ? evdev_read+0xdf0/0xdf0
[  140.544795][ T5357]  ? security_file_permission+0x8e/0xb0
[  140.549777][ T4780] udevd[4780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  140.550439][ T5357]  ? evdev_read+0xdf0/0xdf0
[  140.550480][ T5357]  vfs_write+0x294/0x1100
[  140.575042][ T5357]  ? reacquire_held_locks+0x4c0/0x4c0
[  140.580458][ T5357]  ? kernel_write+0x6c0/0x6c0
[  140.585182][ T5357]  ? __fget_files+0x256/0x400
[  140.589906][ T5357]  ? __fget_light+0x173/0x200
[  140.594627][ T5357]  ksys_write+0x1f0/0x250
[  140.599000][ T5357]  ? __ia32_sys_read+0xb0/0xb0
[  140.603814][ T5357]  do_syscall_64+0xd3/0x250
[  140.608363][ T5357]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  140.614272][ T5357] RIP: 0033:0x7f321d319da9
[  140.618685][ T5357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
16:49:27 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  140.638297][ T5357] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.646746][ T5357] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  140.654721][ T5357] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  140.662697][ T5357] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  140.670679][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.678683][ T5357] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  140.686700][ T5357]  </TASK>
[  140.708412][    T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  140.716859][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  140.725046][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  140.725448][   T22] usb 3-1: Using ep0 maxpacket: 8
[  140.733258][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  140.746485][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
16:49:27 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 79)

[  140.755412][    T9] usb 1-1: config 0 has no interface number 0
[  140.772540][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  140.783694][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  140.788763][ T5361] FAULT_INJECTION: forcing a failure.
[  140.788763][ T5361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.793550][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  140.806678][ T5361] CPU: 1 PID: 5361 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  140.818054][    T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.826664][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  140.826683][ T5361] Call Trace:
[  140.826694][ T5361]  <TASK>
[  140.826703][ T5361]  dump_stack_lvl+0x125/0x1b0
[  140.826743][ T5361]  should_fail_ex+0x496/0x5b0
[  140.826773][ T5361]  _copy_from_user+0x30/0xf0
[  140.839782][    T9] usb 1-1: config 0 interface 125 has no altsetting 0
[  140.849787][ T5361]  input_event_from_user+0x136/0x3b0
[  140.849823][ T5361]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  140.853094][    T9] usb 1-1: config 0 interface 125 has no altsetting 2
[  140.856006][ T5361]  ? preempt_count_sub+0x160/0x160
[  140.856036][ T5361]  ? input_inject_event+0x193/0x370
[  140.904839][ T5361]  evdev_write+0x378/0x750
[  140.909273][ T5361]  ? evdev_read+0xdf0/0xdf0
[  140.913785][ T5361]  ? security_file_permission+0x8e/0xb0
[  140.919349][ T5361]  ? evdev_read+0xdf0/0xdf0
[  140.923861][ T5361]  vfs_write+0x294/0x1100
[  140.928208][ T5361]  ? reacquire_held_locks+0x4c0/0x4c0
[  140.933599][ T5361]  ? kernel_write+0x6c0/0x6c0
[  140.938322][ T5361]  ? __fget_files+0x256/0x400
[  140.943032][ T5361]  ? __fget_light+0x173/0x200
[  140.947733][ T5361]  ksys_write+0x1f0/0x250
[  140.952079][ T5361]  ? __ia32_sys_read+0xb0/0xb0
[  140.956875][ T5361]  do_syscall_64+0xd3/0x250
[  140.961388][ T5361]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  140.967295][ T5361] RIP: 0033:0x7f321d319da9
[  140.971722][ T5361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  140.991337][ T5361] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.999751][ T5361] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  141.007724][ T5361] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  141.015577][    T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  141.015691][ T5361] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  141.015712][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.024732][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.032661][ T5361] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  141.032688][ T5361]  </TASK>
16:49:27 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 80)

[  141.060181][    T9] usb 1-1: Product: syz
[  141.064353][    T9] usb 1-1: Manufacturer: syz
[  141.069013][    T9] usb 1-1: SerialNumber: syz
[  141.076905][    T9] usb 1-1: config 0 descriptor??
[  141.112527][ T5363] FAULT_INJECTION: forcing a failure.
[  141.112527][ T5363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.125729][ T5363] CPU: 0 PID: 5363 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  141.136066][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  141.146129][ T5363] Call Trace:
[  141.149414][ T5363]  <TASK>
[  141.152365][ T5363]  dump_stack_lvl+0x125/0x1b0
[  141.157066][ T5363]  should_fail_ex+0x496/0x5b0
[  141.161759][ T5363]  _copy_from_user+0x30/0xf0
[  141.166400][ T5363]  input_event_from_user+0x136/0x3b0
[  141.171724][ T5363]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  141.177559][ T5363]  ? preempt_count_sub+0x160/0x160
[  141.182686][ T5363]  ? input_inject_event+0x193/0x370
[  141.187923][ T5363]  evdev_write+0x378/0x750
[  141.192391][ T5363]  ? evdev_read+0xdf0/0xdf0
[  141.196943][ T5363]  ? security_file_permission+0x8e/0xb0
[  141.202545][ T5363]  ? evdev_read+0xdf0/0xdf0
[  141.207091][ T5363]  vfs_write+0x294/0x1100
16:49:27 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231326e53f070c00002ddcedfb5a49fd0bc0178910badf002a901083f6"], 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000ff9412201340000102030109022d00010100707f0904001f01030122730f0905810320000005d3090502030000010008"], &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x0, 0x6, 0x8, 0x6}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x78, 0x74, 0x97}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0xba, &(0x7f0000000200)=@string={0xba, 0x3, "c07d70e39549ef484a9db9cccc0e762458aa24638b488611a52755bef9848756470b1d4d8f36132340e53c09d2ac5f7dbd0de9a1ce6d349e592ee35084908fa052c4aba6d332d1f2fa4729861a5d4e4131a7d1bd614ac437c681424d3a20ac2969f358e0d3798302d17aa3ea6e246a3303fc984c202a9ef9e60cdfd3a297bd04bec9a6fa1944b88163f15bd638c05ebce8f1a30cbc5c44234b27b3f78eb4571701eb7c39651ad0ab4ac0a7d170588e13faf78663f273bce0"}}, {0xcf, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x6f, &(0x7f0000000400)=@string={0x6f, 0x3, "2948725cf9939e3339b74e9dcaf9f77fb09f1520671c1212b8f1c2c2ea6f9d30de1040243c3ef5bf0ebcffff6bc8e027188886328d000f592e81ed09741ed484aaaf41593f187606197c7e348b7712977a7ea920e2a775b5f036c9016a1ae2b3ece2ae7f059ea334ba8f8638e1"}}]})
syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="4004e50000080000002a0788315405d896fb286f10578557610000e54246db2f5a00705403b839e27a6c937009efbeded23364cde0b4129650878fc2044b7baf3a9af1fb20ff3159e0537e9f6f06f269b8d96cc73fbeb24a9de10f3e356fe1684190979dc7ce0377b1302a3f93af70a9aba07a2cdf2d29f2abae96f8f29e4675b8b9ebea6e5cc1a1a578b658f180a0608c923199bfb07c4c706aa07ff33b5cf582a5b5d074a73f817e895dcd31bad60a233e09e55b60533197a981335b4e80ba8ba496e307631803cc32959f11a55df3ed4f2d32bf3b06a1041177fc09ad7100"/235], &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0xfffffffffffffffe, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x10, 0xe0, 0x8c, "d59c5c07", "8618b5f2"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x8, 0x80, 0xff, 0x4, 0x9}}}, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x0, 0x7, 0xc4, "b4f749db14d65feba403a71cb13d012c45880e81d5d9d795a1d2afd439f8b4b2ddb0bb2f84c416733c8379ed76375f8bc691537528c8330b98b1e9054ba9902141dc1a422dfa7da29a5cbdf0246c2f83dabab09661adef6a95c8f1515b7a50067ea0001e5b9f8029d5d8b0b35e335cc06c81b432380ad0a5d74a8f339ad342b4103c1017913dae4abbec16f01606d7f86c186f902793a8c036e4901c8171fee9cc6542c4536e64cf7c2330f37e900ad9b5f55e3af15cddeaeaf3299b15f6ea13fb09ce83"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001100)={0x40, 0xb, 0x2, '`)'}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001200)={0x40, 0x19, 0x2, '=f'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}})
syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, &(0x7f00000002c0)={0x40, 0x30, 0x50, {0x50, 0x24, "5d48a351dc36968f4945d3f03e7389e7d9ef62df0634acf3a0ce658d20d70e3fee4ebb24fb6249a1fc496915480d3edda5695e1297c0325102f78ce594286f4bd626e304b3c8f1e31fd4b886a8fa"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000340)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0x4, "d6"}, @local=@item_012={0x0, 0x2, 0x2a115f5c1829a92c}, @main=@item_4={0x3, 0x0, 0xc, "13afed43"}, @global=@item_4={0x3, 0x1, 0x4, 'Z[\\T'}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x567}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x0, 0x1b, 0x66, "e9b1d976d05942a6e3aa3b825095be4956745be6d1aebc96d78edd99e220c7f69d2d2b2060ad987e00018d26f0c05277f8a0a830284a9221e1cbb3379c700beedfd90816d8bf3bb4f5b91a7ca53a7ecc65d25d3a2e0b26e2038a7a7fbe699252a533de9718ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001640)={0x0, 0x8, 0x1}, &(0x7f0000001680)={0x20, 0x1, 0x37, "22b774a149bde1f2c58c88b498327c8d4480c3ae35fa7ecfe4ecc0516a20818d05b374934eccbfc682664a37605e49da1286c2cb08faa4"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0x5}})
syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x11, 0x4d, {0x4d, 0x4, "1eadf91486c33221a36d6dca3d6da73c17cbc347fef8fbad4d44f01bd5d96962deafa057cceb674de33589298d84046f4ee0385a5783bd60b4a53f011670a58d09c0231dfe807064a88f45"}}, &(0x7f0000000580)={0x0, 0x3, 0x54, @string={0x54, 0x3, "6cb0cd60443ef85f69be77a9f7bc966762e07e048ca319c1c15e01825e99e8274b0507eb7f86fe4bc3c4c998b6ccb9375b71b451c676319daafd7b444ef4dac8b954149cdefba1c93c11eada582d9e5560f2"}}, &(0x7f0000000600)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xd1, 0x6, 0x3, 0x0, 0x8, [0x0, 0xc0, 0xff0000, 0xc000, 0x0, 0xffc03f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2b505e4b052ae8144cdc651c46219f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "216732dcb7087ad33ac349171a8240a1"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0x4, "2abc9c6a", "df593018"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xca, 0x60, 0x7, 0x20, 0x3f, 0x8, 0x2}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x40, 0x6, 0x98, "d8eea23b43ed591d35032b86d622f2091bec799c8284c206259f3ca3a5b1afa2e01760343e40b43d1b0c3d067444ba3b2b997e7b875be494bf87a374faea1a02d4f860f701486ad1844fdc286e7d8fc631c081ece2c7124febf4357faa5a9490bad5d75025af807dfa12edf73c18003611c3f120ed8e79d643882af007d6e8f31855b957420a5540871a6f41d590b69ce46f2e7738bd200f"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "37db"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="ec74ffbe164f"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'Zo'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}})

[  141.211469][ T5363]  ? reacquire_held_locks+0x4c0/0x4c0
[  141.216882][ T5363]  ? kernel_write+0x6c0/0x6c0
[  141.221601][ T5363]  ? __fget_files+0x256/0x400
[  141.226320][ T5363]  ? __fget_light+0x173/0x200
[  141.231050][ T5363]  ksys_write+0x1f0/0x250
[  141.235427][ T5363]  ? __ia32_sys_read+0xb0/0xb0
[  141.240235][ T5363]  do_syscall_64+0xd3/0x250
[  141.244763][ T5363]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  141.250709][ T5363] RIP: 0033:0x7f321d319da9
[  141.255156][ T5363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  141.274800][ T5363] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.283243][ T5363] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  141.291235][ T5363] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  141.299236][ T5363] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:27 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 81)

[  141.307240][ T5363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.315240][ T5363] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  141.323245][ T5363]  </TASK>
[  141.329147][    T9] usb 1-1: selecting invalid altsetting 2
[  141.336647][   T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.346358][   T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  141.386976][ T5367] FAULT_INJECTION: forcing a failure.
[  141.386976][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.400235][ T5367] CPU: 1 PID: 5367 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  141.410567][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  141.420626][ T5367] Call Trace:
[  141.423916][ T5367]  <TASK>
[  141.426868][ T5367]  dump_stack_lvl+0x125/0x1b0
[  141.431589][ T5367]  should_fail_ex+0x496/0x5b0
[  141.436333][ T5367]  _copy_from_user+0x30/0xf0
[  141.440953][ T5367]  input_event_from_user+0x136/0x3b0
[  141.446262][ T5367]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  141.452110][ T5367]  ? preempt_count_sub+0x160/0x160
[  141.457243][ T5367]  ? input_inject_event+0x193/0x370
[  141.462458][ T5367]  evdev_write+0x378/0x750
[  141.466885][ T5367]  ? evdev_read+0xdf0/0xdf0
[  141.471406][ T5367]  ? security_file_permission+0x8e/0xb0
[  141.476984][ T5367]  ? evdev_read+0xdf0/0xdf0
[  141.481496][ T5367]  vfs_write+0x294/0x1100
[  141.485844][ T5367]  ? reacquire_held_locks+0x4c0/0x4c0
[  141.491226][ T5367]  ? kernel_write+0x6c0/0x6c0
[  141.495913][ T5367]  ? __fget_files+0x256/0x400
[  141.500599][ T5367]  ? __fget_light+0x173/0x200
[  141.505291][ T5367]  ksys_write+0x1f0/0x250
[  141.509664][ T5367]  ? __ia32_sys_read+0xb0/0xb0
[  141.514463][ T5367]  do_syscall_64+0xd3/0x250
[  141.519007][ T5367]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  141.524915][ T5367] RIP: 0033:0x7f321d319da9
[  141.529334][ T5367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  141.548962][ T5367] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.557401][ T5367] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  141.565415][ T5367] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  141.573404][ T5367] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:28 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 82)

[  141.581394][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.589391][ T5367] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  141.597373][ T5367]  </TASK>
[  141.637014][ T5369] FAULT_INJECTION: forcing a failure.
[  141.637014][ T5369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.650395][ T5369] CPU: 1 PID: 5369 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  141.660731][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  141.670822][ T5369] Call Trace:
[  141.674125][ T5369]  <TASK>
[  141.677068][ T5369]  dump_stack_lvl+0x125/0x1b0
[  141.681774][ T5369]  should_fail_ex+0x496/0x5b0
[  141.686456][ T5369]  _copy_from_user+0x30/0xf0
[  141.691055][ T5369]  input_event_from_user+0x136/0x3b0
[  141.696348][ T5369]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  141.702158][ T5369]  ? preempt_count_sub+0x160/0x160
[  141.707282][ T5369]  ? input_inject_event+0x193/0x370
[  141.712517][ T5369]  evdev_write+0x378/0x750
[  141.716972][ T5369]  ? evdev_read+0xdf0/0xdf0
[  141.721519][ T5369]  ? security_file_permission+0x8e/0xb0
[  141.727093][ T5369]  ? evdev_read+0xdf0/0xdf0
[  141.731614][ T5369]  vfs_write+0x294/0x1100
[  141.735967][ T5369]  ? reacquire_held_locks+0x4c0/0x4c0
[  141.741373][ T5369]  ? kernel_write+0x6c0/0x6c0
[  141.746072][ T5369]  ? __fget_files+0x256/0x400
[  141.750779][ T5369]  ? __fget_light+0x173/0x200
[  141.755468][ T5369]  ksys_write+0x1f0/0x250
[  141.759808][ T5369]  ? __ia32_sys_read+0xb0/0xb0
[  141.764585][ T5369]  do_syscall_64+0xd3/0x250
[  141.769095][ T5369]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  141.775006][ T5369] RIP: 0033:0x7f321d319da9
[  141.779436][ T5369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  141.799055][ T5369] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.807480][ T5369] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  141.815461][ T5369] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  141.823444][ T5369] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:28 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:28 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 83)

[  141.831418][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.839391][ T5369] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  141.847376][ T5369]  </TASK>
[  141.850813][ T4792] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  141.920426][ T5373] FAULT_INJECTION: forcing a failure.
[  141.920426][ T5373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.933768][ T5373] CPU: 0 PID: 5373 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  141.944106][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  141.954162][ T5373] Call Trace:
[  141.957449][ T5373]  <TASK>
[  141.960391][ T5373]  dump_stack_lvl+0x125/0x1b0
[  141.965098][ T5373]  should_fail_ex+0x496/0x5b0
[  141.969797][ T5373]  _copy_from_user+0x30/0xf0
[  141.974393][ T5373]  input_event_from_user+0x136/0x3b0
[  141.979698][ T5373]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  141.985532][ T5373]  ? preempt_count_sub+0x160/0x160
[  141.990676][ T5373]  ? input_inject_event+0x193/0x370
[  141.995904][ T5373]  evdev_write+0x378/0x750
[  142.000332][ T5373]  ? evdev_read+0xdf0/0xdf0
[  142.004842][ T5373]  ? security_file_permission+0x8e/0xb0
[  142.010405][ T5373]  ? evdev_read+0xdf0/0xdf0
[  142.014917][ T5373]  vfs_write+0x294/0x1100
[  142.019261][ T5373]  ? reacquire_held_locks+0x4c0/0x4c0
[  142.024655][ T5373]  ? kernel_write+0x6c0/0x6c0
[  142.029354][ T5373]  ? __fget_files+0x256/0x400
[  142.034040][ T5373]  ? __fget_light+0x173/0x200
[  142.038742][ T5373]  ksys_write+0x1f0/0x250
[  142.043087][ T5373]  ? __ia32_sys_read+0xb0/0xb0
[  142.047864][ T5373]  do_syscall_64+0xd3/0x250
[  142.052375][ T5373]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  142.058298][ T5373] RIP: 0033:0x7f321d319da9
[  142.062739][ T5373] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  142.082373][ T5373] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.090798][ T5373] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  142.098786][ T5373] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  142.106766][ T5373] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  142.114736][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.122711][ T5373] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  142.130687][ T5373]  </TASK>
[  142.145390][    C0] usb 1-1: async_complete: urb error -32
[  142.151269][    T9] get_1284_register: usb error -32
[  142.156596][    T9] parport4: fix this legacy no-device port driver!
16:49:28 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 84)

[  142.166929][ T4792] usb 5-1: Using ep0 maxpacket: 16
[  142.197925][ T5375] FAULT_INJECTION: forcing a failure.
[  142.197925][ T5375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.211016][ T5375] CPU: 0 PID: 5375 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  142.221361][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  142.231412][ T5375] Call Trace:
[  142.234690][ T5375]  <TASK>
[  142.237640][ T5375]  dump_stack_lvl+0x125/0x1b0
[  142.242343][ T5375]  should_fail_ex+0x496/0x5b0
[  142.247031][ T5375]  _copy_from_user+0x30/0xf0
[  142.251655][ T5375]  input_event_from_user+0x136/0x3b0
[  142.256965][ T5375]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  142.262792][ T5375]  ? preempt_count_sub+0x160/0x160
[  142.267910][ T5375]  ? input_inject_event+0x193/0x370
[  142.273121][ T5375]  evdev_write+0x378/0x750
[  142.277548][ T5375]  ? evdev_read+0xdf0/0xdf0
[  142.282063][ T5375]  ? security_file_permission+0x8e/0xb0
[  142.287628][ T5375]  ? evdev_read+0xdf0/0xdf0
[  142.292145][ T5375]  vfs_write+0x294/0x1100
[  142.296483][ T5375]  ? reacquire_held_locks+0x4c0/0x4c0
[  142.301881][ T5375]  ? kernel_write+0x6c0/0x6c0
[  142.306593][ T5375]  ? __fget_files+0x256/0x400
[  142.311282][ T5375]  ? __fget_light+0x173/0x200
[  142.315979][ T5375]  ksys_write+0x1f0/0x250
[  142.320342][ T5375]  ? __ia32_sys_read+0xb0/0xb0
[  142.325116][ T5375]  do_syscall_64+0xd3/0x250
[  142.329625][ T5375]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  142.335546][ T5375] RIP: 0033:0x7f321d319da9
[  142.339960][ T5375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  142.359573][ T5375] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.367999][ T5375] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  142.375976][ T5375] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  142.383961][ T5375] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:29 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 85)

[  142.391932][ T5375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.399904][ T5375] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  142.407896][ T5375]  </TASK>
[  142.435802][ T4792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.446781][ T4792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.454891][ T5377] FAULT_INJECTION: forcing a failure.
[  142.454891][ T5377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.459687][ T4792] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.472624][ T5377] CPU: 0 PID: 5377 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  142.481654][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.491920][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  142.491938][ T5377] Call Trace:
[  142.491950][ T5377]  <TASK>
[  142.507962][ T4792] usb 5-1: config 0 descriptor??
[  142.509957][ T5377]  dump_stack_lvl+0x125/0x1b0
[  142.510001][ T5377]  should_fail_ex+0x496/0x5b0
[  142.530586][ T5377]  _copy_from_user+0x30/0xf0
[  142.535190][ T5377]  input_event_from_user+0x136/0x3b0
[  142.540506][ T5377]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  142.546340][ T5377]  ? preempt_count_sub+0x160/0x160
[  142.551461][ T5377]  ? input_inject_event+0x193/0x370
[  142.556686][ T5377]  evdev_write+0x378/0x750
[  142.561174][ T5377]  ? evdev_read+0xdf0/0xdf0
[  142.565695][ T5377]  ? security_file_permission+0x8e/0xb0
[  142.571255][ T5377]  ? evdev_read+0xdf0/0xdf0
[  142.575775][ T5377]  vfs_write+0x294/0x1100
[  142.580146][ T5377]  ? reacquire_held_locks+0x4c0/0x4c0
[  142.585565][ T5377]  ? kernel_write+0x6c0/0x6c0
[  142.590256][ T5377]  ? __fget_files+0x256/0x400
[  142.594943][ T5377]  ? __fget_light+0x173/0x200
[  142.599633][ T5377]  ksys_write+0x1f0/0x250
[  142.603999][ T5377]  ? __ia32_sys_read+0xb0/0xb0
[  142.608778][ T5377]  do_syscall_64+0xd3/0x250
[  142.613287][ T5377]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  142.619193][ T5377] RIP: 0033:0x7f321d319da9
[  142.623708][ T5377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
16:49:29 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x0, 0x0, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x16, &(0x7f00000000c0)=@string={0x16, 0x3, "c748fabe8a17426ba82cac8c2a1ed517401606f8"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]})
syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}]})
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7f, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^4'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x89, 0x58, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x1f}, 0x8, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9d, 0x2, 0x3, 0x1, 0x0, 0xf6, {0x9, 0x21, 0x20, 0x7f, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x51, 0x4, 0xf6, 0x1, 0x30, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "10cec12b"}}]})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x0, 0x0, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x16, &(0x7f00000000c0)=@string={0x16, 0x3, "c748fabe8a17426ba82cac8c2a1ed517401606f8"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) (async)
syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) (async)
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7f, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^4'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x89, 0x58, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x1f}, 0x8, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]}) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9d, 0x2, 0x3, 0x1, 0x0, 0xf6, {0x9, 0x21, 0x20, 0x7f, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x51, 0x4, 0xf6, 0x1, 0x30, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "10cec12b"}}]}) (async)

[  142.643333][ T5377] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.651782][ T5377] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  142.659783][ T5377] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  142.667791][ T5377] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  142.675792][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.683793][ T5377] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  142.691809][ T5377]  </TASK>
[  142.700004][    T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  142.712384][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.725522][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  142.728530][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.734605][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
16:49:29 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 86)

16:49:29 executing program 0:
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x10, 0x16, {0x16, 0x1, "db27d5b8ea23e287d26def5ffad8800d8a84eb54"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x2, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x1, 0x3, "e797476d", "5a596a95"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0xf6, 0x3f, 0x7f, 0x5, 0x3}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x20, 0x8, 0x6b, "7ecbfb7d56f61e3d1a4f6c5056797a27f92674780cc7a51d48c9cbd69f36995140b054796bfd515049fb11e5ad0167c23ae6f57e6588a4b3eb99c3b5acc8c6682f97928144d39320c5eced120bda5076033ed2d6e26dac30e2a26d34ffd31bd64840b6916eadb4f0019f2e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000400)={0x40, 0xb, 0x2, "43d2"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "ba1e"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x93}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x1f}})
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x3, "0675bf"}, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x0, 0x0, 0x3, "0675bf"}, 0x0, 0x0})

[  142.774973][    T9] usb 1-1: USB disconnect, device number 25
[  142.805993][   T22] usb 3-1: can't set config #1, error -71
[  142.823404][   T22] usb 3-1: USB disconnect, device number 22
[  142.827518][ T5387] FAULT_INJECTION: forcing a failure.
[  142.827518][ T5387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.842404][ T5387] CPU: 0 PID: 5387 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  142.852763][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  142.862849][ T5387] Call Trace:
[  142.866159][ T5387]  <TASK>
[  142.869117][ T5387]  dump_stack_lvl+0x125/0x1b0
[  142.873847][ T5387]  should_fail_ex+0x496/0x5b0
[  142.878561][ T5387]  _copy_from_user+0x30/0xf0
[  142.883203][ T5387]  input_event_from_user+0x136/0x3b0
[  142.888533][ T5387]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  142.894379][ T5387]  ? preempt_count_sub+0x160/0x160
[  142.899527][ T5387]  ? input_inject_event+0x193/0x370
[  142.904769][ T5387]  evdev_write+0x378/0x750
[  142.909215][ T5387]  ? evdev_read+0xdf0/0xdf0
[  142.913728][ T5387]  ? security_file_permission+0x8e/0xb0
[  142.919296][ T5387]  ? evdev_read+0xdf0/0xdf0
[  142.923817][ T5387]  vfs_write+0x294/0x1100
[  142.928160][ T5387]  ? reacquire_held_locks+0x4c0/0x4c0
[  142.933562][ T5387]  ? kernel_write+0x6c0/0x6c0
[  142.938277][ T5387]  ? __fget_files+0x256/0x400
[  142.942968][ T5387]  ? __fget_light+0x173/0x200
[  142.947655][ T5387]  ksys_write+0x1f0/0x250
[  142.951997][ T5387]  ? __ia32_sys_read+0xb0/0xb0
[  142.956782][ T5387]  do_syscall_64+0xd3/0x250
[  142.961291][ T5387]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  142.967202][ T5387] RIP: 0033:0x7f321d319da9
[  142.971620][ T5387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  142.991235][ T5387] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.999659][ T5387] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  143.001200][ T4792] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  143.007633][ T5387] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:29 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 87)

[  143.007654][ T5387] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  143.007673][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.007691][ T5387] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  143.045587][ T4792] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input8
[  143.046722][ T5387]  </TASK>
[  143.108208][ T5391] FAULT_INJECTION: forcing a failure.
[  143.108208][ T5391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.121320][ T5391] CPU: 0 PID: 5391 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  143.131675][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  143.141750][ T5391] Call Trace:
[  143.145056][ T5391]  <TASK>
[  143.148013][ T5391]  dump_stack_lvl+0x125/0x1b0
[  143.152723][ T5391]  should_fail_ex+0x496/0x5b0
[  143.157435][ T5391]  _copy_from_user+0x30/0xf0
[  143.162056][ T5391]  input_event_from_user+0x136/0x3b0
[  143.167353][ T5391]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  143.173173][ T5391]  ? preempt_count_sub+0x160/0x160
[  143.178317][ T5391]  ? input_inject_event+0x193/0x370
[  143.183553][ T5391]  evdev_write+0x378/0x750
[  143.188020][ T5391]  ? evdev_read+0xdf0/0xdf0
[  143.192560][ T5391]  ? security_file_permission+0x8e/0xb0
[  143.198143][ T5391]  ? evdev_read+0xdf0/0xdf0
[  143.202681][ T5391]  vfs_write+0x294/0x1100
[  143.207041][ T5391]  ? reacquire_held_locks+0x4c0/0x4c0
[  143.212443][ T5391]  ? kernel_write+0x6c0/0x6c0
[  143.217161][ T5391]  ? __fget_files+0x256/0x400
[  143.221875][ T5391]  ? __fget_light+0x173/0x200
[  143.226583][ T5391]  ksys_write+0x1f0/0x250
[  143.230947][ T5391]  ? __ia32_sys_read+0xb0/0xb0
[  143.235746][ T5391]  do_syscall_64+0xd3/0x250
[  143.240279][ T5391]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  143.246210][ T5391] RIP: 0033:0x7f321d319da9
[  143.250642][ T5391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  143.270279][ T5391] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  143.278720][ T5391] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  143.286707][ T5391] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  143.294693][ T5391] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  143.302680][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.310672][ T5391] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  143.318671][ T5391]  </TASK>
[  143.322200][    T8] usb 2-1: device descriptor read/64, error -71
[  143.382874][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.397248][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:49:30 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 88)

[  143.477322][ T5393] FAULT_INJECTION: forcing a failure.
[  143.477322][ T5393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.490561][ T5393] CPU: 0 PID: 5393 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  143.497249][   T22] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  143.500901][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  143.509489][ T4792] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  143.518472][ T5393] Call Trace:
[  143.518484][ T5393]  <TASK>
[  143.518494][ T5393]  dump_stack_lvl+0x125/0x1b0
[  143.541341][ T5393]  should_fail_ex+0x496/0x5b0
[  143.546059][ T5393]  _copy_from_user+0x30/0xf0
[  143.550695][ T5393]  input_event_from_user+0x136/0x3b0
[  143.556023][ T5393]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  143.561859][ T5393]  ? preempt_count_sub+0x160/0x160
[  143.566973][ T5393]  ? input_inject_event+0x193/0x370
[  143.572189][ T5393]  evdev_write+0x378/0x750
[  143.576619][ T5393]  ? evdev_read+0xdf0/0xdf0
[  143.581132][ T5393]  ? security_file_permission+0x8e/0xb0
[  143.586696][ T5393]  ? evdev_read+0xdf0/0xdf0
[  143.591209][ T5393]  vfs_write+0x294/0x1100
[  143.595559][ T5393]  ? reacquire_held_locks+0x4c0/0x4c0
[  143.600956][ T5393]  ? kernel_write+0x6c0/0x6c0
[  143.605645][ T5393]  ? __fget_files+0x256/0x400
[  143.610333][ T5393]  ? __fget_light+0x173/0x200
[  143.615023][ T5393]  ksys_write+0x1f0/0x250
[  143.619362][ T5393]  ? __ia32_sys_read+0xb0/0xb0
[  143.624149][ T5393]  do_syscall_64+0xd3/0x250
[  143.628690][ T5393]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  143.634614][ T5393] RIP: 0033:0x7f321d319da9
[  143.639028][ T5393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  143.658640][ T5393] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  143.667076][ T5393] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:30 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 89)

[  143.675055][ T5393] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  143.683036][ T5393] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  143.691006][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.698978][ T5393] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  143.706952][ T5393]  </TASK>
[  143.746452][ T5395] FAULT_INJECTION: forcing a failure.
[  143.746452][ T5395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.759553][ T5395] CPU: 0 PID: 5395 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  143.769916][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  143.779971][ T5395] Call Trace:
[  143.783252][ T5395]  <TASK>
[  143.786179][ T5395]  dump_stack_lvl+0x125/0x1b0
[  143.790863][ T5395]  should_fail_ex+0x496/0x5b0
[  143.795555][ T5395]  _copy_from_user+0x30/0xf0
[  143.800152][ T5395]  input_event_from_user+0x136/0x3b0
[  143.805453][ T5395]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  143.811286][ T5395]  ? preempt_count_sub+0x160/0x160
[  143.816399][ T5395]  ? input_inject_event+0x193/0x370
[  143.821619][ T5395]  evdev_write+0x378/0x750
[  143.826067][ T5395]  ? evdev_read+0xdf0/0xdf0
[  143.830594][ T5395]  ? security_file_permission+0x8e/0xb0
[  143.836166][ T5395]  ? evdev_read+0xdf0/0xdf0
[  143.840686][ T5395]  vfs_write+0x294/0x1100
[  143.845040][ T5395]  ? reacquire_held_locks+0x4c0/0x4c0
[  143.850452][ T5395]  ? kernel_write+0x6c0/0x6c0
[  143.855152][ T5395]  ? __fget_files+0x256/0x400
[  143.859845][ T5395]  ? __fget_light+0x173/0x200
[  143.864535][ T5395]  ksys_write+0x1f0/0x250
[  143.868880][ T5395]  ? __ia32_sys_read+0xb0/0xb0
[  143.873669][ T5395]  do_syscall_64+0xd3/0x250
[  143.878188][ T5395]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  143.884119][ T5395] RIP: 0033:0x7f321d319da9
[  143.888531][ T5395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  143.908147][ T5395] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  143.915444][   T22] usb 3-1: Using ep0 maxpacket: 8
[  143.916572][ T5395] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  143.916595][ T5395] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  143.916615][ T5395] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:30 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 90)

[  143.916634][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  143.953516][ T5395] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  143.961494][ T5395]  </TASK>
[  143.965677][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  144.012578][ T5398] FAULT_INJECTION: forcing a failure.
[  144.012578][ T5398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.025659][ T5398] CPU: 0 PID: 5398 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  144.036016][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  144.046086][ T5398] Call Trace:
[  144.049365][ T5398]  <TASK>
[  144.052298][ T5398]  dump_stack_lvl+0x125/0x1b0
[  144.056989][ T5398]  should_fail_ex+0x496/0x5b0
[  144.061671][ T5398]  _copy_from_user+0x30/0xf0
[  144.066271][ T5398]  input_event_from_user+0x136/0x3b0
[  144.071568][ T5398]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  144.077378][ T5398]  ? preempt_count_sub+0x160/0x160
[  144.082503][ T5398]  ? input_inject_event+0x193/0x370
[  144.087727][ T5398]  evdev_write+0x378/0x750
[  144.092195][ T5398]  ? evdev_read+0xdf0/0xdf0
[  144.096742][ T5398]  ? security_file_permission+0x8e/0xb0
[  144.102340][ T5398]  ? evdev_read+0xdf0/0xdf0
[  144.106865][ T5398]  vfs_write+0x294/0x1100
[  144.111219][ T5398]  ? reacquire_held_locks+0x4c0/0x4c0
[  144.116638][ T5398]  ? kernel_write+0x6c0/0x6c0
[  144.121325][ T5398]  ? __fget_files+0x256/0x400
[  144.126023][ T5398]  ? __fget_light+0x173/0x200
[  144.130723][ T5398]  ksys_write+0x1f0/0x250
[  144.135076][ T5398]  ? __ia32_sys_read+0xb0/0xb0
[  144.139876][ T5398]  do_syscall_64+0xd3/0x250
[  144.144390][ T5398]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  144.150295][ T5398] RIP: 0033:0x7f321d319da9
[  144.154707][ T5398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  144.174319][ T5398] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.182735][ T5398] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  144.190711][ T5398] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  144.198694][ T5398] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:30 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 91)

[  144.206680][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.214651][ T5398] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  144.222625][ T5398]  </TASK>
[  144.262700][ T5400] FAULT_INJECTION: forcing a failure.
[  144.262700][ T5400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.275812][ T5400] CPU: 0 PID: 5400 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  144.285936][   T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  144.286147][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  144.295806][   T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  144.305802][ T5400] Call Trace:
[  144.305814][ T5400]  <TASK>
[  144.305824][ T5400]  dump_stack_lvl+0x125/0x1b0
[  144.326332][ T5400]  should_fail_ex+0x496/0x5b0
[  144.331024][ T5400]  _copy_from_user+0x30/0xf0
[  144.335637][ T5400]  input_event_from_user+0x136/0x3b0
[  144.340954][ T5400]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  144.346770][ T5400]  ? preempt_count_sub+0x160/0x160
[  144.351883][ T5400]  ? input_inject_event+0x193/0x370
[  144.357097][ T5400]  evdev_write+0x378/0x750
[  144.361557][ T5400]  ? evdev_read+0xdf0/0xdf0
[  144.366103][ T5400]  ? security_file_permission+0x8e/0xb0
[  144.371690][ T5400]  ? evdev_read+0xdf0/0xdf0
[  144.376237][ T5400]  vfs_write+0x294/0x1100
[  144.380595][ T5400]  ? reacquire_held_locks+0x4c0/0x4c0
[  144.385996][ T5400]  ? kernel_write+0x6c0/0x6c0
[  144.390706][ T5400]  ? __fget_files+0x256/0x400
[  144.395420][ T5400]  ? __fget_light+0x173/0x200
[  144.400120][ T5400]  ksys_write+0x1f0/0x250
[  144.404460][ T5400]  ? __ia32_sys_read+0xb0/0xb0
[  144.409236][ T5400]  do_syscall_64+0xd3/0x250
[  144.413755][ T5400]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  144.419672][ T5400] RIP: 0033:0x7f321d319da9
[  144.424125][ T5400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  144.443765][ T5400] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.452196][ T5400] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:31 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 92)

[  144.460270][ T5400] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  144.468264][ T5400] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  144.476255][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.484235][ T5400] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  144.492210][ T5400]  </TASK>
[  144.496034][    T8] usb 2-1: device descriptor read/64, error -71
[  144.537517][ T5402] FAULT_INJECTION: forcing a failure.
[  144.537517][ T5402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.550848][ T5402] CPU: 0 PID: 5402 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  144.561177][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  144.571229][ T5402] Call Trace:
[  144.574514][ T5402]  <TASK>
[  144.577458][ T5402]  dump_stack_lvl+0x125/0x1b0
[  144.582180][ T5402]  should_fail_ex+0x496/0x5b0
[  144.586919][ T5402]  _copy_from_user+0x30/0xf0
[  144.591540][ T5402]  input_event_from_user+0x136/0x3b0
[  144.596845][ T5402]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  144.602665][ T5402]  ? preempt_count_sub+0x160/0x160
[  144.607793][ T5402]  ? input_inject_event+0x193/0x370
[  144.613019][ T5402]  evdev_write+0x378/0x750
[  144.617469][ T5402]  ? evdev_read+0xdf0/0xdf0
[  144.621985][ T5402]  ? security_file_permission+0x8e/0xb0
[  144.627553][ T5402]  ? evdev_read+0xdf0/0xdf0
[  144.632064][ T5402]  vfs_write+0x294/0x1100
[  144.636414][ T5402]  ? reacquire_held_locks+0x4c0/0x4c0
[  144.641816][ T5402]  ? kernel_write+0x6c0/0x6c0
[  144.646531][ T5402]  ? __fget_files+0x256/0x400
[  144.651262][ T5402]  ? __fget_light+0x173/0x200
[  144.655955][ T5402]  ksys_write+0x1f0/0x250
[  144.660305][ T5402]  ? __ia32_sys_read+0xb0/0xb0
[  144.665101][ T5402]  do_syscall_64+0xd3/0x250
[  144.669612][ T5402]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  144.675521][ T5402] RIP: 0033:0x7f321d319da9
[  144.679933][ T5402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  144.699541][ T5402] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.707957][ T5402] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  144.715937][ T5402] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  144.723938][ T5402] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:31 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 93)

[  144.731926][ T5402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.739896][ T5402] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  144.747873][ T5402]  </TASK>
[  144.751274][    T9] usb 1-1: Using ep0 maxpacket: 16
[  144.792059][ T5404] FAULT_INJECTION: forcing a failure.
[  144.792059][ T5404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.805248][ T5404] CPU: 1 PID: 5404 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  144.815622][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  144.825690][ T5404] Call Trace:
[  144.828971][ T5404]  <TASK>
[  144.831908][ T5404]  dump_stack_lvl+0x125/0x1b0
[  144.836628][ T5404]  should_fail_ex+0x496/0x5b0
[  144.841336][ T5404]  _copy_from_user+0x30/0xf0
[  144.845938][ T5404]  input_event_from_user+0x136/0x3b0
[  144.851269][ T5404]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  144.857081][ T5404]  ? preempt_count_sub+0x160/0x160
[  144.862229][ T5404]  ? input_inject_event+0x193/0x370
[  144.867430][ T5404]  evdev_write+0x378/0x750
[  144.871861][ T5404]  ? evdev_read+0xdf0/0xdf0
[  144.875523][    T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  144.876364][ T5404]  ? security_file_permission+0x8e/0xb0
[  144.876416][ T5404]  ? evdev_read+0xdf0/0xdf0
[  144.884729][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  144.890249][ T5404]  vfs_write+0x294/0x1100
[  144.890289][ T5404]  ? reacquire_held_locks+0x4c0/0x4c0
[  144.894789][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  144.902912][ T5404]  ? kernel_write+0x6c0/0x6c0
[  144.902953][ T5404]  ? __fget_files+0x256/0x400
[  144.907313][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  144.912620][ T5404]  ? __fget_light+0x173/0x200
[  144.920777][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  144.925402][ T5404]  ksys_write+0x1f0/0x250
[  144.930083][    T9] usb 1-1: config 0 has no interface number 0
[  144.938208][ T5404]  ? __ia32_sys_read+0xb0/0xb0
[  144.938251][ T5404]  do_syscall_64+0xd3/0x250
[  144.944412][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  144.951729][ T5404]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  144.951779][ T5404] RIP: 0033:0x7f321d319da9
[  144.961716][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  144.962138][ T5404] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  144.962169][ T5404] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.966988][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  144.971404][ T5404] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  144.979027][    T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.984795][ T5404] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  144.991342][    T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  145.000188][ T5404] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:31 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231326e53f070c00002ddcedfb5a49fd0bc0178910badf002a901083f6"], 0x0}, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000ff9412201340000102030109022d00010100707f0904001f01030122730f0905810320000005d3090502030000010008"], &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x0, 0x6, 0x8, 0x6}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x78, 0x74, 0x97}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0xba, &(0x7f0000000200)=@string={0xba, 0x3, "c07d70e39549ef484a9db9cccc0e762458aa24638b488611a52755bef9848756470b1d4d8f36132340e53c09d2ac5f7dbd0de9a1ce6d349e592ee35084908fa052c4aba6d332d1f2fa4729861a5d4e4131a7d1bd614ac437c681424d3a20ac2969f358e0d3798302d17aa3ea6e246a3303fc984c202a9ef9e60cdfd3a297bd04bec9a6fa1944b88163f15bd638c05ebce8f1a30cbc5c44234b27b3f78eb4571701eb7c39651ad0ab4ac0a7d170588e13faf78663f273bce0"}}, {0xcf, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x6f, &(0x7f0000000400)=@string={0x6f, 0x3, "2948725cf9939e3339b74e9dcaf9f77fb09f1520671c1212b8f1c2c2ea6f9d30de1040243c3ef5bf0ebcffff6bc8e027188886328d000f592e81ed09741ed484aaaf41593f187606197c7e348b7712977a7ea920e2a775b5f036c9016a1ae2b3ece2ae7f059ea334ba8f8638e1"}}]})
syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="4004e50000080000002a0788315405d896fb286f10578557610000e54246db2f5a00705403b839e27a6c937009efbeded23364cde0b4129650878fc2044b7baf3a9af1fb20ff3159e0537e9f6f06f269b8d96cc73fbeb24a9de10f3e356fe1684190979dc7ce0377b1302a3f93af70a9aba07a2cdf2d29f2abae96f8f29e4675b8b9ebea6e5cc1a1a578b658f180a0608c923199bfb07c4c706aa07ff33b5cf582a5b5d074a73f817e895dcd31bad60a233e09e55b60533197a981335b4e80ba8ba496e307631803cc32959f11a55df3ed4f2d32bf3b06a1041177fc09ad7100"/235], &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0xfffffffffffffffe, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x10, 0xe0, 0x8c, "d59c5c07", "8618b5f2"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x8, 0x80, 0xff, 0x4, 0x9}}}, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x0, 0x7, 0xc4, "b4f749db14d65feba403a71cb13d012c45880e81d5d9d795a1d2afd439f8b4b2ddb0bb2f84c416733c8379ed76375f8bc691537528c8330b98b1e9054ba9902141dc1a422dfa7da29a5cbdf0246c2f83dabab09661adef6a95c8f1515b7a50067ea0001e5b9f8029d5d8b0b35e335cc06c81b432380ad0a5d74a8f339ad342b4103c1017913dae4abbec16f01606d7f86c186f902793a8c036e4901c8171fee9cc6542c4536e64cf7c2330f37e900ad9b5f55e3af15cddeaeaf3299b15f6ea13fb09ce83"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001100)={0x40, 0xb, 0x2, '`)'}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001200)={0x40, 0x19, 0x2, '=f'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}}) (async)
syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, &(0x7f00000002c0)={0x40, 0x30, 0x50, {0x50, 0x24, "5d48a351dc36968f4945d3f03e7389e7d9ef62df0634acf3a0ce658d20d70e3fee4ebb24fb6249a1fc496915480d3edda5695e1297c0325102f78ce594286f4bd626e304b3c8f1e31fd4b886a8fa"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000340)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0x4, "d6"}, @local=@item_012={0x0, 0x2, 0x2a115f5c1829a92c}, @main=@item_4={0x3, 0x0, 0xc, "13afed43"}, @global=@item_4={0x3, 0x1, 0x4, 'Z[\\T'}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x567}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x0, 0x1b, 0x66, "e9b1d976d05942a6e3aa3b825095be4956745be6d1aebc96d78edd99e220c7f69d2d2b2060ad987e00018d26f0c05277f8a0a830284a9221e1cbb3379c700beedfd90816d8bf3bb4f5b91a7ca53a7ecc65d25d3a2e0b26e2038a7a7fbe699252a533de9718ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001640)={0x0, 0x8, 0x1}, &(0x7f0000001680)={0x20, 0x1, 0x37, "22b774a149bde1f2c58c88b498327c8d4480c3ae35fa7ecfe4ecc0516a20818d05b374934eccbfc682664a37605e49da1286c2cb08faa4"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0x5}}) (async)
syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x11, 0x4d, {0x4d, 0x4, "1eadf91486c33221a36d6dca3d6da73c17cbc347fef8fbad4d44f01bd5d96962deafa057cceb674de33589298d84046f4ee0385a5783bd60b4a53f011670a58d09c0231dfe807064a88f45"}}, &(0x7f0000000580)={0x0, 0x3, 0x54, @string={0x54, 0x3, "6cb0cd60443ef85f69be77a9f7bc966762e07e048ca319c1c15e01825e99e8274b0507eb7f86fe4bc3c4c998b6ccb9375b71b451c676319daafd7b444ef4dac8b954149cdefba1c93c11eada582d9e5560f2"}}, &(0x7f0000000600)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xd1, 0x6, 0x3, 0x0, 0x8, [0x0, 0xc0, 0xff0000, 0xc000, 0x0, 0xffc03f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2b505e4b052ae8144cdc651c46219f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "216732dcb7087ad33ac349171a8240a1"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0x4, "2abc9c6a", "df593018"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xca, 0x60, 0x7, 0x20, 0x3f, 0x8, 0x2}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x40, 0x6, 0x98, "d8eea23b43ed591d35032b86d622f2091bec799c8284c206259f3ca3a5b1afa2e01760343e40b43d1b0c3d067444ba3b2b997e7b875be494bf87a374faea1a02d4f860f701486ad1844fdc286e7d8fc631c081ece2c7124febf4357faa5a9490bad5d75025af807dfa12edf73c18003611c3f120ed8e79d643882af007d6e8f31855b957420a5540871a6f41d590b69ce46f2e7738bd200f"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "37db"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="ec74ffbe164f"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'Zo'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}})

16:49:31 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  145.000210][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.000229][ T5404] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  145.000254][ T5404]  </TASK>
[  145.040030][ T4792] usb 5-1: USB disconnect, device number 22
[  145.046491][    T9] usb 1-1: config 0 interface 125 has no altsetting 0
[  145.046528][    T9] usb 1-1: config 0 interface 125 has no altsetting 2
16:49:31 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 94)

[  145.215587][    T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  145.224737][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.233246][    T9] usb 1-1: Product: syz
[  145.237492][    T9] usb 1-1: Manufacturer: syz
[  145.242133][    T9] usb 1-1: SerialNumber: syz
[  145.243795][ T5410] FAULT_INJECTION: forcing a failure.
[  145.243795][ T5410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.252432][    T9] usb 1-1: config 0 descriptor??
[  145.259954][ T5410] CPU: 1 PID: 5410 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  145.259991][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  145.260010][ T5410] Call Trace:
[  145.288612][ T5410]  <TASK>
[  145.291560][ T5410]  dump_stack_lvl+0x125/0x1b0
[  145.296273][ T5410]  should_fail_ex+0x496/0x5b0
[  145.300962][ T5410]  _copy_from_user+0x30/0xf0
[  145.305573][ T5410]  input_event_from_user+0x136/0x3b0
[  145.308363][    T9] usb 1-1: selecting invalid altsetting 2
[  145.310881][ T5410]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  145.322415][ T5410]  ? preempt_count_sub+0x160/0x160
[  145.327556][ T5410]  ? input_inject_event+0x193/0x370
[  145.332771][ T5410]  evdev_write+0x378/0x750
[  145.337231][ T5410]  ? evdev_read+0xdf0/0xdf0
[  145.341789][ T5410]  ? security_file_permission+0x8e/0xb0
[  145.347393][ T5410]  ? evdev_read+0xdf0/0xdf0
[  145.351934][ T5410]  vfs_write+0x294/0x1100
[  145.356299][ T5410]  ? reacquire_held_locks+0x4c0/0x4c0
[  145.361700][ T5410]  ? kernel_write+0x6c0/0x6c0
[  145.366395][ T5410]  ? __fget_files+0x256/0x400
[  145.371087][ T5410]  ? __fget_light+0x173/0x200
[  145.375777][ T5410]  ksys_write+0x1f0/0x250
[  145.380138][ T5410]  ? __ia32_sys_read+0xb0/0xb0
[  145.384918][ T5410]  do_syscall_64+0xd3/0x250
[  145.389435][ T5410]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  145.395361][ T5410] RIP: 0033:0x7f321d319da9
[  145.399787][ T5410] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  145.419400][ T5410] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.427816][ T5410] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  145.435786][ T5410] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  145.443760][ T5410] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  145.451731][ T5410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.455429][    T8] usb 2-1: device descriptor read/64, error -71
16:49:32 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 95)

[  145.459695][ T5410] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  145.459724][ T5410]  </TASK>
[  145.509793][ T5412] FAULT_INJECTION: forcing a failure.
[  145.509793][ T5412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.522857][ T5412] CPU: 1 PID: 5412 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  145.533182][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  145.543241][ T5412] Call Trace:
[  145.546528][ T5412]  <TASK>
[  145.549466][ T5412]  dump_stack_lvl+0x125/0x1b0
[  145.554179][ T5412]  should_fail_ex+0x496/0x5b0
[  145.558948][ T5412]  _copy_from_user+0x30/0xf0
[  145.563547][ T5412]  input_event_from_user+0x136/0x3b0
[  145.568838][ T5412]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  145.574648][ T5412]  ? preempt_count_sub+0x160/0x160
[  145.579764][ T5412]  ? input_inject_event+0x193/0x370
[  145.584968][ T5412]  evdev_write+0x378/0x750
[  145.589395][ T5412]  ? evdev_read+0xdf0/0xdf0
[  145.593905][ T5412]  ? security_file_permission+0x8e/0xb0
[  145.599470][ T5412]  ? evdev_read+0xdf0/0xdf0
[  145.603983][ T5412]  vfs_write+0x294/0x1100
[  145.608334][ T5412]  ? reacquire_held_locks+0x4c0/0x4c0
[  145.613713][ T5412]  ? kernel_write+0x6c0/0x6c0
[  145.618399][ T5412]  ? __fget_files+0x256/0x400
[  145.623097][ T5412]  ? __fget_light+0x173/0x200
[  145.627807][ T5412]  ksys_write+0x1f0/0x250
[  145.632179][ T5412]  ? __ia32_sys_read+0xb0/0xb0
[  145.636995][ T5412]  do_syscall_64+0xd3/0x250
[  145.641548][ T5412]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  145.647481][ T5412] RIP: 0033:0x7f321d319da9
[  145.651908][ T5412] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  145.671538][ T5412] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.679957][ T5412] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  145.687942][ T5412] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  145.695940][ T5412] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:32 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x0, 0x0, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x16, &(0x7f00000000c0)=@string={0x16, 0x3, "c748fabe8a17426ba82cac8c2a1ed517401606f8"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]})
syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}]})
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7f, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^4'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x89, 0x58, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x1f}, 0x8, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9d, 0x2, 0x3, 0x1, 0x0, 0xf6, {0x9, 0x21, 0x20, 0x7f, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x51, 0x4, 0xf6, 0x1, 0x30, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "10cec12b"}}]})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x0, 0x0, 0x8, 0x6}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x6, [{0x16, &(0x7f00000000c0)=@string={0x16, 0x3, "c748fabe8a17426ba82cac8c2a1ed517401606f8"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) (async)
syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) (async)
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7f, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '^4'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x89, 0x58, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x0, 0xff}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x1f}, 0x8, &(0x7f00000003c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}]}) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9d, 0x2, 0x3, 0x1, 0x0, 0xf6, {0x9, 0x21, 0x20, 0x7f, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x8, 0xc9}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x51, 0x4, 0xf6, 0x1, 0x30, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "10cec12b"}}]}) (async)

[  145.703961][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.711964][ T5412] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  145.719971][ T5412]  </TASK>
16:49:32 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 96)

[  145.755592][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  145.764675][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.813558][ T5416] FAULT_INJECTION: forcing a failure.
[  145.813558][ T5416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.826693][ T5416] CPU: 0 PID: 5416 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  145.835952][   T22] usb 3-1: can't set config #1, error -71
[  145.837032][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  145.837052][ T5416] Call Trace:
[  145.837063][ T5416]  <TASK>
[  145.837075][ T5416]  dump_stack_lvl+0x125/0x1b0
[  145.845592][   T22] usb 3-1: USB disconnect, device number 23
[  145.852816][ T5416]  should_fail_ex+0x496/0x5b0
[  145.852853][ T5416]  _copy_from_user+0x30/0xf0
[  145.879008][ T5416]  input_event_from_user+0x136/0x3b0
[  145.884330][ T5416]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  145.890152][ T5416]  ? preempt_count_sub+0x160/0x160
[  145.895272][ T5416]  ? input_inject_event+0x193/0x370
[  145.900479][ T5416]  evdev_write+0x378/0x750
[  145.904914][ T5416]  ? evdev_read+0xdf0/0xdf0
[  145.909448][ T5416]  ? security_file_permission+0x8e/0xb0
[  145.915014][ T5416]  ? evdev_read+0xdf0/0xdf0
[  145.919528][ T5416]  vfs_write+0x294/0x1100
[  145.923867][ T5416]  ? reacquire_held_locks+0x4c0/0x4c0
[  145.929255][ T5416]  ? kernel_write+0x6c0/0x6c0
[  145.933961][ T5416]  ? __fget_files+0x256/0x400
[  145.938653][ T5416]  ? __fget_light+0x173/0x200
[  145.943339][ T5416]  ksys_write+0x1f0/0x250
[  145.947679][ T5416]  ? __ia32_sys_read+0xb0/0xb0
[  145.952465][ T5416]  do_syscall_64+0xd3/0x250
[  145.957007][ T5416]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  145.962940][ T5416] RIP: 0033:0x7f321d319da9
[  145.967353][ T5416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  145.985425][ T4792] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  145.986973][ T5416] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.987015][ T5416] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
16:49:32 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 97)

[  145.987040][ T5416] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  146.018904][ T5416] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  146.026874][ T5416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.034845][ T5416] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  146.042821][ T5416]  </TASK>
[  146.047833][    T8] usb 2-1: device descriptor read/64, error -71
[  146.085751][ T5418] FAULT_INJECTION: forcing a failure.
[  146.085751][ T5418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.099091][ T5418] CPU: 0 PID: 5418 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  146.109437][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  146.119490][ T5418] Call Trace:
[  146.122765][ T5418]  <TASK>
[  146.125693][ T5418]  dump_stack_lvl+0x125/0x1b0
[  146.130392][ T5418]  should_fail_ex+0x496/0x5b0
[  146.135104][ T5418]  _copy_from_user+0x30/0xf0
[  146.139722][ T5418]  input_event_from_user+0x136/0x3b0
[  146.145035][ T5418]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  146.150864][ T5418]  ? preempt_count_sub+0x160/0x160
[  146.156000][ T5418]  ? input_inject_event+0x193/0x370
[  146.161227][ T5418]  evdev_write+0x378/0x750
[  146.165679][ T5418]  ? evdev_read+0xdf0/0xdf0
[  146.170189][ T5418]  ? security_file_permission+0x8e/0xb0
[  146.175749][ T5418]  ? evdev_read+0xdf0/0xdf0
[  146.180260][ T5418]  vfs_write+0x294/0x1100
[  146.184614][ T5418]  ? reacquire_held_locks+0x4c0/0x4c0
[  146.189994][ T5418]  ? kernel_write+0x6c0/0x6c0
[  146.194682][ T5418]  ? __fget_files+0x256/0x400
[  146.199374][ T5418]  ? __fget_light+0x173/0x200
[  146.204072][ T5418]  ksys_write+0x1f0/0x250
[  146.208421][ T5418]  ? __ia32_sys_read+0xb0/0xb0
[  146.213217][ T5418]  do_syscall_64+0xd3/0x250
[  146.217727][ T5418]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  146.223634][ T5418] RIP: 0033:0x7f321d319da9
[  146.228060][ T5418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  146.247677][ T5418] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.255641][   T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  146.256079][ T5418] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  146.256102][ T5418] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  146.256122][ T5418] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  146.256141][ T5418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.295554][ T5418] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  146.303531][ T5418]  </TASK>
[  146.306670][    C0] usb 1-1: async_complete: urb error -32
[  146.312389][    T9] get_1284_register: usb error -32
[  146.318093][    T9] parport5: fix this legacy no-device port driver!
[  146.325184][    T8] usb usb2-port1: attempt power cycle
16:49:32 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 98)

[  146.335481][ T4792] usb 5-1: Using ep0 maxpacket: 16
[  146.374883][ T5420] FAULT_INJECTION: forcing a failure.
[  146.374883][ T5420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.388027][ T5420] CPU: 1 PID: 5420 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  146.398383][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  146.408440][ T5420] Call Trace:
[  146.411733][ T5420]  <TASK>
[  146.414684][ T5420]  dump_stack_lvl+0x125/0x1b0
[  146.419393][ T5420]  should_fail_ex+0x496/0x5b0
[  146.424077][ T5420]  _copy_from_user+0x30/0xf0
[  146.428685][ T5420]  input_event_from_user+0x136/0x3b0
[  146.434007][ T5420]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  146.439842][ T5420]  ? preempt_count_sub+0x160/0x160
[  146.444958][ T5420]  ? input_inject_event+0x193/0x370
[  146.450162][ T5420]  evdev_write+0x378/0x750
[  146.454611][ T5420]  ? evdev_read+0xdf0/0xdf0
[  146.459158][ T5420]  ? security_file_permission+0x8e/0xb0
[  146.464748][ T5420]  ? evdev_read+0xdf0/0xdf0
[  146.469273][ T5420]  vfs_write+0x294/0x1100
[  146.473623][ T5420]  ? reacquire_held_locks+0x4c0/0x4c0
[  146.479023][ T5420]  ? kernel_write+0x6c0/0x6c0
[  146.483715][ T5420]  ? __fget_files+0x256/0x400
[  146.488403][ T5420]  ? __fget_light+0x173/0x200
[  146.493088][ T5420]  ksys_write+0x1f0/0x250
[  146.497431][ T5420]  ? __ia32_sys_read+0xb0/0xb0
[  146.502205][ T5420]  do_syscall_64+0xd3/0x250
[  146.506734][ T5420]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  146.512668][ T5420] RIP: 0033:0x7f321d319da9
[  146.517092][ T5420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  146.536721][ T5420] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.545144][ T5420] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  146.553118][ T5420] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  146.561089][ T5420] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 99)

[  146.569059][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.577039][ T5420] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  146.585044][ T5420]  </TASK>
[  146.626760][ T5424] FAULT_INJECTION: forcing a failure.
[  146.626760][ T5424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.639918][ T5424] CPU: 1 PID: 5424 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  146.650269][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  146.660321][ T5424] Call Trace:
[  146.663599][ T5424]  <TASK>
[  146.666529][ T5424]  dump_stack_lvl+0x125/0x1b0
[  146.671216][ T5424]  should_fail_ex+0x496/0x5b0
[  146.675912][ T5424]  _copy_from_user+0x30/0xf0
[  146.680554][ T5424]  input_event_from_user+0x136/0x3b0
[  146.685866][ T5424]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  146.691684][ T5424]  ? preempt_count_sub+0x160/0x160
[  146.696818][ T5424]  ? input_inject_event+0x193/0x370
[  146.702023][ T5424]  evdev_write+0x378/0x750
[  146.706455][ T5424]  ? evdev_read+0xdf0/0xdf0
[  146.710974][ T5424]  ? security_file_permission+0x8e/0xb0
[  146.716567][ T5424]  ? evdev_read+0xdf0/0xdf0
[  146.721085][ T5424]  vfs_write+0x294/0x1100
[  146.725440][ T5424]  ? reacquire_held_locks+0x4c0/0x4c0
[  146.730849][ T5424]  ? kernel_write+0x6c0/0x6c0
[  146.735551][ T5424]  ? __fget_files+0x256/0x400
[  146.740239][ T5424]  ? __fget_light+0x173/0x200
[  146.744924][ T5424]  ksys_write+0x1f0/0x250
[  146.745403][    T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  146.749255][ T5424]  ? __ia32_sys_read+0xb0/0xb0
[  146.749298][ T5424]  do_syscall_64+0xd3/0x250
[  146.766142][ T5424]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  146.772086][ T5424] RIP: 0033:0x7f321d319da9
[  146.776502][ T5424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  146.796113][ T5424] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.804540][ T5424] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  146.812528][ T5424] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 100)

[  146.820521][ T5424] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
[  146.828491][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.836463][ T5424] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  146.844446][ T5424]  </TASK>
[  146.884353][ T5426] FAULT_INJECTION: forcing a failure.
[  146.884353][ T5426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.897720][ T5426] CPU: 0 PID: 5426 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-00189-gd99e42ce6b83 #0
[  146.905519][ T4792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.908043][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  146.908062][ T5426] Call Trace:
[  146.908072][ T5426]  <TASK>
[  146.908082][ T5426]  dump_stack_lvl+0x125/0x1b0
[  146.918954][ T4792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  146.928966][ T5426]  should_fail_ex+0x496/0x5b0
[  146.928999][ T5426]  _copy_from_user+0x30/0xf0
[  146.932297][ T4792] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  146.935191][ T5426]  input_event_from_user+0x136/0x3b0
[  146.939892][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.952594][ T5426]  ? input_ff_effect_from_user+0x2c0/0x2c0
[  146.957524][   T22] usb 3-1: Using ep0 maxpacket: 8
[  146.961840][ T5426]  ? preempt_count_sub+0x160/0x160
[  146.961871][ T5426]  ? input_inject_event+0x193/0x370
[  146.961904][ T5426]  evdev_write+0x378/0x750
[  146.974977][ T4792] usb 5-1: config 0 descriptor??
[  146.976164][ T5426]  ? evdev_read+0xdf0/0xdf0
[  146.976205][ T5426]  ? security_file_permission+0x8e/0xb0
[  146.976254][ T5426]  ? evdev_read+0xdf0/0xdf0
[  147.029265][ T5426]  vfs_write+0x294/0x1100
[  147.033608][ T5426]  ? reacquire_held_locks+0x4c0/0x4c0
[  147.038992][ T5426]  ? kernel_write+0x6c0/0x6c0
[  147.043680][ T5426]  ? __fget_files+0x256/0x400
[  147.048371][ T5426]  ? __fget_light+0x173/0x200
[  147.053077][ T5426]  ksys_write+0x1f0/0x250
[  147.057447][ T5426]  ? __ia32_sys_read+0xb0/0xb0
[  147.062260][ T5426]  do_syscall_64+0xd3/0x250
[  147.066801][ T5426]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  147.072733][ T5426] RIP: 0033:0x7f321d319da9
[  147.077148][ T5426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  147.096759][ T5426] RSP: 002b:00007f321c69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  147.105181][ T5426] RAX: ffffffffffffffda RBX: 00007f321d447f80 RCX: 00007f321d319da9
[  147.113158][ T5426] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000003
[  147.121132][ T5426] RBP: 00007f321c69b120 R08: 0000000000000000 R09: 0000000000000000
16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

[  147.129111][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  147.137106][ T5426] R13: 0000000000000006 R14: 00007f321d447f80 R15: 00007ffe17c55238
[  147.145080][ T5426]  </TASK>
16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x18)

16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x30)

[  147.185545][    T8] usb 2-1: device descriptor read/8, error -71
16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x48)

16:49:33 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCGMASK(r2, 0x541b, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0x70, 0x63, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x2e, {{0x8, 0x24, 0x6, 0x0, 0x0, "b005b2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x1, 0x0, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @acm={0x4, 0x24, 0x2, 0xd}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x7f, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x7fff, 0x3f, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x28, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xfa, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x8, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x0, 0x0, 0xff, 0x69}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x5, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0xb, "317334ca1a804068e0e80a752747273b5e893531c389a3a9358213ac95ad5bebfc501a9a29ec66837e79e134a90ffe538cb30ed201e230edd6f41b5e933b"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0x3, "09a1b94d2b1459a416"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4b90bfac2f2571fc6cc5ec7e2cc6505d"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "09ea63bc42a02949679e90b942caf665663f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "d68fb16e8cb824883f3d61480803ca75f1ac41963f975d98935ccd7c03f32516cc456e75cbae579a349fef0ea6babfa1479a9762dd00940cdc4f7c00d70da5d88d496b6caf3d4d4665bd0662e978bc96b8cab63a9542408b13546c8a51ddd1650aeeb22fc612079217a10d98a3a72daf38312a623cb68708a0f8c68ef84b3b6c9a212f3ec3aab62c957d1e84ea79505431f68d69f37e6dcaa821ed914633ece541c1f4f7df"}}]})

16:49:33 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x60)

[  147.282593][    T9] usb 1-1: USB disconnect, device number 26
[  147.295577][   T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  147.305550][   T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x78)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x90)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa8)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc0)

[  147.459787][    T8] usb 2-1: device descriptor read/8, error -71
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd8)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf0)

[  147.532969][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.543281][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.558451][ T4792] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
16:49:34 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231326e53f070c00002ddcedfb5a49fd0bc0178910badf002a901083f6"], 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000ff9412201340000102030109022d00010100707f0904001f01030122730f0905810320000005d3090502030000010008"], &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xff, 0x0, 0x6, 0x8, 0x6}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x78, 0x74, 0x97}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0xba, &(0x7f0000000200)=@string={0xba, 0x3, "c07d70e39549ef484a9db9cccc0e762458aa24638b488611a52755bef9848756470b1d4d8f36132340e53c09d2ac5f7dbd0de9a1ce6d349e592ee35084908fa052c4aba6d332d1f2fa4729861a5d4e4131a7d1bd614ac437c681424d3a20ac2969f358e0d3798302d17aa3ea6e246a3303fc984c202a9ef9e60cdfd3a297bd04bec9a6fa1944b88163f15bd638c05ebce8f1a30cbc5c44234b27b3f78eb4571701eb7c39651ad0ab4ac0a7d170588e13faf78663f273bce0"}}, {0xcf, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x6f, &(0x7f0000000400)=@string={0x6f, 0x3, "2948725cf9939e3339b74e9dcaf9f77fb09f1520671c1212b8f1c2c2ea6f9d30de1040243c3ef5bf0ebcffff6bc8e027188886328d000f592e81ed09741ed484aaaf41593f187606197c7e348b7712977a7ea920e2a775b5f036c9016a1ae2b3ece2ae7f059ea334ba8f8638e1"}}]})
syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="4004e50000080000002a0788315405d896fb286f10578557610000e54246db2f5a00705403b839e27a6c937009efbeded23364cde0b4129650878fc2044b7baf3a9af1fb20ff3159e0537e9f6f06f269b8d96cc73fbeb24a9de10f3e356fe1684190979dc7ce0377b1302a3f93af70a9aba07a2cdf2d29f2abae96f8f29e4675b8b9ebea6e5cc1a1a578b658f180a0608c923199bfb07c4c706aa07ff33b5cf582a5b5d074a73f817e895dcd31bad60a233e09e55b60533197a981335b4e80ba8ba496e307631803cc32959f11a55df3ed4f2d32bf3b06a1041177fc09ad7100"/235], &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0xfffffffffffffffe, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x10, 0xe0, 0x8c, "d59c5c07", "8618b5f2"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x8, 0x80, 0xff, 0x4, 0x9}}}, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x0, 0x7, 0xc4, "b4f749db14d65feba403a71cb13d012c45880e81d5d9d795a1d2afd439f8b4b2ddb0bb2f84c416733c8379ed76375f8bc691537528c8330b98b1e9054ba9902141dc1a422dfa7da29a5cbdf0246c2f83dabab09661adef6a95c8f1515b7a50067ea0001e5b9f8029d5d8b0b35e335cc06c81b432380ad0a5d74a8f339ad342b4103c1017913dae4abbec16f01606d7f86c186f902793a8c036e4901c8171fee9cc6542c4536e64cf7c2330f37e900ad9b5f55e3af15cddeaeaf3299b15f6ea13fb09ce83"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xfff}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001100)={0x40, 0xb, 0x2, '`)'}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001180)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001200)={0x40, 0x19, 0x2, '=f'}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x80}}) (async)
syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, &(0x7f00000002c0)={0x40, 0x30, 0x50, {0x50, 0x24, "5d48a351dc36968f4945d3f03e7389e7d9ef62df0634acf3a0ce658d20d70e3fee4ebb24fb6249a1fc496915480d3edda5695e1297c0325102f78ce594286f4bd626e304b3c8f1e31fd4b886a8fa"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000340)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0x4, "d6"}, @local=@item_012={0x0, 0x2, 0x2a115f5c1829a92c}, @main=@item_4={0x3, 0x0, 0xc, "13afed43"}, @global=@item_4={0x3, 0x1, 0x4, 'Z[\\T'}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x567}}}}, &(0x7f0000001700)={0x2c, &(0x7f0000001580)={0x0, 0x1b, 0x66, "e9b1d976d05942a6e3aa3b825095be4956745be6d1aebc96d78edd99e220c7f69d2d2b2060ad987e00018d26f0c05277f8a0a830284a9221e1cbb3379c700beedfd90816d8bf3bb4f5b91a7ca53a7ecc65d25d3a2e0b26e2038a7a7fbe699252a533de9718ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001640)={0x0, 0x8, 0x1}, &(0x7f0000001680)={0x20, 0x1, 0x37, "22b774a149bde1f2c58c88b498327c8d4480c3ae35fa7ecfe4ecc0516a20818d05b374934eccbfc682664a37605e49da1286c2cb08faa4"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0x5}})
syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x11, 0x4d, {0x4d, 0x4, "1eadf91486c33221a36d6dca3d6da73c17cbc347fef8fbad4d44f01bd5d96962deafa057cceb674de33589298d84046f4ee0385a5783bd60b4a53f011670a58d09c0231dfe807064a88f45"}}, &(0x7f0000000580)={0x0, 0x3, 0x54, @string={0x54, 0x3, "6cb0cd60443ef85f69be77a9f7bc966762e07e048ca319c1c15e01825e99e8274b0507eb7f86fe4bc3c4c998b6ccb9375b71b451c676319daafd7b444ef4dac8b954149cdefba1c93c11eada582d9e5560f2"}}, &(0x7f0000000600)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xd1, 0x6, 0x3, 0x0, 0x8, [0x0, 0xc0, 0xff0000, 0xc000, 0x0, 0xffc03f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2b505e4b052ae8144cdc651c46219f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "216732dcb7087ad33ac349171a8240a1"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0x4, "2abc9c6a", "df593018"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xca, 0x60, 0x7, 0x20, 0x3f, 0x8, 0x2}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x40, 0x6, 0x98, "d8eea23b43ed591d35032b86d622f2091bec799c8284c206259f3ca3a5b1afa2e01760343e40b43d1b0c3d067444ba3b2b997e7b875be494bf87a374faea1a02d4f860f701486ad1844fdc286e7d8fc631c081ece2c7124febf4357faa5a9490bad5d75025af807dfa12edf73c18003611c3f120ed8e79d643882af007d6e8f31855b957420a5540871a6f41d590b69ce46f2e7738bd200f"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "37db"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="ec74ffbe164f"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'Zo'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}})

[  147.595474][ T4792] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input9
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x108)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x120)

[  147.736608][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  147.744392][    T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x138)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x150)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x168)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x180)

[  147.945522][    T8] usb 2-1: device descriptor read/8, error -71
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x198)

[  147.996191][    T9] usb 1-1: Using ep0 maxpacket: 32
[  148.013042][ T4792] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  148.029436][ T4792] usb 5-1: USB disconnect, device number 23
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b0)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c8)

[  148.125820][    T9] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  148.134572][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  148.143078][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  148.164387][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
16:49:34 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1e0)

[  148.174506][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  148.184551][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  148.197661][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  148.206799][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1f8)

[  148.224707][    T9] usb 1-1: config 0 descriptor??
[  148.229933][    T8] usb 2-1: device descriptor read/8, error -71
16:49:34 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x210)

[  148.355720][    T8] usb usb2-port1: unable to enumerate USB device
[  148.435433][ T4792] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  148.497248][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  148.512651][    T9] usb 1-1: USB disconnect, device number 27
[  148.524869][    T9] usblp0: removed
[  148.526548][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  148.537623][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.675363][ T4792] usb 5-1: Using ep0 maxpacket: 16
[  148.705405][    T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd
16:49:35 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x400000)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/199)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x24, 0x1f, 0x7, 0x80000000, "e26d7a76dc43ba5256a05b0823c6d4c2ce504fd2b6235944d21fb5a9790f3933"})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x9, 0x1}}]}}}]}}]}}, 0x0)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x228)

[  148.795676][ T4792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.806614][ T4792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  148.819484][ T4792] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  148.828635][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.839791][ T4792] usb 5-1: config 0 descriptor??
16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x240)

[  148.875706][   T22] usb 3-1: USB disconnect, device number 24
16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x258)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x270)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x288)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2a0)

[  149.025406][    T8] usb 2-1: device descriptor read/64, error -71
[  149.055438][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2b8)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d0)

16:49:35 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e8)

[  149.295499][   T22] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  149.305949][    T9] usb 1-1: Using ep0 maxpacket: 32
[  149.361742][ T4792] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.381978][ T4792] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input10
[  149.435566][    T9] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  149.443976][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  149.452227][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  149.461159][    T8] usb 2-1: device descriptor read/64, error -71
[  149.467582][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.477303][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.487021][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.500047][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  149.509126][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.560927][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.581741][ T5455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.607323][    T9] usb 1-1: config 0 descriptor??
[  149.735424][    T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  149.751915][ T4792] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  149.805400][   T22] usb 3-1: Using ep0 maxpacket: 16
[  149.878821][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.955564][   T22] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  150.005433][    T8] usb 2-1: device descriptor read/64, error -71
[  150.059934][    T9] usb 1-1: USB disconnect, device number 28
[  150.075400][    C0] usblp0: nonzero read bulk status received: -108
[  150.126131][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  150.135193][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.143541][   T22] usb 3-1: Product: syz
[  150.148046][   T22] usb 3-1: Manufacturer: syz
[  150.152644][   T22] usb 3-1: SerialNumber: syz
[  150.402589][  T726] usb 3-1: USB disconnect, device number 25
[  150.425440][    T8] usb 2-1: device descriptor read/64, error -71
[  150.545714][    T8] usb usb2-port1: attempt power cycle
[  150.653225][  T726] usb 5-1: USB disconnect, device number 24
[  150.662652][    T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  150.995476][    T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  151.055556][    T9] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  151.063902][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  151.072057][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  151.080980][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.090744][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  151.101561][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  151.114583][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  151.123654][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.134295][    T9] usb 1-1: config 0 descriptor??
[  151.156230][ T5436] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  151.215555][    T8] usb 2-1: device descriptor read/8, error -71
16:49:37 executing program 4:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x44000)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x5, 0x10000})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004e2cdc08da0b74812d45010203010902120001000000000904"], 0x0)

16:49:37 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x300)

16:49:37 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) (async)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x400000)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/199) (async)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x24, 0x1f, 0x7, 0x80000000, "e26d7a76dc43ba5256a05b0823c6d4c2ce504fd2b6235944d21fb5a9790f3933"})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x9, 0x1}}]}}}]}}]}}, 0x0)

16:49:37 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:37 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64)
syz_usb_disconnect(r0) (rerun: 64)
ioctl$EVIOCGMASK(r2, 0x541b, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0x70, 0x63, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x2e, {{0x8, 0x24, 0x6, 0x0, 0x0, "b005b2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x1, 0x0, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @acm={0x4, 0x24, 0x2, 0xd}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x7f, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x7fff, 0x3f, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x28, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xfa, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x8, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x0, 0x0, 0xff, 0x69}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x5, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0xb, "317334ca1a804068e0e80a752747273b5e893531c389a3a9358213ac95ad5bebfc501a9a29ec66837e79e134a90ffe538cb30ed201e230edd6f41b5e933b"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0x3, "09a1b94d2b1459a416"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4b90bfac2f2571fc6cc5ec7e2cc6505d"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "09ea63bc42a02949679e90b942caf665663f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "d68fb16e8cb824883f3d61480803ca75f1ac41963f975d98935ccd7c03f32516cc456e75cbae579a349fef0ea6babfa1479a9762dd00940cdc4f7c00d70da5d88d496b6caf3d4d4665bd0662e978bc96b8cab63a9542408b13546c8a51ddd1650aeeb22fc612079217a10d98a3a72daf38312a623cb68708a0f8c68ef84b3b6c9a212f3ec3aab62c957d1e84ea79505431f68d69f37e6dcaa821ed914633ece541c1f4f7df"}}]})

[  151.276806][ T5436] usblp0: removed
[  151.292741][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x318)

[  151.354824][    T9] usb 1-1: USB disconnect, device number 29
[  151.376403][    T9] usblp0: removed
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x330)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x348)

[  151.435528][    T8] usb 2-1: device descriptor read/8, error -71
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x360)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x378)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x390)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x3a8)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x3c0)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x3d8)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x3f0)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x408)

[  151.685468][  T726] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  151.693199][ T4806] usb 3-1: new high-speed USB device number 26 using dummy_hcd
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x420)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x438)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x450)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x468)

[  151.815404][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x480)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x498)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x4b0)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x4c8)

[  151.936855][    T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  151.944722][  T726] usb 5-1: Using ep0 maxpacket: 8
[  151.965671][ T4806] usb 3-1: Using ep0 maxpacket: 16
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x4e0)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x4f8)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x510)

[  152.075533][    T9] usb 1-1: Using ep0 maxpacket: 32
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x528)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x540)

16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x558)

[  152.135947][ T4806] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  152.155539][    T8] usb 2-1: device descriptor read/8, error -71
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x570)

[  152.245655][    T9] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  152.254020][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  152.262166][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  152.271585][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  152.281323][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
16:49:38 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x588)

[  152.291592][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  152.304944][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  152.314484][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.322808][  T726] usb 5-1: New USB device found, idVendor=0bda, idProduct=8174, bcdDevice=45.2d
[  152.331904][  T726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.339946][  T726] usb 5-1: Product: syz
[  152.344122][  T726] usb 5-1: Manufacturer: syz
[  152.348751][  T726] usb 5-1: SerialNumber: syz
[  152.356830][  T726] usb 5-1: config 0 descriptor??
[  152.376222][    T9] usb 1-1: config 0 descriptor??
[  152.395791][ T4806] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  152.404865][ T4806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.412956][ T4806] usb 3-1: Product: syz
[  152.417382][ T4806] usb 3-1: Manufacturer: syz
[  152.421989][ T4806] usb 3-1: SerialNumber: syz
[  152.430194][  T726] r8712u: register rtl8712_netdev_ops to netdev_ops
[  152.436828][  T726] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  152.505553][    T8] usb 2-1: device descriptor read/8, error -71
[  152.629257][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  152.640281][  T726] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  152.647168][  T726] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  152.654636][  T726] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  152.662952][    T8] usb usb2-port1: unable to enumerate USB device
[  152.673421][    T9] usb 1-1: USB disconnect, device number 30
[  152.685257][    T9] usblp0: removed
[  152.690618][   T22] usb 3-1: USB disconnect, device number 26
[  152.705471][  T726] usb 5-1: USB disconnect, device number 25
[  153.075428][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  153.335420][    T9] usb 1-1: Using ep0 maxpacket: 32
[  153.485541][    T9] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  153.493924][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  153.502044][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  153.510966][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.520638][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  153.530310][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  153.543315][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  153.552394][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.562930][    T9] usb 1-1: config 0 descriptor??
[  153.837427][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  153.852311][    T9] usb 1-1: USB disconnect, device number 31
[  153.863587][    T9] usblp0: removed
16:49:41 executing program 0:
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0) (async)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCGMASK(r2, 0x541b, 0x0) (async)
ioctl$EVIOCGMASK(r2, 0x541b, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0x70, 0x63, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x2e, {{0x8, 0x24, 0x6, 0x0, 0x0, "b005b2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x1, 0x0, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @acm={0x4, 0x24, 0x2, 0xd}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x7f, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x7fff, 0x3f, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x28, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xfa, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x8, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x0, 0x0, 0xff, 0x69}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x5, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0xb, "317334ca1a804068e0e80a752747273b5e893531c389a3a9358213ac95ad5bebfc501a9a29ec66837e79e134a90ffe538cb30ed201e230edd6f41b5e933b"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0x3, "09a1b94d2b1459a416"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4b90bfac2f2571fc6cc5ec7e2cc6505d"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "09ea63bc42a02949679e90b942caf665663f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "d68fb16e8cb824883f3d61480803ca75f1ac41963f975d98935ccd7c03f32516cc456e75cbae579a349fef0ea6babfa1479a9762dd00940cdc4f7c00d70da5d88d496b6caf3d4d4665bd0662e978bc96b8cab63a9542408b13546c8a51ddd1650aeeb22fc612079217a10d98a3a72daf38312a623cb68708a0f8c68ef84b3b6c9a212f3ec3aab62c957d1e84ea79505431f68d69f37e6dcaa821ed914633ece541c1f4f7df"}}]}) (async)
syz_usb_connect$cdc_ecm(0x2, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x8, 0x70, 0x63, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x2e, {{0x8, 0x24, 0x6, 0x0, 0x0, "b005b2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x1, 0x0, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @acm={0x4, 0x24, 0x2, 0xd}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x40, 0x7f, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x7fff, 0x3f, 0x0, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x28, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xfa, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x9, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x8, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x0, 0x0, 0xff, 0x69}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x5, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0xb, "317334ca1a804068e0e80a752747273b5e893531c389a3a9358213ac95ad5bebfc501a9a29ec66837e79e134a90ffe538cb30ed201e230edd6f41b5e933b"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0x3, "09a1b94d2b1459a416"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4b90bfac2f2571fc6cc5ec7e2cc6505d"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x420}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "09ea63bc42a02949679e90b942caf665663f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "d68fb16e8cb824883f3d61480803ca75f1ac41963f975d98935ccd7c03f32516cc456e75cbae579a349fef0ea6babfa1479a9762dd00940cdc4f7c00d70da5d88d496b6caf3d4d4665bd0662e978bc96b8cab63a9542408b13546c8a51ddd1650aeeb22fc612079217a10d98a3a72daf38312a623cb68708a0f8c68ef84b3b6c9a212f3ec3aab62c957d1e84ea79505431f68d69f37e6dcaa821ed914633ece541c1f4f7df"}}]})

16:49:41 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x5a0)

16:49:41 executing program 4:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x44000)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x5, 0x10000})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004e2cdc08da0b74812d45010203010902120001000000000904"], 0x0)

16:49:41 executing program 2:
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) (async)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x400000)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/199)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x24, 0x1f, 0x7, 0x80000000, "e26d7a76dc43ba5256a05b0823c6d4c2ce504fd2b6235944d21fb5a9790f3933"})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x9, 0x1}}]}}}]}}]}}, 0x0)

16:49:41 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x5b8)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x5d0)

[  155.371299][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.398130][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x5e8)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x600)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x618)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x630)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x648)

[  155.617663][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.627451][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.636982][   T22] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  155.655493][   T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x660)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x678)

[  155.655702][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  155.663248][ T4792] usb 2-1: new high-speed USB device number 29 using dummy_hcd
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x690)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x6a8)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x6c0)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x6d8)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x6f0)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x708)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x720)

[  155.895406][   T45] usb 3-1: Using ep0 maxpacket: 16
[  155.900608][   T22] usb 1-1: Using ep0 maxpacket: 32
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x738)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x750)

[  155.946040][ T4792] usb 2-1: device descriptor read/64, error -71
[  155.957035][    T9] usb 5-1: Using ep0 maxpacket: 8
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x768)

[  156.025695][   T45] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  156.038860][   T22] usb 1-1: config index 0 descriptor too short (expected 63524, got 36)
[  156.047366][   T22] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  156.048444][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.055488][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  156.060807][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  156.079879][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.082768][   T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  156.099973][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.108600][ T5618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x780)

[  156.113001][   T22] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  156.126132][ T5618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.130329][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.156777][   T22] usb 1-1: config 0 descriptor??
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x798)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x7b0)

16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x7c8)

[  156.266106][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  156.275203][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.283580][   T45] usb 3-1: Product: syz
[  156.287911][   T45] usb 3-1: Manufacturer: syz
[  156.292535][   T45] usb 3-1: SerialNumber: syz
16:49:42 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x7e0)

[  156.325557][    T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8174, bcdDevice=45.2d
[  156.334663][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.342829][    T9] usb 5-1: Product: syz
[  156.347044][    T9] usb 5-1: Manufacturer: syz
[  156.351672][    T9] usb 5-1: SerialNumber: syz
16:49:43 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x7f8)

[  156.393951][    T9] usb 5-1: config 0 descriptor??
[  156.416078][ T4792] usb 2-1: device descriptor read/64, error -71
[  156.425084][   T22] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  156.440856][   T22] usb 1-1: USB disconnect, device number 33
[  156.450690][    T9] r8712u: register rtl8712_netdev_ops to netdev_ops
[  156.457387][    T9] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints
16:49:43 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x810)

[  156.457453][   T22] usblp0: removed
16:49:43 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x828)

[  156.536812][  T726] usb 3-1: USB disconnect, device number 27
[  156.675528][    T9] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  156.682151][    T9] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  156.689678][    T9] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  156.695636][ T4792] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  156.699942][    T9] usb 5-1: USB disconnect, device number 26
16:49:43 executing program 0:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x44000)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x5, 0x10000})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004e2cdc08da0b74812d45010203010902120001000000000904"], 0x0)

16:49:43 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x840)

[  156.995414][ T4792] usb 2-1: device descriptor read/64, error -71
16:49:43 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x858)

16:49:43 executing program 2:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000180)="a8", 0x1)
read$char_usb(r0, &(0x7f0000000300)=""/192, 0xc0)
read$char_usb(r0, &(0x7f0000000000)=""/228, 0xe4)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="5f83f32081017992e0c271379c3c19d91ed22363ddf7fc3bbbb497dd0a7be79c22318ab8aff5a04d0c302ae0ba0134c546c1dd1cab5187bdea154a196de2aca77a18957b1d29b01d0486d472f170b49d9ca087055ebbfaca1902da54ff04209a8dde718ece8f188bce62bc8808d80e10282e0c57701a29e955b2c107724dc97172019925c9ccce2e4ebb4ef09efa21340634fc79e343f78acd7206adfc889c0c84fa864bbe5bc498e1b2eed6c8ae83ddd41031f942bdf2a92b76c7743f0613e05a286c52e138a4a4fe5f4ed960c624c0ff32420032f018586fa57d11d0db7cb4a6da", @ANYRESOCT=r0, @ANYRES8=r0], 0x0)

[  157.215743][  T726] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  157.415380][ T4792] usb 2-1: device descriptor read/64, error -71
[  157.445439][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  157.455510][  T726] usb 1-1: Using ep0 maxpacket: 8
[  157.535913][ T4792] usb usb2-port1: attempt power cycle
[  157.725684][    T9] usb 3-1: device descriptor read/64, error -71
[  157.765536][  T726] usb 1-1: New USB device found, idVendor=0bda, idProduct=8174, bcdDevice=45.2d
[  157.774587][  T726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.782676][  T726] usb 1-1: Product: syz
[  157.786872][  T726] usb 1-1: Manufacturer: syz
[  157.791474][  T726] usb 1-1: SerialNumber: syz
[  157.806167][  T726] usb 1-1: config 0 descriptor??
[  157.848537][  T726] r8712u: register rtl8712_netdev_ops to netdev_ops
[  157.855136][  T726] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  157.945406][ T4792] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  158.095551][  T726] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed
[  158.102177][  T726] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  158.109697][  T726] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  158.115689][ T4792] usb 2-1: device descriptor read/8, error -71
[  158.128037][  T726] usb 1-1: USB disconnect, device number 34
[  158.147767][    T9] usb 3-1: device descriptor read/64, error -71
16:49:44 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:44 executing program 4:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x44000)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x5, 0x10000}) (async, rerun: 64)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004e2cdc08da0b74812d45010203010902120001000000000904"], 0x0) (rerun: 64)

16:49:44 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x870)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x888)

[  158.387665][ T4792] usb 2-1: device descriptor read/8, error -71
[  158.425535][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x8a0)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x8b8)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x8d0)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x8e8)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x900)

16:49:45 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000013c0)={0x24, &(0x7f0000001280)={0x40, 0x31, 0x64, {0x64, 0x31, "a531459b2d379d6f04b139e7fa92575fa2c7725f84486b2a40d8c1712ba0cee60126ada651bfc2b67b4b975c367033c15a07944706de5d8750c5ee178dc41fb3c79a5b330722ee81873b64f4ff00d41cd621c86198d69c6fc6c85209d6a46e61ee26"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000001340)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0x7, "b2"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x1, 0x2, 0x0, "f3"}, @local=@item_4={0x3, 0x2, 0x8, "3aa3780d"}]}}, &(0x7f0000001380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x81, 0x1, {0x22, 0xad6}}}}, &(0x7f0000001640)={0x2c, &(0x7f0000001400)={0x0, 0xf, 0xfa, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x1, 0x3f, "6d6e8b9b68280950cf453103ce14e3c3d3ac7a781e3d47d00aa60a96a48e488d8cb085c7c76e22a116c232bc1c44fb75d83de74791f754d238f1c7ac705257"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0xc1}})
r1 = syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000840)={0x2, "2ebc"})
syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x0, 0x2e, {0x2e, 0x24, "b23e61b1e01c2d337dc434eb130c05047b87837a1b1d4470c5dbe0d7d99dfe1057b6fb853926c482088422f0"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000007c0)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x0, "31b8cb8f", ':soz'}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x3, 0x4, 0x40, 0x0, 0x3}}}, &(0x7f0000000d80)={0x84, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "984f"}, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="41e3d46071af"}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1}})
syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000f40)={0x20, 0xa, 0x90, {0x90, 0x3, "7b030da1d537c1e5127a12e59516f87cbe39278ec69a49c156b73076cd8b401afb9aeff25a7eb699282cae66086c3e10d0f7145154f26309dfbab3d0530954babc7f29711ec127308643a7ee639b0568d40f0942368483fe05e42b66494c8013f8558ce8d538eea4e80492422b91519a15ce0ab554cd2f2b72418e824b8fb0fdfdf21f0daae6ae549906ba7794a8"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000b80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfb7d, 0xff, 0x1, {0x22, 0x732}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001000)={0x20, 0x14, 0xad, "cd32f537b0088b88f94a1efd8cd275b2d5464766b7de5a4362a5e859757912ab86eee063adbf4a27cb67348149f208b567ff03487727c66679b1939b71871396c29de7e3a0dffd3ff663845ef3f62f3a3b4e98dec36f8b97d4e4d1ebc59b5b01fc84b309c066b75d03a3a52e7fa3f7968244dbc83362ed475d3a5d79786f8f3e07542ccb8568816c3aaf44068c9139640925c66ab27304a82f08ba4bdc210b785b5338c6e4acc4883349dcbb26"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x1, 0x8f, "f19f00df332e6661d3c4b6ed89c2cecae189a5fc20ac8fefb0d03f95c1f607347d62be0f6f6721012d534ca847db27aa2380c222da617bb777325871862de2bf3bbf472f8ce14b454073564fcf77c92c57f04a943e849efa10ff098260fbc72c49e949867206715d199e8c3d635d255c0a22b2f467660a7ded05309c5cfd64083cf91926f2bd30980e6f8af34236dc"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}})
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0)
syz_usb_disconnect(r0)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x0, 0x30, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "38c11594"}, {0x5, 0x24, 0x0, 0xf21}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x2, 0x1d}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0x1c, 0x24, 0x13, 0x0, "0aaed1e0701c6dfb27edf78bf2670044c37ba2d54239667d"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x27f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xb0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x84, 0x0, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "2d25985c135d98bdce762779857e59f61d3b559fc50d0e996655dbf966872bf9999df12a46b460d1c8d08333ffdde42e4d0f198d50162c43a0ad59ffb3b3e9f5004ec44405d5e1cb646da19531279fa8cda7d3d9e00272d82aa396f1b80a0548fe2a959151456cf8af4bd0103febcd175c783896c712c039f61df2b80588cf689e607a014345ce058f2b449a3e19751f6bc73f1b0cf7566f9cf6ba9eed154a7b45a33ad3979bb21d0dafe59f03a4809883fbdff62a50763200b8285f5a9a626d1216f63edc8c8e0afb0b15ff0604aa4c3c53c7"}}, {0x0, 0x0}]})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x40, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x20, 0x40}, 0x26, &(0x7f0000000e40)={0x5, 0xf, 0x26, 0x3, [@generic={0x3, 0x10, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29c7cf08b1a206e64e308ec84a2edd34"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xf8, 0xffc1}]}, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000900)=@string={0x4d, 0x3, "689beb263d8256ab598219e5b600f08c31b1322a90842e6fde626036806c7db862428c87efbc2c7297480d58b74d80416b0a3c32cf3e5d2bd0b717c6b1b22ec45b89141edfaca9a31793af"}}]})
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000980)={0x1, 0xffffffff, 0xffffffff})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x7f, 0x1, 0x0, 0x49}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xf153, 0xf00, 0x4, [0x30, 0x1fe3fcf, 0x3f, 0x3fc0, 0x30, 0x8080cf]}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x428}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x9c, &(0x7f0000000e80)=@string={0x9c, 0x3, "6fe0b2c5a005eb1128791293a39844abfb3f833b308ba709019fe508017ca58f067f738caebc9ec0be8224e8198b6ab9a67dc54b8286ca8ca4b7d0915af955932a44d0e21e115faa4b304c2be68608d1f538bf82fd7812da7051a8c360f77efa67b0a92ebc17d4d49cc029f661bf32fa00b73c0294a89f48e078291a4045e57590952f86f20610708bbd2c4f9748c48dc885498c7ded998f3e46"}}, {0x1e, &(0x7f0000000600)=@string={0x1e, 0x3, "57c71dc704bff5dc9646e5cf96d51a1234961e32ba6ba9402c3b19bb"}}]})

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x930)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x948)

[  158.685392][   T22] usb 5-1: new high-speed USB device number 27 using dummy_hcd
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x960)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x978)

[  158.755426][    T9] usb 3-1: device descriptor read/64, error -71
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x990)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x9a8)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x9c0)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x9d8)

[  158.875607][ T4792] usb 2-1: new high-speed USB device number 32 using dummy_hcd
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x9f0)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa08)

[  158.935391][   T22] usb 5-1: Using ep0 maxpacket: 8
[  158.935869][  T726] usb 1-1: new high-speed USB device number 35 using dummy_hcd
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa20)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa38)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa50)

[  159.045503][ T4792] usb 2-1: device descriptor read/8, error -71
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa68)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa80)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xa98)

16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xab0)

[  159.205430][    T9] usb 3-1: device descriptor read/64, error -71
[  159.215677][   T22] usb 5-1: New USB device found, idVendor=0bda, idProduct=8174, bcdDevice=45.2d
[  159.224784][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.232880][   T22] usb 5-1: Product: syz
[  159.237180][   T22] usb 5-1: Manufacturer: syz
[  159.241805][   T22] usb 5-1: SerialNumber: syz
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xac8)

[  159.261928][   T22] usb 5-1: config 0 descriptor??
16:49:45 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xae0)

[  159.312258][   T22] r8712u: register rtl8712_netdev_ops to netdev_ops
[  159.319429][   T22] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  159.326978][ T4792] usb 2-1: device descriptor read/8, error -71
[  159.336242][  T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.347189][  T726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
16:49:46 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xaf8)

[  159.360144][  T726] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.369253][  T726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.379507][    T9] usb usb3-port1: attempt power cycle
[  159.394180][  T726] usb 1-1: config 0 descriptor??
[  159.445657][ T4792] usb usb2-port1: unable to enumerate USB device
[  159.506556][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.516169][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.524729][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.533618][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.542259][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.550969][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.559688][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.568339][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.577098][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.585789][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.635509][   T22] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  159.642111][   T22] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  159.649643][   T22] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  159.670574][   T22] usb 5-1: USB disconnect, device number 27
[  159.805377][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  159.889521][  T726] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  159.897093][  T726] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  159.904494][  T726] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  159.911923][  T726] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  159.919371][  T726] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  159.927970][  T726] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  159.946287][  T726] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  160.005541][    T9] usb 3-1: device descriptor read/8, error -71
16:49:46 executing program 2:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000180)="a8", 0x1)
read$char_usb(r0, &(0x7f0000000300)=""/192, 0xc0) (async)
read$char_usb(r0, &(0x7f0000000000)=""/228, 0xe4) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="5f83f32081017992e0c271379c3c19d91ed22363ddf7fc3bbbb497dd0a7be79c22318ab8aff5a04d0c302ae0ba0134c546c1dd1cab5187bdea154a196de2aca77a18957b1d29b01d0486d472f170b49d9ca087055ebbfaca1902da54ff04209a8dde718ece8f188bce62bc8808d80e10282e0c57701a29e955b2c107724dc97172019925c9ccce2e4ebb4ef09efa21340634fc79e343f78acd7206adfc889c0c84fa864bbe5bc498e1b2eed6c8ae83ddd41031f942bdf2a92b76c7743f0613e05a286c52e138a4a4fe5f4ed960c624c0ff32420032f018586fa57d11d0db7cb4a6da", @ANYRESOCT=r0, @ANYRES8=r0], 0x0)

[  160.225512][    T9] usb 3-1: device descriptor read/8, error -71
[  160.715406][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  160.788577][   T22] usb 1-1: USB disconnect, device number 35
[  160.885465][    T9] usb 3-1: device descriptor read/8, error -71
[  161.225546][    T9] usb 3-1: device descriptor read/8, error -71
16:49:48 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb10)

16:49:48 executing program 4:
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000180))
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000))
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0)
syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0xbe, 0x88, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x1, "5693a04beaa1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, 's+', "4052da"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, '{'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x0, 0x20, 0x0, "fc15cea03b6e83ad"}, @as_header={0x7, 0x24, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  161.345725][    T9] usb usb3-port1: unable to enumerate USB device
[  161.365412][   T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb28)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb40)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb58)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb70)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xb88)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xba0)

[  161.745464][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.756421][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  161.769369][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  161.778499][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.786560][ T4792] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  161.796820][   T22] usb 1-1: config 0 descriptor??
[  161.865425][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xbb8)

16:49:48 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000013c0)={0x24, &(0x7f0000001280)={0x40, 0x31, 0x64, {0x64, 0x31, "a531459b2d379d6f04b139e7fa92575fa2c7725f84486b2a40d8c1712ba0cee60126ada651bfc2b67b4b975c367033c15a07944706de5d8750c5ee178dc41fb3c79a5b330722ee81873b64f4ff00d41cd621c86198d69c6fc6c85209d6a46e61ee26"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000001340)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0x7, "b2"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x1, 0x2, 0x0, "f3"}, @local=@item_4={0x3, 0x2, 0x8, "3aa3780d"}]}}, &(0x7f0000001380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x81, 0x1, {0x22, 0xad6}}}}, &(0x7f0000001640)={0x2c, &(0x7f0000001400)={0x0, 0xf, 0xfa, "4910573f2533f29417b9811609ca6e4c979a2e838c1b393f083eeba0c3fe2054a0585ba08c834380cc6019af381912f0c13aca250d171de68d4acafdec8f5460a842df1a379366e2f5c4f7b5bb0c1ed866c25219e8eb45cfdcec43b4c4797db8ddcc8a0d9b4b2f4fd8054e2e13a152ab7cda5e8790e251063e3a22be3b3f6e14bc6f4439a36295788b8dbfbace27b88942d0959ebc21f7db5cc2fb5eafe54e229b57b7ba2bafe83e996897a42e53c0ceb84ba6749ed0d2b40faf43331de6d17d65f1087effabf9f1adc828ca471fa8c2eb69d8dd859447c41e2380e844381e7b81e8bf390bd897e49045c890adb98aac49f42b6424b3757b0e16"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x1, 0x3f, "6d6e8b9b68280950cf453103ce14e3c3d3ac7a781e3d47d00aa60a96a48e488d8cb085c7c76e22a116c232bc1c44fb75d83de74791f754d238f1c7ac705257"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0xc1}})
r1 = syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000840)={0x2, "2ebc"}) (async)
syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x0, 0x2e, {0x2e, 0x24, "b23e61b1e01c2d337dc434eb130c05047b87837a1b1d4470c5dbe0d7d99dfe1057b6fb853926c482088422f0"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000007c0)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x0, "31b8cb8f", ':soz'}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x3, 0x4, 0x40, 0x0, 0x3}}}, &(0x7f0000000d80)={0x84, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "984f"}, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="41e3d46071af"}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000f40)={0x20, 0xa, 0x90, {0x90, 0x3, "7b030da1d537c1e5127a12e59516f87cbe39278ec69a49c156b73076cd8b401afb9aeff25a7eb699282cae66086c3e10d0f7145154f26309dfbab3d0530954babc7f29711ec127308643a7ee639b0568d40f0942368483fe05e42b66494c8013f8558ce8d538eea4e80492422b91519a15ce0ab554cd2f2b72418e824b8fb0fdfdf21f0daae6ae549906ba7794a8"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000b80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfb7d, 0xff, 0x1, {0x22, 0x732}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001000)={0x20, 0x14, 0xad, "cd32f537b0088b88f94a1efd8cd275b2d5464766b7de5a4362a5e859757912ab86eee063adbf4a27cb67348149f208b567ff03487727c66679b1939b71871396c29de7e3a0dffd3ff663845ef3f62f3a3b4e98dec36f8b97d4e4d1ebc59b5b01fc84b309c066b75d03a3a52e7fa3f7968244dbc83362ed475d3a5d79786f8f3e07542ccb8568816c3aaf44068c9139640925c66ab27304a82f08ba4bdc210b785b5338c6e4acc4883349dcbb26"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x1, 0x8f, "f19f00df332e6661d3c4b6ed89c2cecae189a5fc20ac8fefb0d03f95c1f607347d62be0f6f6721012d534ca847db27aa2380c222da617bb777325871862de2bf3bbf472f8ce14b454073564fcf77c92c57f04a943e849efa10ff098260fbc72c49e949867206715d199e8c3d635d255c0a22b2f467660a7ded05309c5cfd64083cf91926f2bd30980e6f8af34236dc"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}})
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) (async)
syz_usb_disconnect(r0) (async)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0) (async, rerun: 32)
syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x0, 0x30, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "38c11594"}, {0x5, 0x24, 0x0, 0xf21}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x2, 0x1d}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0x1c, 0x24, 0x13, 0x0, "0aaed1e0701c6dfb27edf78bf2670044c37ba2d54239667d"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x27f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xb0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x84, 0x0, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "2d25985c135d98bdce762779857e59f61d3b559fc50d0e996655dbf966872bf9999df12a46b460d1c8d08333ffdde42e4d0f198d50162c43a0ad59ffb3b3e9f5004ec44405d5e1cb646da19531279fa8cda7d3d9e00272d82aa396f1b80a0548fe2a959151456cf8af4bd0103febcd175c783896c712c039f61df2b80588cf689e607a014345ce058f2b449a3e19751f6bc73f1b0cf7566f9cf6ba9eed154a7b45a33ad3979bb21d0dafe59f03a4809883fbdff62a50763200b8285f5a9a626d1216f63edc8c8e0afb0b15ff0604aa4c3c53c7"}}, {0x0, 0x0}]}) (async, rerun: 32)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x40, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x20, 0x40}, 0x26, &(0x7f0000000e40)={0x5, 0xf, 0x26, 0x3, [@generic={0x3, 0x10, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29c7cf08b1a206e64e308ec84a2edd34"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xf8, 0xffc1}]}, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000900)=@string={0x4d, 0x3, "689beb263d8256ab598219e5b600f08c31b1322a90842e6fde626036806c7db862428c87efbc2c7297480d58b74d80416b0a3c32cf3e5d2bd0b717c6b1b22ec45b89141edfaca9a31793af"}}]})
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000980)={0x1, 0xffffffff, 0xffffffff})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x7f, 0x1, 0x0, 0x49}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xf153, 0xf00, 0x4, [0x30, 0x1fe3fcf, 0x3f, 0x3fc0, 0x30, 0x8080cf]}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x428}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x9c, &(0x7f0000000e80)=@string={0x9c, 0x3, "6fe0b2c5a005eb1128791293a39844abfb3f833b308ba709019fe508017ca58f067f738caebc9ec0be8224e8198b6ab9a67dc54b8286ca8ca4b7d0915af955932a44d0e21e115faa4b304c2be68608d1f538bf82fd7812da7051a8c360f77efa67b0a92ebc17d4d49cc029f661bf32fa00b73c0294a89f48e078291a4045e57590952f86f20610708bbd2c4f9748c48dc885498c7ded998f3e46"}}, {0x1e, &(0x7f0000000600)=@string={0x1e, 0x3, "57c71dc704bff5dc9646e5cf96d51a1234961e32ba6ba9402c3b19bb"}}]})

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xbd0)

[  162.025814][ T4792] usb 5-1: Using ep0 maxpacket: 16
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xbe8)

[  162.095936][   T22] usbhid 1-1:0.0: can't add hid device: -71
[  162.102010][   T22] usbhid: probe of 1-1:0.0 failed with error -71
[  162.116325][   T22] usb 1-1: USB disconnect, device number 36
[  162.126311][    T9] usb 2-1: Using ep0 maxpacket: 32
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc00)

[  162.155532][ T4792] usb 5-1: config 1 has an invalid interface number: 4 but max is 2
[  162.163552][ T4792] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  162.172750][ T4792] usb 5-1: config 1 has no interface number 1
[  162.179133][ T4792] usb 5-1: too many endpoints for config 1 interface 4 altsetting 1: 92, using maximum allowed: 30
[  162.190440][ T4792] usb 5-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 47, changing to 7
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc18)

[  162.201773][ T4792] usb 5-1: config 1 interface 4 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 92
[  162.215260][ T4792] usb 5-1: config 1 interface 4 has no altsetting 0
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc30)

16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc48)

[  162.275552][    T9] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  162.283972][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.294111][    T9] usb 2-1: config 0 has no interfaces?
16:49:48 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc60)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc78)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xc90)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xca8)

[  162.395808][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  162.404939][    T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  162.413301][    T9] usb 2-1: Product: syz
[  162.426904][    T9] usb 2-1: config 0 descriptor??
16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xcc0)

[  162.455668][ T4792] usb 5-1: string descriptor 0 read error: -22
[  162.462044][ T4792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.471165][ T4792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.485407][   T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd
16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xcd8)

[  162.546297][ T4792] usb 5-1: 0:2 : does not exist
16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xcf0)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd08)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd20)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd38)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd50)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd68)

[  162.741341][ T4792] usb 5-1: USB disconnect, device number 28
16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd80)

16:49:49 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xd98)

[  162.855566][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.866617][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.879551][   T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.888600][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.900128][   T22] usb 1-1: config 0 descriptor??
16:49:49 executing program 2:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000180)="a8", 0x1) (async)
read$char_usb(r0, &(0x7f0000000300)=""/192, 0xc0)
read$char_usb(r0, &(0x7f0000000000)=""/228, 0xe4) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="5f83f32081017992e0c271379c3c19d91ed22363ddf7fc3bbbb497dd0a7be79c22318ab8aff5a04d0c302ae0ba0134c546c1dd1cab5187bdea154a196de2aca77a18957b1d29b01d0486d472f170b49d9ca087055ebbfaca1902da54ff04209a8dde718ece8f188bce62bc8808d80e10282e0c57701a29e955b2c107724dc97172019925c9ccce2e4ebb4ef09efa21340634fc79e343f78acd7206adfc889c0c84fa864bbe5bc498e1b2eed6c8ae83ddd41031f942bdf2a92b76c7743f0613e05a286c52e138a4a4fe5f4ed960c624c0ff32420032f018586fa57d11d0db7cb4a6da", @ANYRESOCT=r0, @ANYRES8=r0], 0x0)

[  163.222262][   T22] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  163.229877][   T22] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  163.237665][   T22] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  163.245103][   T22] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  163.252557][   T22] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  163.270462][   T22] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  163.297459][   T22] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  163.685396][ T4792] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  163.975383][ T4792] usb 3-1: device descriptor read/64, error -71
16:49:51 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xdb0)

16:49:51 executing program 4:
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) (async)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000180))
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) (async)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000))
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async)
syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0xbe, 0x88, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x1, "5693a04beaa1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, 's+', "4052da"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, '{'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x0, 0x20, 0x0, "fc15cea03b6e83ad"}, @as_header={0x7, 0x24, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  164.445407][ T4792] usb 3-1: device descriptor read/64, error -71
[  164.469442][    T9] usb 2-1: USB disconnect, device number 33
16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xdc8)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xde0)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xdf8)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe10)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe28)

16:49:51 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe40)

[  164.735487][ T4792] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  164.786073][  T726] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  164.935370][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  165.025387][  T726] usb 5-1: Using ep0 maxpacket: 16
[  165.025400][ T4792] usb 3-1: device descriptor read/64, error -71
[  165.155582][  T726] usb 5-1: config 1 has an invalid interface number: 4 but max is 2
[  165.163610][  T726] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  165.172646][  T726] usb 5-1: config 1 has no interface number 1
[  165.178794][  T726] usb 5-1: too many endpoints for config 1 interface 4 altsetting 1: 92, using maximum allowed: 30
[  165.189553][    T9] usb 2-1: Using ep0 maxpacket: 32
[  165.194866][  T726] usb 5-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 47, changing to 7
[  165.205934][  T726] usb 5-1: config 1 interface 4 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 92
[  165.218842][  T726] usb 5-1: config 1 interface 4 has no altsetting 0
[  165.305581][    T9] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  165.313942][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.324057][    T9] usb 2-1: config 0 has no interfaces?
[  165.425771][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  165.434833][    T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  165.442948][    T9] usb 2-1: Product: syz
[  165.445392][ T4792] usb 3-1: device descriptor read/64, error -71
[  165.450547][    T9] usb 2-1: config 0 descriptor??
[  165.535535][  T726] usb 5-1: string descriptor 0 read error: -22
[  165.541891][  T726] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.550964][  T726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.566035][ T4792] usb usb3-port1: attempt power cycle
[  165.602516][  T726] usb 5-1: 0:2 : does not exist
[  165.796145][  T726] usb 5-1: USB disconnect, device number 29
[  165.985411][ T4792] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  166.155460][ T4792] usb 3-1: device descriptor read/8, error -71
[  166.395435][ T4792] usb 3-1: device descriptor read/8, error -71
16:49:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000013c0)={0x24, &(0x7f0000001280)={0x40, 0x31, 0x64, {0x64, 0x31, "a531459b2d379d6f04b139e7fa92575fa2c7725f84486b2a40d8c1712ba0cee60126ada651bfc2b67b4b975c367033c15a07944706de5d8750c5ee178dc41fb3c79a5b330722ee81873b64f4ff00d41cd621c86198d69c6fc6c85209d6a46e61ee26"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000001340)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0x7, "b2"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x1, 0x2, 0x0, "f3"}, @local=@item_4={0x3, 0x2, 0x8, "3aa3780d"}]}}, &(0x7f0000001380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x81, 0x1, {0x22, 0xad6}}}}, &(0x7f0000001640)={0x2c, &(0x7f0000001400)={0x0, 0xf, 0xfa, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x1, 0x3f, "6d6e8b9b68280950cf453103ce14e3c3d3ac7a781e3d47d00aa60a96a48e488d8cb085c7c76e22a116c232bc1c44fb75d83de74791f754d238f1c7ac705257"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0xc1}})
r1 = syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) (async)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000840)={0x2, "2ebc"}) (async, rerun: 32)
syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x0, 0x2e, {0x2e, 0x24, "b23e61b1e01c2d337dc434eb130c05047b87837a1b1d4470c5dbe0d7d99dfe1057b6fb853926c482088422f0"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000007c0)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x0, "31b8cb8f", ':soz'}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x3, 0x4, 0x40, 0x0, 0x3}}}, &(0x7f0000000d80)={0x84, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "984f"}, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="41e3d46071af"}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1}}) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000f40)={0x20, 0xa, 0x90, {0x90, 0x3, "7b030da1d537c1e5127a12e59516f87cbe39278ec69a49c156b73076cd8b401afb9aeff25a7eb699282cae66086c3e10d0f7145154f26309dfbab3d0530954babc7f29711ec127308643a7ee639b0568d40f0942368483fe05e42b66494c8013f8558ce8d538eea4e80492422b91519a15ce0ab554cd2f2b72418e824b8fb0fdfdf21f0daae6ae549906ba7794a8"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000b80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfb7d, 0xff, 0x1, {0x22, 0x732}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001000)={0x20, 0x14, 0xad, "cd32f537b0088b88f94a1efd8cd275b2d5464766b7de5a4362a5e859757912ab86eee063adbf4a27cb67348149f208b567ff03487727c66679b1939b71871396c29de7e3a0dffd3ff663845ef3f62f3a3b4e98dec36f8b97d4e4d1ebc59b5b01fc84b309c066b75d03a3a52e7fa3f7968244dbc83362ed475d3a5d79786f8f3e07542ccb8568816c3aaf44068c9139640925c66ab27304a82f08ba4bdc210b785b5338c6e4acc4883349dcbb26"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x1, 0x8f, "f19f00df332e6661d3c4b6ed89c2cecae189a5fc20ac8fefb0d03f95c1f607347d62be0f6f6721012d534ca847db27aa2380c222da617bb777325871862de2bf3bbf472f8ce14b454073564fcf77c92c57f04a943e849efa10ff098260fbc72c49e949867206715d199e8c3d635d255c0a22b2f467660a7ded05309c5cfd64083cf91926f2bd30980e6f8af34236dc"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}})
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0)
syz_usb_disconnect(r0) (async, rerun: 64)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x0, 0x30, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "38c11594"}, {0x5, 0x24, 0x0, 0xf21}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x2, 0x1d}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0x1c, 0x24, 0x13, 0x0, "0aaed1e0701c6dfb27edf78bf2670044c37ba2d54239667d"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x27f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xb0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x84, 0x0, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "2d25985c135d98bdce762779857e59f61d3b559fc50d0e996655dbf966872bf9999df12a46b460d1c8d08333ffdde42e4d0f198d50162c43a0ad59ffb3b3e9f5004ec44405d5e1cb646da19531279fa8cda7d3d9e00272d82aa396f1b80a0548fe2a959151456cf8af4bd0103febcd175c783896c712c039f61df2b80588cf689e607a014345ce058f2b449a3e19751f6bc73f1b0cf7566f9cf6ba9eed154a7b45a33ad3979bb21d0dafe59f03a4809883fbdff62a50763200b8285f5a9a626d1216f63edc8c8e0afb0b15ff0604aa4c3c53c7"}}, {0x0, 0x0}]}) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x40, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x20, 0x40}, 0x26, &(0x7f0000000e40)={0x5, 0xf, 0x26, 0x3, [@generic={0x3, 0x10, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29c7cf08b1a206e64e308ec84a2edd34"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xf8, 0xffc1}]}, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000900)=@string={0x4d, 0x3, "689beb263d8256ab598219e5b600f08c31b1322a90842e6fde626036806c7db862428c87efbc2c7297480d58b74d80416b0a3c32cf3e5d2bd0b717c6b1b22ec45b89141edfaca9a31793af"}}]}) (async)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000980)={0x1, 0xffffffff, 0xffffffff})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x7f, 0x1, 0x0, 0x49}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xf153, 0xf00, 0x4, [0x30, 0x1fe3fcf, 0x3f, 0x3fc0, 0x30, 0x8080cf]}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x428}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x9c, &(0x7f0000000e80)=@string={0x9c, 0x3, "6fe0b2c5a005eb1128791293a39844abfb3f833b308ba709019fe508017ca58f067f738caebc9ec0be8224e8198b6ab9a67dc54b8286ca8ca4b7d0915af955932a44d0e21e115faa4b304c2be68608d1f538bf82fd7812da7051a8c360f77efa67b0a92ebc17d4d49cc029f661bf32fa00b73c0294a89f48e078291a4045e57590952f86f20610708bbd2c4f9748c48dc885498c7ded998f3e46"}}, {0x1e, &(0x7f0000000600)=@string={0x1e, 0x3, "57c71dc704bff5dc9646e5cf96d51a1234961e32ba6ba9402c3b19bb"}}]})

16:49:55 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f000306000000000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000013c0)={0x24, &(0x7f0000001280)={0x40, 0x31, 0x64, {0x64, 0x31, "a531459b2d379d6f04b139e7fa92575fa2c7725f84486b2a40d8c1712ba0cee60126ada651bfc2b67b4b975c367033c15a07944706de5d8750c5ee178dc41fb3c79a5b330722ee81873b64f4ff00d41cd621c86198d69c6fc6c85209d6a46e61ee26"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000001340)={0x0, 0x22, 0xa, {[@global=@item_012={0x1, 0x1, 0x7, "b2"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_012={0x1, 0x2, 0x0, "f3"}, @local=@item_4={0x3, 0x2, 0x8, "3aa3780d"}]}}, &(0x7f0000001380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x81, 0x1, {0x22, 0xad6}}}}, &(0x7f0000001640)={0x2c, &(0x7f0000001400)={0x0, 0xf, 0xfa, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001580)={0x20, 0x1, 0x3f, "6d6e8b9b68280950cf453103ce14e3c3d3ac7a781e3d47d00aa60a96a48e488d8cb085c7c76e22a116c232bc1c44fb75d83de74791f754d238f1c7ac705257"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0xc1}})
r1 = syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000840)={0x2, "2ebc"})
syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x0, 0x2e, {0x2e, 0x24, "b23e61b1e01c2d337dc434eb130c05047b87837a1b1d4470c5dbe0d7d99dfe1057b6fb853926c482088422f0"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000007c0)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, @ptm_cap={0x3}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x0, "31b8cb8f", ':soz'}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x0, 0x3, 0x4, 0x40, 0x0, 0x3}}}, &(0x7f0000000d80)={0x84, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "984f"}, 0x0, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="41e3d46071af"}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1}})
syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000f40)={0x20, 0xa, 0x90, {0x90, 0x3, "7b030da1d537c1e5127a12e59516f87cbe39278ec69a49c156b73076cd8b401afb9aeff25a7eb699282cae66086c3e10d0f7145154f26309dfbab3d0530954babc7f29711ec127308643a7ee639b0568d40f0942368483fe05e42b66494c8013f8558ce8d538eea4e80492422b91519a15ce0ab554cd2f2b72418e824b8fb0fdfdf21f0daae6ae549906ba7794a8"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000b80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000c40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfb7d, 0xff, 0x1, {0x22, 0x732}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001000)={0x20, 0x14, 0xad, "cd32f537b0088b88f94a1efd8cd275b2d5464766b7de5a4362a5e859757912ab86eee063adbf4a27cb67348149f208b567ff03487727c66679b1939b71871396c29de7e3a0dffd3ff663845ef3f62f3a3b4e98dec36f8b97d4e4d1ebc59b5b01fc84b309c066b75d03a3a52e7fa3f7968244dbc83362ed475d3a5d79786f8f3e07542ccb8568816c3aaf44068c9139640925c66ab27304a82f08ba4bdc210b785b5338c6e4acc4883349dcbb26"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x1, 0x8f, "f19f00df332e6661d3c4b6ed89c2cecae189a5fc20ac8fefb0d03f95c1f607347d62be0f6f6721012d534ca847db27aa2380c222da617bb777325871862de2bf3bbf472f8ce14b454073564fcf77c92c57f04a943e849efa10ff098260fbc72c49e949867206715d199e8c3d635d255c0a22b2f467660a7ded05309c5cfd64083cf91926f2bd30980e6f8af34236dc"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x8}})
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0)
syz_usb_disconnect(r0)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x0, 0x30, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "38c11594"}, {0x5, 0x24, 0x0, 0xf21}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x2, 0x1d}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mdlm_detail={0x1c, 0x24, 0x13, 0x0, "0aaed1e0701c6dfb27edf78bf2670044c37ba2d54239667d"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x27f}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xb0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x84, 0x0, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "2d25985c135d98bdce762779857e59f61d3b559fc50d0e996655dbf966872bf9999df12a46b460d1c8d08333ffdde42e4d0f198d50162c43a0ad59ffb3b3e9f5004ec44405d5e1cb646da19531279fa8cda7d3d9e00272d82aa396f1b80a0548fe2a959151456cf8af4bd0103febcd175c783896c712c039f61df2b80588cf689e607a014345ce058f2b449a3e19751f6bc73f1b0cf7566f9cf6ba9eed154a7b45a33ad3979bb21d0dafe59f03a4809883fbdff62a50763200b8285f5a9a626d1216f63edc8c8e0afb0b15ff0604aa4c3c53c7"}}, {0x0, 0x0}]})
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x40, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x20, 0x40}, 0x26, &(0x7f0000000e40)={0x5, 0xf, 0x26, 0x3, [@generic={0x3, 0x10, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29c7cf08b1a206e64e308ec84a2edd34"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xf8, 0xffc1}]}, 0x2, [{0x0, 0x0}, {0x4d, &(0x7f0000000900)=@string={0x4d, 0x3, "689beb263d8256ab598219e5b600f08c31b1322a90842e6fde626036806c7db862428c87efbc2c7297480d58b74d80416b0a3c32cf3e5d2bd0b717c6b1b22ec45b89141edfaca9a31793af"}}]})
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000980)={0x1, 0xffffffff, 0xffffffff})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x0, 0x7f, 0x1, 0x0, 0x49}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xf153, 0xf00, 0x4, [0x30, 0x1fe3fcf, 0x3f, 0x3fc0, 0x30, 0x8080cf]}]}, 0x8, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x428}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x9c, &(0x7f0000000e80)=@string={0x9c, 0x3, "6fe0b2c5a005eb1128791293a39844abfb3f833b308ba709019fe508017ca58f067f738caebc9ec0be8224e8198b6ab9a67dc54b8286ca8ca4b7d0915af955932a44d0e21e115faa4b304c2be68608d1f538bf82fd7812da7051a8c360f77efa67b0a92ebc17d4d49cc029f661bf32fa00b73c0294a89f48e078291a4045e57590952f86f20610708bbd2c4f9748c48dc885498c7ded998f3e46"}}, {0x1e, &(0x7f0000000600)=@string={0x1e, 0x3, "57c71dc704bff5dc9646e5cf96d51a1234961e32ba6ba9402c3b19bb"}}]})

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe58)

16:49:55 executing program 4:
r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000180))
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000))
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0)
syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0xbe, 0x88, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x1, "5693a04beaa1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, 's+', "4052da"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, '{'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x0, 0x20, 0x0, "fc15cea03b6e83ad"}, @as_header={0x7, 0x24, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$hiddev(0x0, 0x0, 0x0) (async)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) (async)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000040)={0x3, 0x100, 0x7}) (async)
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000180)) (async)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) (async)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) (async)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000000)) (async)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) (async)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async)
syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0xbe, 0x88, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x3}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "5c1e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x1000, 0x1, "5693a04beaa1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, 's+', "4052da"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, '{'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x0, 0x20, 0x0, "fc15cea03b6e83ad"}, @as_header={0x7, 0x24, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2f, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)

16:49:55 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000020f003176c400000100001090200f8000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

[  168.725443][ T5735] usb 1-1: string descriptor 0 read error: -32
[  168.748262][  T726] usb 1-1: USB disconnect, device number 37
[  168.750453][ T4792] usb 2-1: USB disconnect, device number 34
16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe70)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xe88)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xea0)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xeb8)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xed0)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xee8)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf00)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf18)

[  169.085415][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  169.093242][    T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd
16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf30)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf48)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf60)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf78)

16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xf90)

[  169.246131][  T726] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  169.275390][ T4792] usb 2-1: new high-speed USB device number 35 using dummy_hcd
16:49:55 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xfa8)

[  169.336231][    T9] usb 5-1: Using ep0 maxpacket: 16
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xfc0)

16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xfd8)

16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0)

[  169.455788][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.467158][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.480295][    T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.489348][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.497457][    T9] usb 5-1: config 1 has an invalid interface number: 4 but max is 2
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1008)

[  169.505557][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  169.514541][    T9] usb 5-1: config 1 has no interface number 1
[  169.521359][    T9] usb 5-1: too many endpoints for config 1 interface 4 altsetting 1: 92, using maximum allowed: 30
[  169.532156][    T9] usb 5-1: config 1 interface 4 altsetting 1 endpoint 0x82 has an invalid bInterval 47, changing to 7
[  169.543237][    T9] usb 5-1: config 1 interface 4 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 92
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1020)

[  169.545374][ T4792] usb 2-1: Using ep0 maxpacket: 32
[  169.556157][    T9] usb 5-1: config 1 interface 4 has no altsetting 0
[  169.559503][    T8] usb 3-1: config 0 descriptor??
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1038)

16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1050)

[  169.675574][  T726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.686656][  T726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.699938][  T726] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.709048][  T726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.720139][  T726] usb 1-1: config 0 descriptor??
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068)

16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1080)

[  169.725546][ T4792] usb 2-1: config index 0 descriptor too short (expected 63488, got 36)
[  169.733961][ T4792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.744448][ T4792] usb 2-1: config 0 has no interfaces?
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x1098)

[  169.836117][    T9] usb 5-1: string descriptor 0 read error: -22
[  169.842469][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.851790][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.855536][ T4792] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  169.868883][ T4792] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  169.877042][ T4792] usb 2-1: Product: syz
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x10b0)

[  169.885365][ T4792] usb 2-1: config 0 descriptor??
[  169.910906][    T9] usb 5-1: 0:2 : does not exist
16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x10c8)

16:49:56 executing program 3:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @rumble})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x10e0)

[  170.053303][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  170.060765][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  170.068181][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  170.075853][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  170.083234][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  170.091931][    T8] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  170.104748][    T8] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  170.120537][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.132976][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.146192][    T8] usb 5-1: USB disconnect, device number 30
[  170.200305][  T726] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  170.208227][  T726] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  170.216259][  T726] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  170.223643][  T726] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  170.231359][  T726] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  170.239900][  T726] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  170.260141][  T726] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
panic: replaceArg: group fields don't match: 1/0

goroutine 15 [running]:
github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc0004d7360?}, {0xe56770?, 0xc0004d75c0?})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:377 +0x425
github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc0004d7340?}, {0xe56770?, 0xc0004d75a0?})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345
github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc0004d7320?}, {0xe56770?, 0xc0004d7580?})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345
github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc0004d7300?}, {0xe56770?, 0xc0004d7560?})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345
github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc0004d72e0?}, {0xe56770?, 0xc0004d7540?})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345
github.com/google/syzkaller/prog.(*StructType).mutate(0x16d44a0, 0xc0004d7500, 0xc00009f950, {0xe56770, 0xc0004d72c0?}, {0xc00009f8b8, {0x1db72e0, 0x4, 0x4}, 0xc000e34e40, ...})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:490 +0x185
github.com/google/syzkaller/prog.(*Target).mutateArg(0x418408?, 0x0?, 0xc000c4bca0?, {0xe56770, 0xc0004d72c0}, {0xc00009f8b8, {0x1db72e0, 0x4, 0x4}, 0xc000e34e40, ...}, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:245 +0xe2
github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc000c4be48)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:196 +0x245
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc000e7a000, {0xe52aa8?, 0xc0015ca2a0}, 0x1e, 0xc001acc040, 0xc00007af00, {0xc001964000, 0x45c, 0x500})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:51 +0x2ba
main.(*Proc).loop(0xc001acc640)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x365
created by main.main in goroutine 1
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:336 +0x1665
[  171.345257][ T4792] usb 1-1: USB disconnect, device number 38
[  171.383157][   T22] usb 2-1: USB disconnect, device number 35