42 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1091.168957][ T2356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.180232][ T2356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.188065][T15520] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1091.190683][ T2356] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1091.206181][ T2356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "fff7"}, @local=@item_4={0x3, 0x2, 0x0, "a9e8e09b"}]}}, 0x0}, 0x0) [ 1091.218568][ T2356] usb 1-1: config 0 descriptor?? [ 1091.224521][T27424] device syzkaller0 entered promiscuous mode [ 1091.298125][ T2358] hub 3-1:0.0: activate --> -90 [ 1091.458109][T15520] usb 4-1: Using ep0 maxpacket: 32 [ 1091.463160][T15518] cdc_ncm 5-1:1.0: bind() failure [ 1091.469019][T15518] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1091.475616][T15518] cdc_ncm 5-1:1.1: bind() failure [ 1091.483224][T15518] usb 5-1: USB disconnect, device number 32 [ 1091.503578][T12517] usb 3-1: USB disconnect, device number 37 [ 1091.518399][ T2358] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1091.538077][T13059] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1091.608122][T15520] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1091.616659][T15520] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1091.626587][T15520] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.698289][ T2356] hid (null): bogus close delimiter [ 1091.828102][T15520] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1091.837030][T15520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.844834][T15520] usb 4-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1091.856705][T15520] usb 4-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1091.879093][T15520] usb 4-1: SerialNumber: 䀁 [ 1091.898196][T13059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.909083][T13059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.918856][T13059] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1091.927872][T13059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.936420][T13059] usb 2-1: config 0 descriptor?? executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1092.218161][T15520] usb 4-1: 0:2 : does not exist [ 1092.225275][T15520] usb 4-1: USB disconnect, device number 43 [ 1092.231301][T15518] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1092.288172][T12517] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1092.398142][ T2356] uclogic 0003:256C:006D.018A: failed retrieving string descriptor #200: -71 [ 1092.406851][ T2356] uclogic 0003:256C:006D.018A: failed retrieving pen parameters: -71 [ 1092.414912][ T2356] uclogic 0003:256C:006D.018A: failed probing pen v2 parameters: -71 [ 1092.423934][T13059] isku 0003:1E7D:319C.018B: item fetching failed at offset 3/7 [ 1092.431375][ T2356] uclogic 0003:256C:006D.018A: failed probing parameters: -71 [ 1092.438831][T13059] isku 0003:1E7D:319C.018B: parse failed [ 1092.444324][ T2356] uclogic: probe of 0003:256C:006D.018A failed with error -71 [ 1092.451642][T13059] isku: probe of 0003:1E7D:319C.018B failed with error -22 [ 1092.459945][ T2356] usb 1-1: USB disconnect, device number 43 [ 1092.528068][T12517] usb 3-1: Using ep0 maxpacket: 16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) [ 1092.618150][T15518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.628873][T15518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.644658][T15518] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1092.653659][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) [ 1092.653700][T15518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.665525][T15520] usb 2-1: USB disconnect, device number 26 [ 1092.679466][T12517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.683207][T15518] usb 5-1: config 0 descriptor?? [ 1092.692687][T12517] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.706110][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.714793][T12517] usb 3-1: config 0 descriptor?? executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d0000090582020002000000090503ada9"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 1092.920598][T27440] device syzkaller0 entered promiscuous mode [ 1092.988051][ T2356] usb 4-1: new high-speed USB device number 44 using dummy_hcd executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1093.228067][ T2356] usb 4-1: Using ep0 maxpacket: 16 [ 1093.268078][T13059] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1093.308113][T15518] usbhid 5-1:0.0: can't add hid device: -71 [ 1093.313988][T15518] usbhid: probe of 5-1:0.0 failed with error -71 [ 1093.321886][T15518] usb 5-1: USB disconnect, device number 33 [ 1093.348107][ T2356] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1093.358884][ T2356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.369674][ T2356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.379270][ T2356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1093.393623][ T2356] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1093.402647][ T2356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.412335][ T2356] usb 4-1: config 0 descriptor?? [ 1093.438081][T15520] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1093.508082][T13059] usb 1-1: Using ep0 maxpacket: 16 [ 1093.602971][T27431] UDC core: couldn't find an available UDC or it's busy: -16 [ 1093.610463][T27431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1093.628103][T13059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.638850][T13059] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1093.698042][T15520] usb 2-1: Using ep0 maxpacket: 32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c3400000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1093.808532][T13059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.817428][T13059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.825314][T13059] usb 1-1: Product: syz [ 1093.828516][T15520] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1093.829324][T13059] usb 1-1: Manufacturer: syz [ 1093.842492][T15520] usb 2-1: config 1 has no interface number 1 [ 1093.842700][T13059] usb 1-1: SerialNumber: syz [ 1093.848726][T15520] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1093.889531][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.896493][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.903424][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.910385][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.917260][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.924159][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.931012][ T2356] uclogic 0003:5543:0781.018C: unknown main item tag 0x0 [ 1093.937962][ T2356] uclogic 0003:5543:0781.018C: No inputs registered, leaving [ 1093.945657][ T2356] uclogic 0003:5543:0781.018C: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input0 [ 1094.048164][T15520] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1094.057030][T15520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.064860][T15520] usb 2-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1094.076659][T15518] usb 5-1: new high-speed USB device number 34 using dummy_hcd executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1094.084043][T15520] usb 2-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1094.108049][T15520] usb 2-1: SerialNumber: 䀁 [ 1094.112917][T15517] usb 4-1: USB disconnect, device number 44 [ 1094.178129][T12517] usbhid 3-1:0.0: can't add hid device: -71 [ 1094.183939][T12517] usbhid: probe of 3-1:0.0 failed with error -71 [ 1094.193093][T12517] usb 3-1: USB disconnect, device number 38 [ 1094.348047][T15518] usb 5-1: Using ep0 maxpacket: 32 [ 1094.438217][T15520] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1094.445518][T15520] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1094.470669][T15520] usb 2-1: USB disconnect, device number 27 [ 1094.488100][T15518] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1094.498506][T15518] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1094.507282][T15518] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1094.516169][T15518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.524806][T15518] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1094.533656][T15518] usb 5-1: no configuration chosen from 1 choice [ 1094.548198][T12517] usb 3-1: new high-speed USB device number 39 using dummy_hcd executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1094.651292][T27455] device syzkaller0 entered promiscuous mode executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 3: pipe2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) [ 1094.908130][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.919163][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.928893][T12517] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1094.937798][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.946826][T12517] usb 3-1: config 0 descriptor?? [ 1094.988136][T13059] cdc_ncm 1-1:1.0: bind() failure [ 1094.994053][T13059] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1095.001537][T13059] cdc_ncm 1-1:1.1: bind() failure [ 1095.012093][T13059] usb 1-1: USB disconnect, device number 44 [ 1095.028184][T15518] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1095.158066][T15520] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1095.278038][T15518] usb 4-1: Using ep0 maxpacket: 16 [ 1095.398140][T15520] usb 2-1: Using ep0 maxpacket: 16 [ 1095.403186][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.414065][T15518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1095.418393][T12517] hid (null): bogus close delimiter [ 1095.427581][T15518] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1095.440944][T15518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.449501][T15518] usb 4-1: config 0 descriptor?? [ 1095.509734][T27470] device syzkaller0 entered promiscuous mode [ 1095.548143][T15520] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1095.558929][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.569931][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.579509][T15520] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1095.592363][T15520] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1095.601280][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.610915][T15520] usb 2-1: config 0 descriptor?? [ 1095.878053][T13059] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1096.090850][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.097757][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.104643][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.112054][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.118074][T13059] usb 1-1: Using ep0 maxpacket: 32 [ 1096.118996][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.128155][T12517] uclogic 0003:256C:006D.018D: failed retrieving string descriptor #200: -71 [ 1096.130943][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.140070][T12517] uclogic 0003:256C:006D.018D: failed retrieving pen parameters: -71 [ 1096.146301][T15520] uclogic 0003:5543:0781.018E: unknown main item tag 0x0 [ 1096.154677][T12517] uclogic 0003:256C:006D.018D: failed probing pen v2 parameters: -71 [ 1096.161396][T15520] uclogic 0003:5543:0781.018E: No inputs registered, leaving [ 1096.169512][T12517] uclogic 0003:256C:006D.018D: failed probing parameters: -71 [ 1096.177119][T15520] uclogic 0003:5543:0781.018E: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 1096.184765][T12517] uclogic: probe of 0003:256C:006D.018D failed with error -71 [ 1096.203659][T12517] usb 3-1: USB disconnect, device number 39 [ 1096.248150][T13059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1096.259417][T13059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1096.270521][T13059] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1096.279342][T13059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.288559][T13059] usb 1-1: config 0 descriptor?? [ 1096.291761][T15520] usb 2-1: USB disconnect, device number 28 [ 1096.308160][T27474] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1096.329504][T13059] hub 1-1:0.0: USB hub found [ 1096.331272][T27463] UDC core: couldn't find an available UDC or it's busy: -16 [ 1096.341480][T27463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1096.548128][T13059] hub 1-1:0.0: 2 ports detected executing program 2: syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f7525"], 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d0000090582020002000000090503ada9"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) [ 1096.810644][T15517] usb 5-1: USB disconnect, device number 34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1096.895716][T27485] device syzkaller0 entered promiscuous mode [ 1096.898068][T12517] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1096.928164][T15518] usbhid 4-1:0.0: can't add hid device: -71 [ 1096.934170][T15518] usbhid: probe of 4-1:0.0 failed with error -71 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1096.945113][T15518] usb 4-1: USB disconnect, device number 45 [ 1097.068076][ T2357] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1097.148052][T12517] usb 3-1: Using ep0 maxpacket: 32 [ 1097.238089][T15517] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1097.268114][T12517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.278343][T12517] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.308052][ T2357] usb 2-1: Using ep0 maxpacket: 32 [ 1097.388049][T15518] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1097.429432][ T2357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.440317][T12517] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.449223][ T2357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.458767][T12517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.466567][ T2357] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1097.475433][T12517] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1097.487234][ T2357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.495056][T12517] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1097.517431][T15517] usb 5-1: Using ep0 maxpacket: 16 [ 1097.518346][ T2357] usb 2-1: config 0 descriptor?? [ 1097.527264][T12517] usb 3-1: SerialNumber: 䀁 [ 1097.558702][ T2357] hub 2-1:0.0: USB hub found [ 1097.658102][T15517] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.669025][T15517] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1097.768119][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.778174][ T2357] hub 2-1:0.0: 1 port detected [ 1097.778927][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.792990][T15518] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1097.802007][T15518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.810746][T15518] usb 4-1: config 0 descriptor?? [ 1097.848367][T12517] usb 3-1: 0:2 : does not exist [ 1097.848422][T15517] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.862495][T15517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.871266][T15517] usb 5-1: Product: syz [ 1097.873257][T12517] usb 3-1: USB disconnect, device number 40 [ 1097.875325][T15517] usb 5-1: Manufacturer: syz [ 1097.885523][T15517] usb 5-1: SerialNumber: syz executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) [ 1098.498628][T15520] usb 1-1: USB disconnect, device number 45 [ 1098.588383][T15518] usbhid 4-1:0.0: can't add hid device: -71 [ 1098.594311][T15518] usbhid: probe of 4-1:0.0 failed with error -71 [ 1098.602129][T15518] usb 4-1: USB disconnect, device number 46 [ 1098.608190][T12517] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1098.648193][ T2357] hub 2-1:0.0: activate --> -90 [ 1098.848058][T12517] usb 3-1: Using ep0 maxpacket: 16 [ 1098.848820][T15518] usb 2-1: USB disconnect, device number 29 [ 1098.868121][ T2357] hub 2-1:0.0: hub_ext_port_status failed (err = -71) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) [ 1098.968140][T12517] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1098.978860][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.989665][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.999310][T12517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) [ 1099.012133][T12517] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1099.018187][T15517] cdc_ncm 5-1:1.0: bind() failure [ 1099.021245][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.032302][T15517] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1099.040608][T15517] cdc_ncm 5-1:1.1: bind() failure [ 1099.057269][T15517] usb 5-1: USB disconnect, device number 35 [ 1099.061900][T12517] usb 3-1: config 0 descriptor?? executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) [ 1099.119890][T27503] device syzkaller0 entered promiscuous mode executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1099.417754][T27524] device syzkaller0 entered promiscuous mode executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) [ 1099.479106][ T2357] usb 4-1: new high-speed USB device number 47 using dummy_hcd executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) [ 1099.549534][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.558908][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.568087][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.575370][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.584469][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 executing program 0: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1099.593400][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.600614][T12517] uclogic 0003:5543:0781.018F: unknown main item tag 0x0 [ 1099.607731][T12517] uclogic 0003:5543:0781.018F: No inputs registered, leaving [ 1099.618486][T27538] device syzkaller0 entered promiscuous mode [ 1099.620564][T12517] uclogic 0003:5543:0781.018F: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1099.751260][ T2356] usb 3-1: USB disconnect, device number 41 [ 1099.788117][ T2358] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1099.848126][ T2357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.859120][ T2357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.868901][ T2357] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1099.877776][ T2357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.886634][ T2357] usb 4-1: config 0 descriptor?? [ 1099.928892][T12517] usb 1-1: new high-speed USB device number 46 using dummy_hcd executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) [ 1100.148208][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.159037][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.168642][T12517] usb 1-1: Using ep0 maxpacket: 32 [ 1100.173575][ T2358] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1100.182400][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.191006][ T2358] usb 5-1: config 0 descriptor?? executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) executing program 2: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1100.288152][T12517] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1100.297433][T12517] usb 1-1: config 1 has no interface number 1 [ 1100.312057][T12517] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1100.478157][T12517] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1100.487300][T12517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.495135][T12517] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1100.506930][T12517] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1100.529315][T12517] usb 1-1: SerialNumber: 䀁 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1100.668834][ T2358] hid (null): bogus close delimiter [ 1100.674571][ T2357] usbhid 4-1:0.0: can't add hid device: -71 [ 1100.685461][ T2357] usbhid: probe of 4-1:0.0 failed with error -71 [ 1100.705862][ T2357] usb 4-1: USB disconnect, device number 47 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) dup2(r0, r0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) [ 1100.731406][T27565] device syzkaller0 entered promiscuous mode executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) [ 1100.848217][T12517] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1100.855481][T12517] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1100.883845][T12517] usb 1-1: USB disconnect, device number 46 [ 1101.078056][ T2356] usb 2-1: new high-speed USB device number 30 using dummy_hcd executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1101.177342][T27575] device syzkaller0 entered promiscuous mode executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1101.240069][T27577] device syzkaller0 entered promiscuous mode executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1101.318048][ T2356] usb 2-1: Using ep0 maxpacket: 16 [ 1101.334337][T27581] device syzkaller0 entered promiscuous mode executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) dup2(r0, r0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x4, {0x4, 0x0, "a8c6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1101.358184][ T2358] uclogic 0003:256C:006D.0190: failed retrieving string descriptor #200: -71 [ 1101.367086][ T2358] uclogic 0003:256C:006D.0190: failed retrieving pen parameters: -71 [ 1101.375082][ T2358] uclogic 0003:256C:006D.0190: failed probing pen v2 parameters: -71 [ 1101.384478][ T2358] uclogic 0003:256C:006D.0190: failed probing parameters: -71 [ 1101.392287][ T2358] uclogic: probe of 0003:256C:006D.0190 failed with error -71 [ 1101.401146][ T2358] usb 5-1: USB disconnect, device number 36 [ 1101.438158][ T2356] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1101.449988][ T2356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.460939][ T2356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.470729][ T2356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1101.483675][ T2356] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1101.492692][ T2356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.501980][ T2356] usb 2-1: config 0 descriptor?? executing program 2: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1101.563891][T27590] device syzkaller0 entered promiscuous mode executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1101.732622][T27594] device syzkaller0 entered promiscuous mode executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1101.778094][T15518] usb 4-1: new high-speed USB device number 48 using dummy_hcd executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r2, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)) executing program 0: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1101.824900][T27596] device syzkaller0 entered promiscuous mode [ 1101.870366][T27598] loop4: detected capacity change from 0 to 16 [ 1101.879044][ T2358] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1101.901571][T27598] erofs: (device loop4): mounted with root inode @ nid 36. [ 1101.909814][T27598] attempt to access beyond end of device executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) [ 1101.909814][T27598] loop4: rw=0, want=14552337264, limit=16 [ 1102.038100][ T2356] usbhid 2-1:0.0: can't add hid device: -71 [ 1102.043922][ T2356] usbhid: probe of 2-1:0.0 failed with error -71 [ 1102.053247][ T2356] usb 2-1: USB disconnect, device number 30 [ 1102.118059][ T2358] usb 3-1: Using ep0 maxpacket: 32 [ 1102.148081][T15516] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1102.178122][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.188883][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.198642][T15518] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1102.207497][T15518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.216541][T15518] usb 4-1: config 0 descriptor?? [ 1102.238140][ T2358] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1102.246967][ T2358] usb 3-1: config 1 has no interface number 1 [ 1102.253084][ T2358] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1102.398053][T15516] usb 1-1: Using ep0 maxpacket: 8 [ 1102.418140][ T2358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.427060][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.434877][ T2358] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1102.446763][ T2358] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1102.469171][ T2358] usb 3-1: SerialNumber: 䀁 [ 1102.496117][T27606] device syzkaller0 entered promiscuous mode executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), 0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1102.548220][T15516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1102.718490][T15516] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1102.727348][T15516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.735241][T15516] usb 1-1: Product: syz [ 1102.739214][T15516] usb 1-1: Manufacturer: syz [ 1102.743580][T15516] usb 1-1: SerialNumber: syz [ 1102.749104][T15516] usb 1-1: config 0 descriptor?? [ 1102.788164][ T2358] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1102.795453][ T2358] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1102.820490][ T2358] usb 3-1: USB disconnect, device number 42 [ 1102.830192][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1102.858213][T15517] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1102.998159][T15516] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 1103.004505][T15518] usbhid 4-1:0.0: can't add hid device: -71 [ 1103.010211][T15518] usbhid: probe of 4-1:0.0 failed with error -71 [ 1103.016971][T15516] usb 1-1: No valid video chain found. [ 1103.023460][T15518] usb 4-1: USB disconnect, device number 48 [ 1103.058117][T13472] usb 5-1: new high-speed USB device number 37 using dummy_hcd executing program 2: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1103.200249][T15520] usb 1-1: USB disconnect, device number 47 [ 1103.238164][T15517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.249065][T15517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.258768][T15517] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1103.267624][T15517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.276277][T15517] usb 2-1: config 0 descriptor?? [ 1103.308118][T13472] usb 5-1: Using ep0 maxpacket: 16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1103.428171][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.438931][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.448455][T13472] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1103.457253][T13472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.466210][T13472] usb 5-1: config 0 descriptor?? executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r2, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)) [ 1103.739082][T27621] device syzkaller0 entered promiscuous mode [ 1103.755127][T27623] loop2: detected capacity change from 0 to 16 [ 1103.768053][ T2357] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1103.768860][T15517] hid (null): bogus close delimiter executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) executing program 0: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1103.803338][T27623] erofs: (device loop2): mounted with root inode @ nid 36. [ 1103.813703][T27623] attempt to access beyond end of device [ 1103.813703][T27623] loop2: rw=0, want=14552337264, limit=16 executing program 2: syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1103.949130][T13472] sony 0003:054C:0374.0192: item fetching failed at offset 5/7 [ 1103.956639][T13472] sony 0003:054C:0374.0192: parse failed [ 1103.962040][T13472] sony: probe of 0003:054C:0374.0192 failed with error -22 [ 1104.008118][ T2357] usb 4-1: Using ep0 maxpacket: 16 [ 1104.108084][ T2358] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1104.128166][ T2357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.139085][ T2357] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1104.151801][ T2356] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1104.159306][ T2357] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1104.160874][T13472] usb 5-1: USB disconnect, device number 37 [ 1104.168300][ T2357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.183888][ T2357] usb 4-1: config 0 descriptor?? [ 1104.358098][ T2358] usb 1-1: Using ep0 maxpacket: 32 [ 1104.408059][ T2356] usb 3-1: Using ep0 maxpacket: 32 [ 1104.448096][T15517] uclogic 0003:256C:006D.0191: failed retrieving string descriptor #200: -71 [ 1104.456878][T15517] uclogic 0003:256C:006D.0191: failed retrieving pen parameters: -71 [ 1104.465763][T15517] uclogic 0003:256C:006D.0191: failed probing pen v2 parameters: -71 [ 1104.473898][T15517] uclogic 0003:256C:006D.0191: failed probing parameters: -71 [ 1104.478172][ T2358] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1104.481235][T15517] uclogic: probe of 0003:256C:006D.0191 failed with error -71 [ 1104.490464][ T2358] usb 1-1: config 1 has no interface number 1 [ 1104.503348][T15517] usb 2-1: USB disconnect, device number 31 [ 1104.503605][ T2358] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1104.528112][ T2356] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1104.538175][ T2356] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1104.678203][ T2358] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.687330][ T2358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.695260][ T2358] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1104.707440][ T2356] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.716496][ T2358] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1104.738995][ T2356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.746838][ T2356] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1104.759056][ T2358] usb 1-1: SerialNumber: 䀁 [ 1104.763443][ T2356] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1104.786539][ T2356] usb 3-1: SerialNumber: 䀁 executing program 1: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1104.958158][T13472] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1105.068835][T27619] UDC core: couldn't find an available UDC or it's busy: -16 [ 1105.076119][T27619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1105.108145][ T2358] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1105.115403][ T2358] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 1105.141324][ T2358] usb 1-1: USB disconnect, device number 48 [ 1105.218143][ T2356] usb 3-1: 0:2 : does not exist [ 1105.228413][T13472] usb 5-1: Using ep0 maxpacket: 32 [ 1105.240406][ T2356] usb 3-1: USB disconnect, device number 43 [ 1105.248654][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1105.348105][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1105.359149][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1105.370457][T13472] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1105.379480][T13472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.388364][T13472] usb 5-1: config 0 descriptor?? [ 1105.408142][T27634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1105.428822][T13472] hub 5-1:0.0: USB hub found executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, "ff"}, @local=@item_4={0x3, 0x2, 0x0, "a9e8e09b"}]}}, 0x0}, 0x0) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1105.511948][T27639] device syzkaller0 entered promiscuous mode executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1105.609703][T27647] device syzkaller0 entered promiscuous mode [ 1105.638115][ T2357] usbhid 4-1:0.0: can't add hid device: -71 [ 1105.643935][ T2357] usbhid: probe of 4-1:0.0 failed with error -71 [ 1105.651590][ T2357] usb 4-1: USB disconnect, device number 49 executing program 0: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1105.659400][T13472] hub 5-1:0.0: 2 ports detected [ 1105.838113][ T2356] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1105.848065][ T2358] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1105.938043][T15517] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1106.008043][ T2357] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1106.088079][ T2358] usb 2-1: Using ep0 maxpacket: 16 [ 1106.188057][T15517] usb 1-1: Using ep0 maxpacket: 32 [ 1106.198148][ T2356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.209282][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.220084][ T2356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.229807][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.239404][ T2356] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1106.248265][ T2358] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1106.257357][ T2356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.265439][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.274039][ T2356] usb 3-1: config 0 descriptor?? [ 1106.279531][ T2358] usb 2-1: config 0 descriptor?? [ 1106.308293][T15517] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1106.317115][T15517] usb 1-1: config 1 has no interface number 1 [ 1106.323383][T15517] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1106.336074][T15517] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1106.378125][ T2357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.388890][ T2357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.398464][ T2357] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1106.407347][ T2357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.416345][ T2357] usb 4-1: config 0 descriptor?? [ 1106.508291][T15517] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.517207][T15517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.525029][T15517] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1106.537773][T15517] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1106.560475][T15517] usb 1-1: SerialNumber: 䀁 [ 1106.759117][ T2358] sony 0003:054C:0374.0193: item fetching failed at offset 5/7 [ 1106.766653][ T2358] sony 0003:054C:0374.0193: parse failed [ 1106.773651][ T2358] sony: probe of 0003:054C:0374.0193 failed with error -22 [ 1106.780860][ T2356] isku 0003:1E7D:319C.0194: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 1106.898292][ T2357] hid (null): bogus close delimiter [ 1106.910613][T15517] usb 1-1: USB disconnect, device number 49 [ 1106.959380][ T2358] usb 2-1: USB disconnect, device number 32 [ 1106.988135][ T2356] isku 0003:1E7D:319C.0194: couldn't init struct isku_device [ 1106.995386][ T2356] isku 0003:1E7D:319C.0194: couldn't install keyboard [ 1107.002818][ T2356] isku: probe of 0003:1E7D:319C.0194 failed with error -71 [ 1107.014267][ T2356] usb 3-1: USB disconnect, device number 44 executing program 0: syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 1: syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1107.524785][T27662] device syzkaller0 entered promiscuous mode executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1107.598103][ T2357] uclogic 0003:256C:006D.0195: failed retrieving string descriptor #200: -71 [ 1107.606774][ T2357] uclogic 0003:256C:006D.0195: failed retrieving pen parameters: -71 [ 1107.619317][ T2357] uclogic 0003:256C:006D.0195: failed probing pen v2 parameters: -71 [ 1107.627268][ T2357] uclogic 0003:256C:006D.0195: failed probing parameters: -71 [ 1107.634754][ T2357] uclogic: probe of 0003:256C:006D.0195 failed with error -71 [ 1107.643420][ T2357] usb 4-1: USB disconnect, device number 50 [ 1107.758034][T15516] usb 2-1: new high-speed USB device number 33 using dummy_hcd executing program 0: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1107.918035][ T2358] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1108.008160][T15516] usb 2-1: Using ep0 maxpacket: 32 executing program 3: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1108.108110][ T2356] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1108.128257][T15516] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1108.138187][T15516] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1108.158104][ T2358] usb 3-1: Using ep0 maxpacket: 16 [ 1108.278120][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.289139][ T2358] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1108.301825][ T2358] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1108.311171][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.319762][ T2358] usb 3-1: config 0 descriptor?? [ 1108.328225][T15516] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.337119][T15516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.344946][T15516] usb 2-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1108.348073][ T2356] usb 1-1: Using ep0 maxpacket: 8 [ 1108.356761][T15516] usb 2-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1108.361674][ T2357] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1108.384353][T15516] usb 2-1: SerialNumber: 䀁 [ 1108.508120][ T2356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.528564][T15517] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 1108.578129][T15517] usb 5-1: device reset changed ep0 maxpacket size! [ 1108.584881][T13472] usb 5-1: USB disconnect, device number 38 [ 1108.638096][ T2357] usb 4-1: Using ep0 maxpacket: 32 [ 1108.678132][ T2356] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1108.687168][ T2356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.695166][ T2356] usb 1-1: Product: syz [ 1108.699495][ T2356] usb 1-1: Manufacturer: syz [ 1108.703885][ T2356] usb 1-1: SerialNumber: syz [ 1108.709064][ T2356] usb 1-1: config 0 descriptor?? [ 1108.718145][T15516] usb 2-1: 0:2 : does not exist [ 1108.725157][T15516] usb 2-1: USB disconnect, device number 33 [ 1108.738039][T13472] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1108.758109][ T2357] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1108.766943][ T2357] usb 4-1: config 1 has no interface number 1 [ 1108.773390][ T2357] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1108.786286][ T2357] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1108.948144][ T2357] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.957222][ T2357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.965175][ T2357] usb 4-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1108.977151][ T2356] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 1108.983335][ T2357] usb 4-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1109.005877][ T2356] usb 1-1: No valid video chain found. [ 1109.008040][T13472] usb 5-1: Using ep0 maxpacket: 16 [ 1109.012144][ T2357] usb 4-1: SerialNumber: 䀁 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, "ff"}, @local=@item_4={0x3, 0x2, 0x0, "a9e8e09b"}]}}, 0x0}, 0x0) [ 1109.158097][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.169515][T13472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.183910][T13472] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1109.192938][T13472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.201336][T15516] usb 1-1: USB disconnect, device number 50 [ 1109.207803][T13472] usb 5-1: config 0 descriptor?? [ 1109.228571][T27664] UDC core: couldn't find an available UDC or it's busy: -16 [ 1109.235775][T27664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1109.368175][ T2357] usb 4-1: USB disconnect, device number 51 [ 1109.408183][T12517] usb 2-1: new high-speed USB device number 34 using dummy_hcd executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1109.699056][T13472] sony 0003:054C:0374.0196: item fetching failed at offset 5/7 [ 1109.708240][T13472] sony 0003:054C:0374.0196: parse failed [ 1109.713809][T13472] sony: probe of 0003:054C:0374.0196 failed with error -22 [ 1109.734300][T27678] device syzkaller0 entered promiscuous mode executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1109.768132][T12517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.784851][T12517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.804173][ T2358] usbhid 3-1:0.0: can't add hid device: -71 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, 0x0, 0x0) executing program 0: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1109.812931][ T2358] usbhid: probe of 3-1:0.0 failed with error -71 [ 1109.819767][T12517] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1109.829658][ T2358] usb 3-1: USB disconnect, device number 45 [ 1109.835504][T12517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.846052][T12517] usb 2-1: config 0 descriptor?? [ 1109.899652][T15518] usb 5-1: USB disconnect, device number 39 [ 1110.088104][T15516] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1110.138059][T13472] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1110.188035][ T2358] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1110.329861][T12517] isku 0003:1E7D:319C.0197: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1110.398115][T13472] usb 1-1: Using ep0 maxpacket: 8 [ 1110.458097][ T2358] usb 3-1: device descriptor read/64, error -71 [ 1110.458160][T15516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.475265][T15516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.484838][T15516] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1110.493786][T15516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.502430][T15516] usb 4-1: config 0 descriptor?? [ 1110.538181][T12517] isku 0003:1E7D:319C.0197: couldn't init struct isku_device [ 1110.545536][T12517] isku 0003:1E7D:319C.0197: couldn't install keyboard [ 1110.552809][T12517] isku: probe of 0003:1E7D:319C.0197 failed with error -71 [ 1110.560918][T12517] usb 2-1: USB disconnect, device number 34 [ 1110.568135][T13472] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.698048][T15520] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1110.758220][T13472] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1110.767111][T13472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.774931][T13472] usb 1-1: Product: syz [ 1110.778944][T13472] usb 1-1: Manufacturer: syz [ 1110.783317][T13472] usb 1-1: SerialNumber: syz [ 1110.788555][T13472] usb 1-1: config 0 descriptor?? [ 1110.848069][ T2358] usb 3-1: device descriptor read/64, error -71 [ 1110.948048][T15520] usb 5-1: Using ep0 maxpacket: 16 [ 1110.978331][T15516] hid (null): bogus close delimiter executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1111.058114][T13472] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 1111.064314][T13472] usb 1-1: No valid video chain found. [ 1111.078097][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.089150][T15520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1111.090034][T27698] device syzkaller0 entered promiscuous mode executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1111.102188][T15520] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1111.116580][T15520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.118145][ T2358] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1111.129042][T15520] usb 5-1: config 0 descriptor?? executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1111.188090][T15516] usb 4-1: language id specifier not provided by device, defaulting to English [ 1111.225851][T27702] device syzkaller0 entered promiscuous mode [ 1111.272854][T15517] usb 1-1: USB disconnect, device number 51 [ 1111.398065][ T2358] usb 3-1: device descriptor read/64, error -71 [ 1111.538109][ T2356] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1111.618084][T15516] uclogic 0003:256C:006D.0198: failed retrieving string descriptor #200: -71 [ 1111.626936][T15516] uclogic 0003:256C:006D.0198: failed retrieving pen parameters: -71 [ 1111.634952][T15516] uclogic 0003:256C:006D.0198: failed probing pen v2 parameters: -71 [ 1111.642928][T15516] uclogic 0003:256C:006D.0198: failed probing parameters: -71 [ 1111.650537][T15516] uclogic: probe of 0003:256C:006D.0198 failed with error -71 [ 1111.659066][T15516] usb 4-1: USB disconnect, device number 52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1111.785555][ T2356] usb 2-1: Using ep0 maxpacket: 16 [ 1111.791041][ T2358] usb 3-1: device descriptor read/64, error -71 [ 1111.908152][ T2358] usb usb3-port1: attempt power cycle [ 1111.913560][ T2356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.924309][ T2356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.934314][ T2356] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1111.943416][ T2356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.952372][ T2356] usb 2-1: config 0 descriptor?? [ 1111.998795][T27693] UDC core: couldn't find an available UDC or it's busy: -16 [ 1112.006065][T27693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, "ff"}, @local=@item_4={0x3, 0x2, 0x0, "a9e8e09b"}]}}, 0x0}, 0x0) [ 1112.078125][T15517] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1112.328097][ T2358] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1112.398120][T15518] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1112.429124][ T2356] sony 0003:054C:0374.0199: item fetching failed at offset 5/7 [ 1112.436632][ T2356] sony 0003:054C:0374.0199: parse failed [ 1112.442255][ T2356] sony: probe of 0003:054C:0374.0199 failed with error -22 [ 1112.458114][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.468998][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.478666][T15517] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1112.487515][T15517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1112.496087][T15517] usb 1-1: config 0 descriptor?? [ 1112.498121][ T2358] usb 3-1: device descriptor read/8, error -71 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1112.556608][T27713] device syzkaller0 entered promiscuous mode [ 1112.578111][T15520] usbhid 5-1:0.0: can't add hid device: -71 [ 1112.584030][T15520] usbhid: probe of 5-1:0.0 failed with error -71 [ 1112.591629][T15520] usb 5-1: USB disconnect, device number 40 [ 1112.629421][T15516] usb 2-1: USB disconnect, device number 35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1112.768057][ T2358] usb 3-1: device descriptor read/8, error -71 [ 1112.803639][T27721] device syzkaller0 entered promiscuous mode executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1112.818260][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.829519][T15518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.839445][T15518] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1112.848416][T15518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.857195][T15518] usb 4-1: config 0 descriptor?? [ 1112.998301][T15517] hid (null): bogus close delimiter [ 1113.028078][T15520] usb 5-1: new high-speed USB device number 41 using dummy_hcd executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 1: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1113.166789][T27728] device syzkaller0 entered promiscuous mode [ 1113.218095][T15517] usb 1-1: language id specifier not provided by device, defaulting to English [ 1113.258081][ T2358] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1113.298021][T15520] usb 5-1: Using ep0 maxpacket: 32 [ 1113.332754][T15518] isku 0003:1E7D:319C.019B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1113.348311][ T2358] usb 3-1: Using ep0 maxpacket: 16 [ 1113.428238][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1113.439423][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1113.450493][T15520] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1113.459310][T15520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.467880][T15520] usb 5-1: config 0 descriptor?? [ 1113.471679][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.483367][ T2358] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1113.495965][ T2358] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1113.498155][T27717] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1113.504953][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.511778][T15516] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1113.524782][ T2358] usb 3-1: config 0 descriptor?? [ 1113.538662][T15520] hub 5-1:0.0: USB hub found [ 1113.543247][T15518] isku 0003:1E7D:319C.019B: couldn't init struct isku_device [ 1113.550682][T15518] isku 0003:1E7D:319C.019B: couldn't install keyboard [ 1113.557813][T15518] isku: probe of 0003:1E7D:319C.019B failed with error -71 [ 1113.566225][T15518] usb 4-1: USB disconnect, device number 53 [ 1113.638106][T15517] uclogic 0003:256C:006D.019A: failed retrieving string descriptor #200: -71 [ 1113.646723][T15517] uclogic 0003:256C:006D.019A: failed retrieving pen parameters: -71 [ 1113.654760][T15517] uclogic 0003:256C:006D.019A: failed probing pen v2 parameters: -71 [ 1113.662710][T15517] uclogic 0003:256C:006D.019A: failed probing parameters: -71 [ 1113.670092][T15517] uclogic: probe of 0003:256C:006D.019A failed with error -71 [ 1113.678429][T15517] usb 1-1: USB disconnect, device number 52 [ 1113.748088][T15520] hub 5-1:0.0: 2 ports detected [ 1113.798068][T15516] usb 2-1: device descriptor read/64, error -71 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1114.218053][T15516] usb 2-1: device descriptor read/64, error -71 [ 1114.328046][T15517] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1114.408053][T15518] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1114.408860][T27723] UDC core: couldn't find an available UDC or it's busy: -16 [ 1114.422684][T27723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1114.488272][T15516] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1114.588063][T15517] usb 4-1: Using ep0 maxpacket: 32 [ 1114.658050][T15518] usb 1-1: Using ep0 maxpacket: 16 [ 1114.718192][T15517] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1114.728619][T15517] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.741351][T15517] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1114.750177][T15517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.759072][T15517] usb 4-1: config 0 descriptor?? [ 1114.788088][T15516] usb 2-1: device descriptor read/64, error -71 [ 1114.808207][T15518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.819490][T15517] hub 4-1:0.0: bad descriptor, ignoring hub [ 1114.825231][T15517] hub: probe of 4-1:0.0 failed with error -5 [ 1114.831170][T15518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.840982][T15517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1114.848125][T15518] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1114.856933][T15518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.867675][T15518] usb 1-1: config 0 descriptor?? executing program 2: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1114.988089][ T2358] usbhid 3-1:0.0: can't add hid device: -71 [ 1114.993895][ T2358] usbhid: probe of 3-1:0.0 failed with error -71 [ 1115.001510][ T2358] usb 3-1: USB disconnect, device number 49 [ 1115.208498][T15516] usb 2-1: device descriptor read/64, error -71 [ 1115.339620][T15518] sony 0003:054C:0374.019C: item fetching failed at offset 5/7 [ 1115.347158][T15518] sony 0003:054C:0374.019C: parse failed [ 1115.352769][T15516] usb usb2-port1: attempt power cycle [ 1115.358092][T15518] sony: probe of 0003:054C:0374.019C failed with error -22 [ 1115.359495][ T2358] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1115.539652][T15520] usb 1-1: USB disconnect, device number 53 [ 1115.608037][ T2358] usb 3-1: Using ep0 maxpacket: 8 [ 1115.678253][T15518] usb 5-1: USB disconnect, device number 41 [ 1115.728143][ T2358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.778061][T15516] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1115.898134][ T2358] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1115.907058][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.915007][ T2358] usb 3-1: Product: syz [ 1115.918967][ T2358] usb 3-1: Manufacturer: syz [ 1115.923373][ T2358] usb 3-1: SerialNumber: syz [ 1115.929377][ T2358] usb 3-1: config 0 descriptor?? [ 1115.968146][T15516] usb 2-1: device descriptor read/8, error -71 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1116.066753][T27748] device syzkaller0 entered promiscuous mode executing program 0: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) executing program 4: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1116.190672][ T2358] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 1116.199160][ T2358] usb 3-1: No valid video chain found. [ 1116.248567][T15516] usb 2-1: device descriptor read/8, error -71 [ 1116.408058][ T2356] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1116.416742][ T2357] usb 3-1: USB disconnect, device number 50 [ 1116.478042][ T2358] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1116.648042][ T2356] usb 1-1: Using ep0 maxpacket: 8 [ 1116.718054][ T2358] usb 5-1: Using ep0 maxpacket: 32 [ 1116.748037][T15516] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1116.768134][ T2356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.838162][ T2358] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1116.847025][ T2358] usb 5-1: config 1 has no interface number 1 [ 1116.853013][ T2358] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1116.865747][ T2358] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}], 0x1}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1116.938152][ T2356] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1116.953731][ T2356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.963018][ T2356] usb 1-1: Product: syz [ 1116.974446][ T2356] usb 1-1: Manufacturer: syz [ 1116.978953][ T2356] usb 1-1: SerialNumber: syz [ 1116.983942][ T2356] usb 1-1: config 0 descriptor?? [ 1117.028132][ T2358] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.028165][T15516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.037887][ T2358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.048503][T15516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.055852][ T2358] usb 5-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1117.065658][T15516] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1117.077406][ T2358] usb 5-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1117.108548][T15516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.108608][ T2358] usb 5-1: SerialNumber: 䀁 [ 1117.119990][T15516] usb 2-1: config 0 descriptor?? executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1117.150057][T27766] device syzkaller0 entered promiscuous mode [ 1117.228164][T15518] usb 4-1: USB disconnect, device number 54 [ 1117.248122][ T2356] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 1117.254382][ T2356] usb 1-1: No valid video chain found. [ 1117.268065][ T2357] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1117.448131][ T2358] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1117.451310][T15518] usb 1-1: USB disconnect, device number 54 [ 1117.472778][ T2358] usb 5-1: USB disconnect, device number 42 [ 1117.508056][ T2357] usb 3-1: Using ep0 maxpacket: 16 executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1117.608467][T15516] hid (null): bogus close delimiter [ 1117.628190][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.639863][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 executing program 3: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1117.649908][ T2357] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1117.659029][ T2357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.667711][ T2357] usb 3-1: config 0 descriptor?? [ 1117.818091][T15516] usb 2-1: language id specifier not provided by device, defaulting to English executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}], 0x1}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1117.948079][ T2358] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1117.986832][T27782] device syzkaller0 entered promiscuous mode executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1118.149114][ T2357] sony 0003:054C:0374.019E: item fetching failed at offset 5/7 [ 1118.156718][ T2357] sony 0003:054C:0374.019E: parse failed [ 1118.162400][ T2357] sony: probe of 0003:054C:0374.019E failed with error -22 [ 1118.169509][ T2356] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1118.188071][ T2358] usb 4-1: Using ep0 maxpacket: 8 [ 1118.238080][T15516] uclogic 0003:256C:006D.019D: failed retrieving string descriptor #200: -71 [ 1118.246772][T15516] uclogic 0003:256C:006D.019D: failed retrieving pen parameters: -71 [ 1118.254805][T15516] uclogic 0003:256C:006D.019D: failed probing pen v2 parameters: -71 [ 1118.262738][T15516] uclogic 0003:256C:006D.019D: failed probing parameters: -71 [ 1118.270180][T15516] uclogic: probe of 0003:256C:006D.019D failed with error -71 [ 1118.280041][T15516] usb 2-1: USB disconnect, device number 39 [ 1118.308217][ T2358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.328051][T12517] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1118.363602][ T2357] usb 3-1: USB disconnect, device number 51 [ 1118.408114][ T2356] usb 5-1: Using ep0 maxpacket: 32 [ 1118.479162][ T2358] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1118.488174][ T2358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.496009][ T2358] usb 4-1: Product: syz [ 1118.500018][ T2358] usb 4-1: Manufacturer: syz [ 1118.504422][ T2358] usb 4-1: SerialNumber: syz [ 1118.509954][ T2358] usb 4-1: config 0 descriptor?? [ 1118.528132][ T2356] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1118.538374][ T2356] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1118.551799][ T2356] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1118.560759][ T2356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.568638][T12517] usb 1-1: Using ep0 maxpacket: 16 [ 1118.574398][ T2356] usb 5-1: config 0 descriptor?? [ 1118.618628][ T2356] hub 5-1:0.0: bad descriptor, ignoring hub [ 1118.624537][ T2356] hub: probe of 5-1:0.0 failed with error -5 [ 1118.630696][ T2356] usbhid 5-1:0.0: couldn't find an input interrupt endpoint executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1118.688145][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.698888][T12517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1118.711490][T12517] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1118.720301][T12517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.728896][T12517] usb 1-1: config 0 descriptor?? [ 1118.768211][ T2358] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 1118.775495][ T2358] usb 4-1: No valid video chain found. executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1118.976997][T15516] usb 4-1: USB disconnect, device number 55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) executing program 1: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1119.168056][ T2358] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1119.209252][T12517] microsoft 0003:045E:07DA.019F: unknown main item tag 0x0 [ 1119.216509][T12517] microsoft 0003:045E:07DA.019F: No inputs registered, leaving [ 1119.224672][T12517] microsoft 0003:045E:07DA.019F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1119.235941][T12517] microsoft 0003:045E:07DA.019F: no inputs found [ 1119.242077][T12517] microsoft 0003:045E:07DA.019F: could not initialize ff, continuing anyway [ 1119.418058][ T2358] usb 3-1: Using ep0 maxpacket: 32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1119.468037][T15518] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1119.538165][ T2358] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1119.546968][ T2358] usb 3-1: config 1 has no interface number 1 [ 1119.552922][ T2358] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1119.565469][ T2358] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.609542][T27784] UDC core: couldn't find an available UDC or it's busy: -16 [ 1119.616766][T27784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1119.728037][T15518] usb 2-1: Using ep0 maxpacket: 8 [ 1119.728141][ T2358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.741819][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.749609][ T2358] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1119.761528][ T2358] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1119.783924][ T2358] usb 3-1: SerialNumber: 䀁 [ 1119.788117][T15516] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1119.878090][T15518] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.058119][T15516] usb 4-1: Using ep0 maxpacket: 16 [ 1120.088188][T15518] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1120.097112][T15518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.104954][T15518] usb 2-1: Product: syz [ 1120.108178][ T2358] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1120.109074][T15518] usb 2-1: Manufacturer: syz [ 1120.119218][T15518] usb 2-1: SerialNumber: syz [ 1120.124637][T15518] usb 2-1: config 0 descriptor?? [ 1120.132823][ T2358] usb 3-1: USB disconnect, device number 52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1120.138812][T15517] usb 1-1: USB disconnect, device number 55 [ 1120.150268][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1120.188207][T15516] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1120.199598][T15516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.210310][T15516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.219927][T15516] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1120.233066][T15516] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1120.241970][T15516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.250460][T15516] usb 4-1: config 0 descriptor?? [ 1120.398196][T15518] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 1120.404396][T15518] usb 2-1: No valid video chain found. executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1120.538054][T15517] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1120.613746][T15518] usb 2-1: USB disconnect, device number 40 executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1120.828056][T12517] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1120.828227][T15516] usbhid 4-1:0.0: can't add hid device: -71 [ 1120.841255][T15516] usbhid: probe of 4-1:0.0 failed with error -71 [ 1120.850532][T15516] usb 4-1: USB disconnect, device number 56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1120.948175][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.959009][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.968582][T15517] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1120.977394][T15517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.985927][T15517] usb 1-1: config 0 descriptor?? [ 1121.028214][T15518] usb 5-1: USB disconnect, device number 43 [ 1121.068119][T12517] usb 3-1: Using ep0 maxpacket: 16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1121.149382][T27816] device syzkaller0 entered promiscuous mode [ 1121.188107][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) executing program 3: syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1121.198991][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.208661][T12517] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1121.217824][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.243855][T12517] usb 3-1: config 0 descriptor?? executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1121.478291][T15517] hid (null): bogus close delimiter [ 1121.498059][T15520] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1121.508067][T15518] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1121.618054][ T2358] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1121.698136][T15517] usb 1-1: language id specifier not provided by device, defaulting to English [ 1121.729097][T12517] sony 0003:054C:0374.01A1: item fetching failed at offset 5/7 [ 1121.736603][T12517] sony 0003:054C:0374.01A1: parse failed [ 1121.742278][T12517] sony: probe of 0003:054C:0374.01A1 failed with error -22 [ 1121.758294][T15518] usb 4-1: Using ep0 maxpacket: 32 [ 1121.858066][ T2358] usb 5-1: Using ep0 maxpacket: 16 [ 1121.878117][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.888898][T15518] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1121.897324][T15518] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1121.907363][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.916937][T15520] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1121.925833][T15518] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.934452][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.943328][T15520] usb 2-1: config 0 descriptor?? [ 1121.949421][T12517] usb 3-1: USB disconnect, device number 53 [ 1121.988166][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.999051][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.009016][ T2358] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1122.017933][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.026507][ T2358] usb 5-1: config 0 descriptor?? [ 1122.118112][T15518] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.127046][T15518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.134854][T15518] usb 4-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1122.146688][T15517] uclogic 0003:256C:006D.01A0: failed retrieving string descriptor #200: -71 [ 1122.155297][T15518] usb 4-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1122.177878][T15517] uclogic 0003:256C:006D.01A0: failed retrieving pen parameters: -71 [ 1122.185884][T15517] uclogic 0003:256C:006D.01A0: failed probing pen v2 parameters: -71 [ 1122.193815][T15517] uclogic 0003:256C:006D.01A0: failed probing parameters: -71 [ 1122.201073][T15518] usb 4-1: SerialNumber: 䀁 [ 1122.205821][T15517] uclogic: probe of 0003:256C:006D.01A0 failed with error -71 [ 1122.218181][T15517] usb 1-1: USB disconnect, device number 56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1122.428319][T15520] hid (null): bogus close delimiter [ 1122.508962][ T2358] sony 0003:054C:0374.01A3: item fetching failed at offset 5/7 [ 1122.516579][ T2358] sony 0003:054C:0374.01A3: parse failed [ 1122.522019][ T2358] sony: probe of 0003:054C:0374.01A3 failed with error -22 [ 1122.538153][T15518] usb 4-1: 0:2 : does not exist [ 1122.544409][T15518] usb 4-1: USB disconnect, device number 57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1122.698207][T15520] usb 2-1: language id specifier not provided by device, defaulting to English [ 1122.710944][T15516] usb 5-1: USB disconnect, device number 44 [ 1122.728069][T12517] usb 3-1: new high-speed USB device number 54 using dummy_hcd executing program 3: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1122.918031][T15517] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1122.972508][T12517] usb 3-1: Using ep0 maxpacket: 32 [ 1123.088116][T12517] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1123.098293][T12517] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.111099][T12517] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1123.120056][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.129694][T12517] usb 3-1: config 0 descriptor?? [ 1123.148107][T15520] uclogic 0003:256C:006D.01A2: failed retrieving string descriptor #200: -71 [ 1123.156765][T15520] uclogic 0003:256C:006D.01A2: failed retrieving pen parameters: -71 [ 1123.164899][T15520] uclogic 0003:256C:006D.01A2: failed probing pen v2 parameters: -71 [ 1123.168910][T12517] hub 3-1:0.0: bad descriptor, ignoring hub [ 1123.177025][T15520] uclogic 0003:256C:006D.01A2: failed probing parameters: -71 [ 1123.178644][T12517] hub: probe of 3-1:0.0 failed with error -5 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1123.186259][T15520] uclogic: probe of 0003:256C:006D.01A2 failed with error -71 [ 1123.192172][T12517] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1123.199015][T15517] usb 1-1: Using ep0 maxpacket: 32 [ 1123.205174][T15520] usb 2-1: USB disconnect, device number 41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) [ 1123.248029][T15516] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1123.256131][T27832] device syzkaller0 entered promiscuous mode [ 1123.348129][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.358975][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.368494][T15517] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1123.377304][T15517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.387152][T15517] usb 1-1: config 0 descriptor?? [ 1123.448680][T15517] hub 1-1:0.0: USB hub found [ 1123.498035][T15516] usb 4-1: Using ep0 maxpacket: 8 [ 1123.568072][T12517] usb 5-1: new high-speed USB device number 45 using dummy_hcd executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1123.639318][T15516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.658107][T15517] hub 1-1:0.0: 1 port detected [ 1123.808051][T12517] usb 5-1: Using ep0 maxpacket: 16 [ 1123.818119][T15516] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1123.827053][T15516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.834888][T15516] usb 4-1: Product: syz [ 1123.838882][T15516] usb 4-1: Manufacturer: syz [ 1123.843255][T15516] usb 4-1: SerialNumber: syz [ 1123.851241][T15516] usb 4-1: config 0 descriptor?? [ 1123.928102][T15520] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1123.928133][T12517] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1123.946156][T12517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.957082][T12517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.966703][T12517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1123.979548][T12517] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1123.988407][T12517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.996801][T12517] usb 5-1: config 0 descriptor?? [ 1124.099014][T15516] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 1124.105538][T15516] usb 4-1: No valid video chain found. [ 1124.188036][T15520] usb 2-1: Using ep0 maxpacket: 16 [ 1124.300184][T15517] usb 4-1: USB disconnect, device number 58 [ 1124.318145][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.328985][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.338624][T15520] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1124.347484][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.356119][T15520] usb 2-1: config 0 descriptor?? [ 1124.538109][T15516] hub 1-1:0.0: activate --> -90 [ 1124.538110][T12517] usbhid 5-1:0.0: can't add hid device: -71 [ 1124.538176][T12517] usbhid: probe of 5-1:0.0 failed with error -71 [ 1124.557557][T12517] usb 5-1: USB disconnect, device number 45 [ 1124.738745][T15517] usb 1-1: USB disconnect, device number 57 [ 1124.748266][T15516] hub 1-1:0.0: hub_ext_port_status failed (err = -71) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1124.839336][T15520] sony 0003:054C:0374.01A4: item fetching failed at offset 5/7 [ 1124.846882][T15520] sony 0003:054C:0374.01A4: parse failed [ 1124.852731][T15520] sony: probe of 0003:054C:0374.01A4 failed with error -22 [ 1124.876372][T27845] device syzkaller0 entered promiscuous mode executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1124.990430][T27852] device syzkaller0 entered promiscuous mode executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1125.040452][T12517] usb 2-1: USB disconnect, device number 42 executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1125.238039][T15517] usb 4-1: new high-speed USB device number 59 using dummy_hcd executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1125.303619][T27861] device syzkaller0 entered promiscuous mode [ 1125.338077][T15516] usb 5-1: new high-speed USB device number 46 using dummy_hcd executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1125.487182][T27867] device syzkaller0 entered promiscuous mode [ 1125.498212][T15517] usb 4-1: Using ep0 maxpacket: 16 [ 1125.628231][T15517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.639271][T15517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1125.652055][T15517] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1125.658030][T12517] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1125.661008][T15517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.677104][T15517] usb 4-1: config 0 descriptor?? [ 1125.708169][T15516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.719713][T15516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.729590][T15516] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1125.738597][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.747120][T15516] usb 5-1: config 0 descriptor?? [ 1125.758313][ T2358] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 1125.828087][T15520] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1125.908034][T12517] usb 1-1: Using ep0 maxpacket: 16 [ 1126.028118][T12517] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1126.038919][ T2358] usb 3-1: device firmware changed [ 1126.043994][ T2358] usb 3-1: USB disconnect, device number 54 [ 1126.049774][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.061388][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.071631][T12517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1126.078057][T15520] usb 2-1: Using ep0 maxpacket: 16 [ 1126.084524][T12517] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1126.098266][T12517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.106967][T12517] usb 1-1: config 0 descriptor?? [ 1126.149091][T15517] microsoft 0003:045E:07DA.01A5: unknown main item tag 0x0 [ 1126.156490][T15517] microsoft 0003:045E:07DA.01A5: No inputs registered, leaving [ 1126.166523][T15517] microsoft 0003:045E:07DA.01A5: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1126.177853][T15517] microsoft 0003:045E:07DA.01A5: no inputs found [ 1126.184142][T15517] microsoft 0003:045E:07DA.01A5: could not initialize ff, continuing anyway [ 1126.218420][T15516] hid (null): bogus close delimiter [ 1126.238155][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.248988][T15520] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1126.261611][T15520] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1126.270426][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.279285][T15520] usb 2-1: config 0 descriptor?? [ 1126.418038][ T2358] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1126.488084][T15516] usb 5-1: language id specifier not provided by device, defaulting to English [ 1126.550023][T27849] UDC core: couldn't find an available UDC or it's busy: -16 [ 1126.557238][T27849] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1126.648129][T12517] usbhid 1-1:0.0: can't add hid device: -71 [ 1126.653933][T12517] usbhid: probe of 1-1:0.0 failed with error -71 [ 1126.660086][ T2358] usb 3-1: Using ep0 maxpacket: 32 [ 1126.666025][T12517] usb 1-1: USB disconnect, device number 58 [ 1126.773999][T15520] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.01A7/input/input126 [ 1126.778227][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.796130][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.805883][ T2358] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1126.814800][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.824449][ T2358] usb 3-1: config 0 descriptor?? [ 1126.860125][T15520] microsoft 0003:045E:07DA.01A7: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1126.869466][ T2358] hub 3-1:0.0: USB hub found [ 1126.918191][T15516] uclogic 0003:256C:006D.01A6: failed retrieving string descriptor #200: -71 [ 1126.927077][T15516] uclogic 0003:256C:006D.01A6: failed retrieving pen parameters: -71 [ 1126.935265][T15516] uclogic 0003:256C:006D.01A6: failed probing pen v2 parameters: -71 [ 1126.943207][T15516] uclogic 0003:256C:006D.01A6: failed probing parameters: -71 [ 1126.950483][T15516] uclogic: probe of 0003:256C:006D.01A6 failed with error -71 [ 1126.959360][T15516] usb 5-1: USB disconnect, device number 46 executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1127.065960][T15517] usb 4-1: USB disconnect, device number 59 [ 1127.088108][ T2358] hub 3-1:0.0: 1 port detected executing program 3: syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1127.111679][T27877] device syzkaller0 entered promiscuous mode executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1127.178551][T27871] UDC core: couldn't find an available UDC or it's busy: -16 [ 1127.185940][T27871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1127.186765][T27883] device syzkaller0 entered promiscuous mode executing program 0: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x4, 0x2, 0x1000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000100)={0x0, 0x8000, 0x20}) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1127.568057][T15517] usb 4-1: new high-speed USB device number 60 using dummy_hcd executing program 1: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1127.694947][T15519] usb 2-1: USB disconnect, device number 43 [ 1127.708232][T15516] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1127.828034][T15517] usb 4-1: Using ep0 maxpacket: 32 [ 1127.958184][ T2358] hub 3-1:0.0: activate --> -90 [ 1127.968051][T15516] usb 5-1: Using ep0 maxpacket: 16 [ 1127.998132][T15517] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1128.006683][T15517] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1128.017442][T15517] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.118087][T15516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.129084][T15516] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1128.141985][T15516] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1128.151090][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.160788][T12517] usb 3-1: USB disconnect, device number 55 executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1128.162992][T15516] usb 5-1: config 0 descriptor?? [ 1128.175168][T15519] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1128.178099][ T2358] hub 3-1:0.0: hub_ext_port_status failed (err = -71) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1128.218077][T15517] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.227059][T15517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.236340][T15517] usb 4-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1128.248454][T15517] usb 4-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1128.271187][T15517] usb 4-1: SerialNumber: 䀁 [ 1128.281507][T27898] device syzkaller0 entered promiscuous mode executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1128.374432][T27905] device syzkaller0 entered promiscuous mode executing program 0: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x4, 0x2, 0x1000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000100)={0x0, 0x8000, 0x20}) [ 1128.438181][T15519] usb 2-1: Using ep0 maxpacket: 32 [ 1128.568218][T15519] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.578546][T15519] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.588313][T15517] usb 4-1: 0:2 : does not exist [ 1128.605441][T15517] usb 4-1: USB disconnect, device number 60 executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000080)=@udp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc901, &(0x7f00000002c0), 0x1, 0x4d6, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) close(r0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 1128.719190][T27913] loop2: detected capacity change from 0 to 512 [ 1128.738146][T15519] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.747118][T15519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.755434][T15519] usb 2-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1128.772276][T15519] usb 2-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1128.798537][T15519] usb 2-1: SerialNumber: 䀁 [ 1128.803895][T27913] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1128.815191][T27913] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1128.838076][T27913] EXT4-fs warning (device loop2): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1128.860371][T27913] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1128.879129][T27913] EXT4-fs (loop2): 1 truncate cleaned up [ 1128.884646][T27913] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1128.928602][T27913] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1128.937860][T27913] EXT4-fs warning (device loop2): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1129.059151][T27889] UDC core: couldn't find an available UDC or it's busy: -16 [ 1129.066389][T27889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1129.116907][T27920] device syzkaller0 entered promiscuous mode [ 1129.148130][T15519] usb 2-1: 0:2 : does not exist [ 1129.155299][T15519] usb 2-1: USB disconnect, device number 44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) [ 1129.182404][T27924] device syzkaller0 entered promiscuous mode executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1129.488047][ T2358] usb 3-1: new high-speed USB device number 56 using dummy_hcd executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1129.608099][T15520] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1129.648119][T15516] usbhid 5-1:0.0: can't add hid device: -71 [ 1129.654024][T15516] usbhid: probe of 5-1:0.0 failed with error -71 [ 1129.663144][T15516] usb 5-1: USB disconnect, device number 47 [ 1129.728029][ T2358] usb 3-1: Using ep0 maxpacket: 32 [ 1129.838214][T15519] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1129.848116][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.848286][T15520] usb 1-1: Using ep0 maxpacket: 16 [ 1129.861903][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.873640][ T2358] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1129.883023][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.891642][ T2358] usb 3-1: config 0 descriptor?? [ 1129.939431][ T2358] hub 3-1:0.0: USB hub found executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1129.988318][T15520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.998692][T15520] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.009464][T15520] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1130.022148][T15516] usb 5-1: new high-speed USB device number 48 using dummy_hcd executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1130.056064][T27940] device syzkaller0 entered promiscuous mode [ 1130.079172][T15519] usb 2-1: Using ep0 maxpacket: 32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1130.126944][T27942] device syzkaller0 entered promiscuous mode [ 1130.158141][ T2358] hub 3-1:0.0: 1 port detected [ 1130.208179][T15520] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.213353][T27944] device syzkaller0 entered promiscuous mode [ 1130.217059][T15520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.230937][T15519] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1130.241923][T15519] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1130.254706][T15520] usb 1-1: Product: syz [ 1130.258868][T15519] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1130.267764][T15520] usb 1-1: Manufacturer: syz [ 1130.272265][T15519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.280207][T15520] usb 1-1: SerialNumber: syz [ 1130.291201][T15519] usb 2-1: config 0 descriptor?? [ 1130.338907][T15519] hub 2-1:0.0: bad descriptor, ignoring hub [ 1130.346588][T15519] hub: probe of 2-1:0.0 failed with error -5 [ 1130.353215][T15519] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1130.428101][T15516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.438848][T15516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.448555][T15516] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1130.457419][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.466420][T15516] usb 5-1: config 0 descriptor?? [ 1130.588103][T12517] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1130.828064][T12517] usb 4-1: Using ep0 maxpacket: 32 [ 1130.948186][T12517] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1130.957016][T12517] usb 4-1: config 1 has no interface number 1 [ 1130.962948][T12517] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1130.968431][T15516] hid (null): bogus close delimiter [ 1131.028097][ T2358] hub 3-1:0.0: activate --> -90 [ 1131.128105][T12517] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1131.137019][T12517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.144963][T12517] usb 4-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1131.156784][T12517] usb 4-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1131.179181][T12517] usb 4-1: SerialNumber: 䀁 [ 1131.188161][T15516] usb 5-1: language id specifier not provided by device, defaulting to English [ 1131.238116][ T2358] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 1131.498100][T12517] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1131.520603][T12517] usb 4-1: USB disconnect, device number 61 [ 1131.531027][T17872] udevd[17872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1131.558204][ T2358] usb 3-1: USB disconnect, device number 56 [ 1131.618220][T15520] cdc_ncm 1-1:1.0: bind() failure [ 1131.638110][T15520] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1131.658103][T15516] uclogic 0003:256C:006D.01A8: failed retrieving string descriptor #200: -71 [ 1131.666775][T15520] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1131.673108][T15516] uclogic 0003:256C:006D.01A8: failed retrieving pen parameters: -71 [ 1131.682268][T15520] usb 1-1: USB disconnect, device number 59 [ 1131.688124][T15516] uclogic 0003:256C:006D.01A8: failed probing pen v2 parameters: -71 [ 1131.696021][T15516] uclogic 0003:256C:006D.01A8: failed probing parameters: -71 [ 1131.711300][T15516] uclogic: probe of 0003:256C:006D.01A8 failed with error -71 [ 1131.719816][T15516] usb 5-1: USB disconnect, device number 48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 4: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1132.182072][T27962] device syzkaller0 entered promiscuous mode [ 1132.208053][T15516] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1132.218196][T12517] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1132.458034][T12517] usb 3-1: Using ep0 maxpacket: 16 [ 1132.488031][T15516] usb 4-1: Using ep0 maxpacket: 16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1132.528059][T15517] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1132.579580][T12517] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1132.590728][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.601704][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.609009][T27970] device syzkaller0 entered promiscuous mode [ 1132.611584][T12517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1132.618111][T15516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.630265][T12517] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1132.644494][T15516] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1132.650787][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.662566][T15516] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1132.678906][T12517] usb 3-1: config 0 descriptor?? [ 1132.678975][T15516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.693226][T15520] usb 2-1: USB disconnect, device number 45 [ 1132.704758][T15516] usb 4-1: config 0 descriptor?? [ 1132.778038][T15517] usb 5-1: Using ep0 maxpacket: 32 [ 1132.908085][T15517] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1132.917090][T15517] usb 5-1: config 1 has no interface number 1 [ 1132.923012][T15517] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1133.008169][T15520] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1133.038080][T15519] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1133.108095][T15517] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1133.117052][T15517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.124877][T15517] usb 5-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1133.136673][T15517] usb 5-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1133.159378][T15517] usb 5-1: SerialNumber: 䀁 [ 1133.238131][T12517] usbhid 3-1:0.0: can't add hid device: -71 [ 1133.244603][T12517] usbhid: probe of 3-1:0.0 failed with error -71 [ 1133.254001][T12517] usb 3-1: USB disconnect, device number 57 [ 1133.278106][T15520] usb 2-1: Using ep0 maxpacket: 16 [ 1133.408144][T15519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.419010][T15520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.429022][T15519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.438618][T15520] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.449455][T15519] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1133.458502][T15520] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1133.471490][T15519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.480127][T15519] usb 1-1: config 0 descriptor?? [ 1133.488142][T15517] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1133.511843][T15517] usb 5-1: USB disconnect, device number 49 [ 1133.520362][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1133.588774][T27952] UDC core: couldn't find an available UDC or it's busy: -16 [ 1133.596309][T27952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1133.668121][T15520] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.677041][T15520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.687345][T15520] usb 2-1: Product: syz [ 1133.691442][T15520] usb 2-1: Manufacturer: syz [ 1133.695837][T15520] usb 2-1: SerialNumber: syz executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1133.728740][T27979] device syzkaller0 entered promiscuous mode executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1133.968377][T15519] hid (null): bogus close delimiter executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1134.136040][T27987] device syzkaller0 entered promiscuous mode [ 1134.158116][T15516] usbhid 4-1:0.0: can't add hid device: -71 [ 1134.163972][T15516] usbhid: probe of 4-1:0.0 failed with error -71 [ 1134.171441][T15516] usb 4-1: USB disconnect, device number 62 executing program 2: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) executing program 3: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 1134.178137][T15519] usb 1-1: language id specifier not provided by device, defaulting to English [ 1134.198023][T15518] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1134.448132][T15518] usb 5-1: Using ep0 maxpacket: 32 [ 1134.468055][T12517] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1134.578125][T15518] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1134.588308][T15518] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1134.601013][T15518] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1134.610003][T15518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.618771][T15518] usb 5-1: config 0 descriptor?? [ 1134.628038][T15516] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1134.668131][T15519] uclogic 0003:256C:006D.01A9: failed retrieving string descriptor #200: -71 [ 1134.676844][T15519] uclogic 0003:256C:006D.01A9: failed retrieving pen parameters: -71 [ 1134.685494][T15518] hub 5-1:0.0: bad descriptor, ignoring hub [ 1134.691429][T15518] hub: probe of 5-1:0.0 failed with error -5 [ 1134.697361][T15518] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1134.704522][T15519] uclogic 0003:256C:006D.01A9: failed probing pen v2 parameters: -71 [ 1134.708063][T12517] usb 3-1: Using ep0 maxpacket: 8 [ 1134.713118][T15519] uclogic 0003:256C:006D.01A9: failed probing parameters: -71 [ 1134.724656][T15519] uclogic: probe of 0003:256C:006D.01A9 failed with error -71 [ 1134.733376][T15519] usb 1-1: USB disconnect, device number 60 [ 1134.838061][T12517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.908074][T15516] usb 4-1: Using ep0 maxpacket: 8 [ 1135.008305][T12517] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1135.017235][T12517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.025421][T12517] usb 3-1: Product: syz [ 1135.029596][T12517] usb 3-1: Manufacturer: syz [ 1135.034060][T12517] usb 3-1: SerialNumber: syz [ 1135.039259][T12517] usb 3-1: config 0 descriptor?? [ 1135.048207][T15520] cdc_ncm 2-1:1.0: bind() failure [ 1135.053182][T15516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1135.088215][T15520] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 1135.108213][T15520] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1135.117503][T15520] usb 2-1: USB disconnect, device number 46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1135.238202][T15516] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1135.247048][T15516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.255226][T15516] usb 4-1: Product: syz [ 1135.259272][T15516] usb 4-1: Manufacturer: syz [ 1135.263738][T15516] usb 4-1: SerialNumber: syz [ 1135.269003][T15516] usb 4-1: config 0 descriptor?? [ 1135.298089][T12517] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 1135.304409][T12517] usb 3-1: No valid video chain found. executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1135.478046][T15519] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1135.507734][T12517] usb 3-1: USB disconnect, device number 58 [ 1135.548299][T15516] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 1135.554538][T15516] usb 4-1: No valid video chain found. [ 1135.718028][T15519] usb 1-1: Using ep0 maxpacket: 32 [ 1135.751082][T15516] usb 4-1: USB disconnect, device number 63 [ 1135.828061][ T2358] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1135.838374][T15519] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1135.847178][T15519] usb 1-1: config 1 has no interface number 1 [ 1135.853119][T15519] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1136.038178][T15519] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.047109][T15519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.054927][T15519] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1136.066784][T15519] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1136.089314][T15519] usb 1-1: SerialNumber: 䀁 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1136.188135][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.198913][ T2358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.208459][ T2358] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1136.217277][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.225844][ T2358] usb 2-1: config 0 descriptor?? executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00031200000012033f007b69"], 0x0, 0x0}, 0x0) [ 1136.418143][T15519] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1136.440705][T15519] usb 1-1: USB disconnect, device number 61 executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0xe) capget(&(0x7f0000000b00), 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454d8, &(0x7f00000001c0)) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) [ 1136.678044][T13059] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1136.708677][ T2358] hid (null): bogus close delimiter executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1136.959346][T28031] device syzkaller0 entered promiscuous mode [ 1136.968086][ T2358] usb 2-1: language id specifier not provided by device, defaulting to English executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1137.029152][T12517] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1137.038111][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.049625][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.059428][T13059] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1137.068786][T13059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1137.077694][T13059] usb 3-1: config 0 descriptor?? [ 1137.083020][ T2356] usb 5-1: USB disconnect, device number 50 [ 1137.119069][ T2357] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1137.268079][T12517] usb 4-1: Using ep0 maxpacket: 16 [ 1137.358170][ T2357] usb 1-1: Using ep0 maxpacket: 32 [ 1137.388120][T12517] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1137.399052][ T2358] uclogic 0003:256C:006D.01AA: failed retrieving string descriptor #200: -71 [ 1137.407785][T12517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.418579][ T2358] uclogic 0003:256C:006D.01AA: failed retrieving pen parameters: -71 [ 1137.426509][ T2358] uclogic 0003:256C:006D.01AA: failed probing pen v2 parameters: -71 [ 1137.428105][T15519] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1137.434697][T12517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.451496][ T2358] uclogic 0003:256C:006D.01AA: failed probing parameters: -71 [ 1137.458940][ T2358] uclogic: probe of 0003:256C:006D.01AA failed with error -71 [ 1137.466185][T12517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1137.480099][ T2358] usb 2-1: USB disconnect, device number 47 [ 1137.486985][T12517] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1137.496493][T12517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.504432][ T2357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.515547][ T2357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.525508][T12517] usb 4-1: config 0 descriptor?? [ 1137.530717][ T2357] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1137.539922][ T2357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.548613][ T2357] usb 1-1: config 0 descriptor?? [ 1137.558501][T13059] hid (null): bogus close delimiter [ 1137.589331][ T2357] hub 1-1:0.0: USB hub found [ 1137.778074][T13059] usb 3-1: language id specifier not provided by device, defaulting to English [ 1137.808205][ T2357] hub 1-1:0.0: 1 port detected executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1137.848085][T15519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.858820][T15519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.868369][T15519] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1137.877168][T15519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1137.894960][T15519] usb 5-1: config 0 descriptor?? [ 1137.913153][T28042] device syzkaller0 entered promiscuous mode [ 1138.068099][T12517] usbhid 4-1:0.0: can't add hid device: -71 [ 1138.073963][T12517] usbhid: probe of 4-1:0.0 failed with error -71 [ 1138.083132][T12517] usb 4-1: USB disconnect, device number 64 [ 1138.239058][ T2358] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1138.258091][T13059] uclogic 0003:256C:006D.01AB: failed retrieving string descriptor #200: -71 [ 1138.266779][T13059] uclogic 0003:256C:006D.01AB: failed retrieving pen parameters: -71 [ 1138.274686][T13059] uclogic 0003:256C:006D.01AB: failed probing pen v2 parameters: -71 [ 1138.282724][T13059] uclogic 0003:256C:006D.01AB: failed probing parameters: -71 [ 1138.290264][T13059] uclogic: probe of 0003:256C:006D.01AB failed with error -71 [ 1138.298748][T13059] usb 3-1: USB disconnect, device number 59 [ 1138.368284][T15519] hid (null): bogus close delimiter executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1138.478064][ T2358] usb 2-1: Using ep0 maxpacket: 32 executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x0, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1138.519612][T28047] device syzkaller0 entered promiscuous mode executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) [ 1138.578123][T15519] usb 5-1: language id specifier not provided by device, defaulting to English [ 1138.598811][ T2358] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1138.611457][ T2358] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1138.624482][ T2358] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1138.633708][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.642691][ T2358] usb 2-1: config 0 descriptor?? [ 1138.678147][T12517] hub 1-1:0.0: activate --> -90 [ 1138.683774][ T2358] hub 2-1:0.0: bad descriptor, ignoring hub [ 1138.689736][ T2358] hub: probe of 2-1:0.0 failed with error -5 [ 1138.695840][ T2358] usbhid 2-1:0.0: couldn't find an input interrupt endpoint executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1138.898098][T12517] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 1138.928030][ T2357] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1139.028028][ T2358] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1139.168059][ T2357] usb 4-1: Using ep0 maxpacket: 16 [ 1139.208082][T15519] uclogic 0003:256C:006D.01AC: failed retrieving string descriptor #100: -71 [ 1139.216749][T15519] uclogic 0003:256C:006D.01AC: failed retrieving pen parameters: -71 [ 1139.224669][T15519] uclogic 0003:256C:006D.01AC: failed probing pen v1 parameters: -71 [ 1139.232560][T15519] uclogic 0003:256C:006D.01AC: failed probing parameters: -71 [ 1139.240248][T15519] uclogic: probe of 0003:256C:006D.01AC failed with error -71 [ 1139.249093][T15520] usb 1-1: USB disconnect, device number 62 [ 1139.256540][T15519] usb 5-1: USB disconnect, device number 51 [ 1139.268114][ T2358] usb 3-1: Using ep0 maxpacket: 16 [ 1139.288087][ T2357] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.298148][ T2357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.309321][ T2357] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.388096][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.399001][ T2358] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1139.411661][ T2358] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1139.420516][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.429114][ T2358] usb 3-1: config 0 descriptor?? [ 1139.478102][ T2357] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.487019][ T2357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.494863][ T2357] usb 4-1: Product: syz [ 1139.498831][ T2357] usb 4-1: Manufacturer: syz [ 1139.503302][ T2357] usb 4-1: SerialNumber: syz executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) [ 1139.878060][T12517] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1139.998050][T13059] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1140.118079][T12517] usb 1-1: Using ep0 maxpacket: 16 [ 1140.238175][T13059] usb 5-1: Using ep0 maxpacket: 16 [ 1140.243240][T12517] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1140.253910][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.264584][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.274118][T12517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1140.287003][T12517] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1140.295895][T12517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.304612][T12517] usb 1-1: config 0 descriptor?? [ 1140.309739][T28055] UDC core: couldn't find an available UDC or it's busy: -16 [ 1140.316959][T28055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1140.358916][T13059] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1140.369682][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.380377][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.389979][T13059] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1140.402757][T13059] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1140.411661][T13059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.420257][T13059] usb 5-1: config 0 descriptor?? executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1140.799685][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.806573][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.813514][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.820328][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.831288][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.845506][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.852510][ T2357] cdc_ncm 4-1:1.0: bind() failure [ 1140.858402][T12517] uclogic 0003:5543:0781.01AD: unknown main item tag 0x0 [ 1140.865441][T12517] uclogic 0003:5543:0781.01AD: No inputs registered, leaving [ 1140.878083][ T2357] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1140.888186][ T2358] usbhid 3-1:0.0: can't add hid device: -71 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x0, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1140.894196][ T2358] usbhid: probe of 3-1:0.0 failed with error -71 [ 1140.900913][ T2357] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1140.908141][T12517] uclogic 0003:5543:0781.01AD: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.0-1/input0 [ 1140.926563][ T2358] usb 3-1: USB disconnect, device number 60 [ 1140.933635][ T2357] usb 4-1: USB disconnect, device number 65 [ 1140.940257][T28068] device syzkaller0 entered promiscuous mode executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0) executing program 2: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 1: syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1141.002074][T15516] usb 1-1: USB disconnect, device number 63 [ 1141.158140][T13059] usbhid 5-1:0.0: can't add hid device: -71 [ 1141.163904][T13059] usbhid: probe of 5-1:0.0 failed with error -71 [ 1141.171313][T13059] usb 5-1: USB disconnect, device number 52 [ 1141.268251][T15519] usb 2-1: reset high-speed USB device number 48 using dummy_hcd executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1141.398048][ T2358] usb 3-1: new high-speed USB device number 61 using dummy_hcd executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x0, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, 0x0, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1141.553297][T28088] device syzkaller0 entered promiscuous mode [ 1141.578222][T15519] usb 2-1: device firmware changed [ 1141.584477][T15519] usb 2-1: USB disconnect, device number 48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022a8"], 0x0}, 0x0) [ 1141.628020][T15518] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1141.638235][ T2358] usb 3-1: Using ep0 maxpacket: 32 [ 1141.758077][ T2358] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1141.767044][ T2358] usb 3-1: config 1 has no interface number 1 [ 1141.773030][ T2358] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1141.785667][ T2358] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1141.888120][T15518] usb 4-1: Using ep0 maxpacket: 32 [ 1141.938030][T13059] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1141.938066][T15520] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1141.948456][ T2358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.961900][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.968024][T15519] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1141.969712][ T2358] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1141.988979][ T2358] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1142.011453][ T2358] usb 3-1: SerialNumber: 䀁 [ 1142.038100][T15518] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1142.048875][T15518] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1142.057777][T15518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.066771][T15518] usb 4-1: config 0 descriptor?? [ 1142.098071][T28084] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1142.120541][T15518] hub 4-1:0.0: bad descriptor, ignoring hub [ 1142.127131][T15518] hub: probe of 4-1:0.0 failed with error -5 [ 1142.133329][T15518] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1142.188051][T13059] usb 5-1: Using ep0 maxpacket: 16 [ 1142.208026][T15520] usb 1-1: Using ep0 maxpacket: 16 [ 1142.218026][T15519] usb 2-1: Using ep0 maxpacket: 32 [ 1142.308192][T13059] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1142.318929][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.329884][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.338180][T15520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.339483][T13059] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1142.362311][T15519] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1142.372381][T15519] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.373829][ T2358] usb 3-1: USB disconnect, device number 61 [ 1142.381359][T15520] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.397775][T15520] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.411963][T13059] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1142.421318][T13059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.430001][T13059] usb 5-1: config 0 descriptor?? [ 1142.568204][T15519] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1142.577163][T15519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.585013][T15519] usb 2-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1142.596978][T15520] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.605972][T15519] usb 2-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1142.628386][T15520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.636152][T15520] usb 1-1: Product: syz [ 1142.640177][T15520] usb 1-1: Manufacturer: syz [ 1142.644568][T15520] usb 1-1: SerialNumber: syz [ 1142.649024][T15519] usb 2-1: SerialNumber: 䀁 executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) [ 1142.805131][T28104] device syzkaller0 entered promiscuous mode [ 1142.909579][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.916473][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.923530][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.930699][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.937596][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.944619][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.951534][T13059] uclogic 0003:5543:0781.01AE: unknown main item tag 0x0 [ 1142.958586][T13059] uclogic 0003:5543:0781.01AE: No inputs registered, leaving [ 1142.966262][T13059] uclogic 0003:5543:0781.01AE: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 1142.978099][T15519] usb 2-1: 0:2 : does not exist [ 1142.987218][T15519] usb 2-1: USB disconnect, device number 49 [ 1143.115127][T15518] usb 5-1: USB disconnect, device number 53 [ 1143.128039][T13059] usb 3-1: new high-speed USB device number 62 using dummy_hcd executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, 0x0, 0x0) [ 1143.368048][T13059] usb 3-1: Using ep0 maxpacket: 16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1143.488096][T13059] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1143.498804][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.509629][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.519412][T13059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1143.532467][T13059] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1143.541397][T13059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.550139][T13059] usb 3-1: config 0 descriptor?? executing program 4: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1143.898018][T15517] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1143.988137][T15520] cdc_ncm 1-1:1.0: bind() failure [ 1144.008081][T15520] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1144.028187][T15520] cdc_mbim: probe of 1-1:1.1 failed with error -71 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1144.037729][T15520] usb 1-1: USB disconnect, device number 64 [ 1144.148063][T15517] usb 5-1: Using ep0 maxpacket: 32 [ 1144.288079][T13059] usbhid 3-1:0.0: can't add hid device: -71 [ 1144.293941][T13059] usbhid: probe of 3-1:0.0 failed with error -71 [ 1144.301398][T13059] usb 3-1: USB disconnect, device number 62 [ 1144.308660][T15517] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1144.317511][T15517] usb 5-1: config 1 has no interface number 1 [ 1144.323457][T15517] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, 0x0, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1144.336247][T15517] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.384954][T28131] device syzkaller0 entered promiscuous mode [ 1144.390934][T15519] usb 2-1: new high-speed USB device number 50 using dummy_hcd executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1144.468123][T15518] usb 4-1: USB disconnect, device number 66 [ 1144.486124][T28133] device syzkaller0 entered promiscuous mode executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1144.538163][T15517] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1144.549920][T15517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.557850][T15517] usb 5-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1144.575148][T15517] usb 5-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1144.598840][T15517] usb 5-1: SerialNumber: 䀁 [ 1144.648069][T15519] usb 2-1: Using ep0 maxpacket: 16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1144.788159][T15519] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.798133][T15519] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.808779][T15519] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1144.848028][ T2357] usb 4-1: new high-speed USB device number 67 using dummy_hcd executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) [ 1144.933127][T28146] device syzkaller0 entered promiscuous mode [ 1144.951659][T15517] usb 5-1: USB disconnect, device number 54 [ 1144.962375][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1145.008023][T13059] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1145.038085][T15519] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.047024][T15519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.054856][T15519] usb 2-1: Product: syz [ 1145.058906][T15519] usb 2-1: Manufacturer: syz [ 1145.063322][T15519] usb 2-1: SerialNumber: syz [ 1145.098028][ T2357] usb 4-1: Using ep0 maxpacket: 32 [ 1145.218142][ T2357] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1145.228665][ T2357] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1145.237453][ T2357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.246459][ T2357] usb 4-1: config 0 descriptor?? [ 1145.251589][T13059] usb 3-1: Using ep0 maxpacket: 16 [ 1145.268176][T28142] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1145.289230][ T2357] hub 4-1:0.0: bad descriptor, ignoring hub [ 1145.295017][ T2357] hub: probe of 4-1:0.0 failed with error -5 [ 1145.298019][T15516] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1145.301510][ T2357] usbhid 4-1:0.0: couldn't find an input interrupt endpoint executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1145.368066][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.379157][T13059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1145.389568][T28151] device syzkaller0 entered promiscuous mode [ 1145.392144][T13059] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1145.406522][T13059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.415681][T13059] usb 3-1: config 0 descriptor?? executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) [ 1145.558167][T15516] usb 1-1: Using ep0 maxpacket: 16 [ 1145.688337][T15516] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.698456][T15516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.709264][T15516] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.768029][T15517] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1145.888107][T15516] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.897181][T15516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.905033][T15516] usb 1-1: Product: syz [ 1145.908997][T15516] usb 1-1: Manufacturer: syz [ 1145.913397][T15516] usb 1-1: SerialNumber: syz [ 1145.988204][T15519] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1145.994097][T15519] cdc_ncm 2-1:1.0: bind() failure [ 1145.999975][T15519] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1146.006594][T15519] cdc_ncm 2-1:1.1: bind() failure [ 1146.014219][T15519] usb 2-1: USB disconnect, device number 50 [ 1146.020084][T15517] usb 5-1: Using ep0 maxpacket: 16 [ 1146.158094][T15517] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1146.168778][T15517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.180172][T15517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.189760][T15517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1146.202613][T15517] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1146.211459][T15517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.219933][T15517] usb 5-1: config 0 descriptor?? [ 1146.298724][T28144] UDC core: couldn't find an available UDC or it's busy: -16 [ 1146.306166][T28144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="65ad9333880189749b1db2804305a942030c54078d802fd1de553469bbf85c16d680e7bb018d3bfcf7fd1f5e664b5e896368ee96bb63eee9f47abe81bfeffa22f816f7f655de5b17de823e44e873677ea9c55a124c1435f4b40589006f28d2d8fccfeb162bfd26ef108218891da937ee3e121cc39a57927485de1343cf5d73a108d6e4cb96de7f08442dd79efb856e2b0051068cd09d010c46bef7e2d895c1058463c14edf77b2701636f0b9d824f118bb9637c6eb808a7b81cfbd98578b452dffd664e9c9aa474e0196cec2aa5c338206786d739a0abbf326baf2184ed135c3e032a1326ff4742aa80297f694b30f92af36c59e6ca8781f7c9b3d5130c96d1834d51af27bacaf3385a36b7f3b7ece7c15f12c0795dafea5186818831f8061914644a8e52976e7672e131f5b96a63e93c42ec41281675617467dd1e21418a0801e3f27f4206185d92bada9d949297411260d2222867303c13bf2eeb043166282eed3f671d89b37ccb1a3250830d6ec5765ef37120630b7bab7fed89eb2f4a32c8a6f403cb7a6f1ac6890e9e2c28c440c699f12fe5bf1cd565d3dcfed3fe37556a4d184fc8d94637d303291e9bd5912a4a75c78407426eb7a404e7c4bdf065db8ed27b09a8e4e9c02d2aef3d9db559d8e0b3737d8c09bae1d346283fc384235e1a45c76f31aba2ec977389004c6b6d7487a0d283f5be9f042b8983e4556be902f9b6fa74ce5801826add186c58530764a8e3e6e4aff09f39fe323eed4eaa750e93137062a07fd0aba55bc4c82d8f763905f85c9165c8c0b428e0a9769621b5fe8096ead7ac16f8aa7be179c6b67c3311b26052cafe58b3155cba3c7ae6b99cdd9bfba40aa2b10e79fdeed7231b5ed59658e43da84f1086c1621e50ce1008dedc3d74cab389f422dafb7d75c3eea107d07947805fb9fa58fe6272611a8d2bcae3c22609567dcb709abd99c82b861a7621f1bfee3d011c3881882ba3301118f320f739373a33d9a16fcfd58d89af416f49ccb09eb4af220c222e0e6f2c3374ef7a564ef02ceb63fa3f24a0c017f81a76e3533aae847911bc774886f1b689988bb5cac3c5b07b60d590679a851176a47d64bc5d33592cd6ffb99f56a6add51ca5d7621f32737f44757f436b2e599301e2a57619faba134c2f0307547d49b540ebb43c301b8380ad1b6b34425002b1c72ae0e1ece0c19223a8f0742fb69cc34d5dc66f041f7a75c95bfb7f83723032d3a16e2cbebc1d58429b50008f77192b2177e9fa9372904fad86f9a294040a3873f20b1f19c5f2c9ff65a732d88ba70578b919b46bc6d265d257fba94d0005bd246ced54944831cdadf78459dc84cc5cec32950f31270bc6b48903abba8c264d7fee798ffaba57ad4f555cdfad5f78a8e98437f0b0c45a2f1e3cd2ab2cac9b4507b5b604577ed4dbf849501301af94162f7fe1206b7a776dbf498f8a71958d8c2ac2c63b8247cd02da2889955f6f4311ec700c472766ec3e06a72ce48e9444633ee5969ad58cbe7d3a3648c57baae1edc6500ceb3d793c55b638c6769054b9b512b563551eb411322fa146e4b836b56e9ada14a7dc51bf19a3a613cd8c9c1effdab206aa45e8bf7b14f35a3dae70b0daa7d23471ad115c8d28ee40bbc5479498a15a7de24734d8590051afea4c1aaa3bee627291f9f16219b2a9d188bc9f4213488a6b7a1736c52b28f7a4b5e5b7f6cf4a01f8e8f89eeae2cc27e563210fa02b32728b894cd9661c4d85fb21fc889c3f2c5c1bee4aae345bc01a40da55714e19b0c9fd7f71107e54880c9f451c4739b71feb77dc1dadec915c92f6e9db2d25ae8c5161a11ea88b83a640d1bb2da1a6967f4bca0f62cc7ba6a449f85f22d90e9471364cbcd5dc160e4a38c52b53aac7b952a93be58b02682267796af98583a2fc64a9b33799b1e24e023d814d6846ee5230d870271adf3f8207b018e179d9ad59ec0f8671db258e86095d457a743a612ba5b21415ecc96803f09446b56c0803c2cd4d485e6c5724a8bc2bf5a5291f0cd5745596be0ddac585747b85f24a5ecc6156df545f82bb8385c2a31e014f59629f610ee96f9991bc9e771467382815eaca60a83ea7a505f72d8e2c2874da4a2ac1931c6d2efbdd1913a347289f3606b11021276b35b44d6823c1674d1965fc76b6d2ca7e6946437650bc73b5dc5511f46e140d301c144f7b9a98e0ecd37ea78a01d1116092c82a7f401ca9ec9c3753ff1684e8cbb4b9ca69bafbf119a5ae9b71f818a9270d71300b243b1ce3e1c7eeffcf6f08ad935460ee606bc78c6c9919a9d26c45da2ea2012fa19791b7f2d2f5d309250714027ee7d209ba81456840bceb89d9e846bdd8b763952d3641d40eb89da0013c4ce992ab46924a4959c2604df5ca12ca3885d7a8acead172a285f9e2c42f9ae7aaa5622f0ce526bb604e28ffcd673b7b7720b131d5273bd670aaad5e493d4167b93f58491cc181c15215a8e8f092aca519dbc90193100bded7fdbc7ee2cc1c110eb453d4362965532174a9d032af7293c9652716672acd92f009b8a80fbf313e4495a01b7eaf485129ab944bd13e601ce638aaff2237c0e9241dd31ec2bc846caaad7c3e36ccc607cbe914d3831b6290d71652fe2629d54ccb7f16fcb522b21628981dff848330da51f03901a61fbae6d4cb3141024b0362b16799bec82623ddf6f8d72d94c5e2694ce5a4798c4254ef1686ceea8e7643a2e078315f416cb026952c89feb5adddf251958ed671e0494d11d7ec0acdbe0ba532df46034a5a73d5f1d247c9e6bf2862b01accd84504f81b1ec57491a114954facda27d659a966c1fd42564fb7ee847140e4d50e89eeff657d95f8b04d0d65d886be1dacabbdeff4f38632fdaa4f4bf174010cc9546711a2cf1c8f2969ba94fb456bd36631997ec6f35c20baac29cdeba43f531b3770be2aadde375ca9e5b3bf8951b18f0631d69ec48b3e922cb053faf32e580dd065d8f19b968a9541ea03fe96f1ffc5e3a442ddd69b63cb11f7911256316b8da387ed308f7eeb94404106e6a6b7022d6fca1cfaf2e90abceb9b2be046201f13c0a9378470bf13466db16fcef584399380113b20a3c05128a57a776d489f13a3476a15d724165c9512f0bab1d429848e95d0e8f6d07638da6b39859811cbf8ffd5b6a04e04a3e3676b7e40d05583009fe16a0c1c1d8dad56ab5ba5eaa7ed9703503381bd7fd609c9e4e514c6554f9d62be8b2b4c5f10314f528756bf9ae6fc0376ce78287adb2eefe88bc1ee876de3d0e8ef4ecc58313b9c0e9065f5396e6b90cd7d14e5f7b48df5e1d7f04e86419dac5888d8775a0617442e2bb705c5323ab211b2e6f07a9d9cc1b2388f2be8bfad4ac9fc76d7a5ff7ac0beb73d256340c2227556381c42fda1cae5ef9a812c0ed97b3ce4c631d63f8a5a3398a230824af2d35bdfe70323ade83ce4ae29700e194ed1c05515d221fcfd5a0333b93bb80a57bcbef2a21246f6ce87527ab742ec5f8bc8d609804e7f4205e12843cb1ca21d2b3a9e50b7bdb211b73b256eac36ffab8ac115f9949746ebd1782d4de79dc609fc9ce236492292ec783bccff0e8652e93ce870105a26da09c4cf67b2d7666bd4161f52f7d84d144b1b0ef03000000ee0ea466dfa9479fab295159f00ee7209544628d5e0fa5d91dcd2dca093d012df5144b54a343f12385df445d4665941236b50179b47ee561d52b6645184044db3e2eed66001a7da86bd9b3710fe39f32cf578f1a1ebaf45f43518d47b43a2829146a703cbe42d2b6863a84df4b3cb3ec07f2a10ebfb0f64000d9c244ff7482b8243ca0915326ebb9e623004ed48991cae68371f47a946a178bc823f340722503da7d03b50f1d078adaab1d07ef39d1d7457ed2f50c34a1fbd5ae656222f2a71c3a43a9af4bb5bbaa6bcce92d6515ee2671ecf5b6a5d7e15565a224f299d1cdd11ffad8cae2d56fcf2e4151db6446c4715769c844285f77e3d269ed7c02264bb9ff052bbe03beea8b35d15864872f64cf587d0c00d0e38a92dde19f093efe1440509f42792e1fd17eb3f237e38468e77f0666494e8cbe1bee84217e93af93cae90c0de0ea2b6843d665e9208fbb843af24bff66594e82a12b5b59d83c2d2ecb16110c651d0e0b7f7872fc11764e138ebf0fcd77470e0da24eff6698a25f4f251805e2b72a9c472596a2751ba50070d1d6dbcf5ebbbfc32e9492b33f24d7c6481dc4ba0e11bce80fc90f37d30e6713c95a0ffda4591990e23765f75a7c00974c92c5dc31a0426f5104f47b519eec45fbcbcc687966adbbe7f589ee9b340ffc16d0ba5e09fb0703fa00243a43572e2c8d4e769ac5c8f503f9de3b17b67986d8748a6914f629dd2d466c03317b72b8b3f06c8cb2af11ca7f990ba7a883ae4f4b9f5f9e048e6b991a57f84ff56474e7b7da75df1a6d66dec049ff4537ae07d36cce1613d4ed4b532f2bbb8bd018f9c126fa882a6d021067b03a878815d9f673831d2801f065450396224c54acb3c84b154e605a749ac42db4e49c45a0c61bb44f4083d35a221a8bff30282d44c4df07f3615ccd075b6ca881a8fbc209bb34e6444c0f04c9365ed53d6b996e46244e0777f9177453d42dcbb047521b9d7e87498f3cddc4803a639bec476871e9d7a5b9b483548567ebf15038b052ddb6bf51136ffe1f076cf9cc8d9875ce198a3d6fbda1c7fc322c53838f721a85c8482e84c9543067cc7950d5e5fd8ed48a581ea5b358b0b9083c09025d7e281c1a68949e6460d02bb03662fac6852905d891d6e8c43e71104b94ba33437b6fbd9b73e7fd46b589fa70b8e5503b4d8f78409712134d98de257fdc1916aacb12fe25794c1a200cdff98d562c05ce513b6f59e07a6125d76975a60ef136288d28002ef4b6f2c760559fff9dedc8e3fe33988e7d834a849cce47ea1ca9afd8a6eeb54aabd77373d1dc6e69aef186d5ec580de5e39876b82037970e6a2285e17768c6f34682527dd38d0a24da71e3384a29b94f2d14cc9bd74e4bab3cc848703e3a47cf0a8b36f4decc89363c91883876cf52c7f95cbfc1e546d9ef6528b98fbb2d078158ae153506be8bb7413d0f6b9f3c2abd9b57959892ae3f6571d26966c835f3cce4d51e3dffea75963adc4b72ae821c976c0781e4602b9c93299c0fb6ae7bb3f473c5e5e5da0f2c6e548fc2373d7b94f8decb162ad303ff943580da54352bca8ff71098ecc22247397505f743f1371630a1eb05ce11796cac3d68f785685de318dd8fcaadc437087935798b50808677f592699daaa1d535b96d03cb892cfd78cf3d8457b752b2e21cd868fcde04627a8562a598996d5a07db6bbe58360f74e023bfda0bfad549398874af251b04c4bd73a60fce67cc33e87ebf9e9e981ce76e5a1548c81bdc5b21a6cd575348a166678b94e9932a563b9a9091a93a0ae171925b822d42030df44aa326c4fdf7fb559b4ea6a7b68c2f1e32df8b6e08c0b2f257c83b23a024d47073bf9fd46e56ad30a7dda38a8ed2c1536fdc822b2d8422005fd357bd1bf0e27f33098df529a82b7c943d32e28386acd74258c1d81f3552c343dc2663956b5a3bcf79e50b66d8e20ab623ad9dc4f19c7b2a84437862756c0e517fc44050659e3c29a20e372e7caf6e3675eec653081fd4839c3469bd06c03e21ebdd90af52339b45ed9ebd3f1819a53e0fe150d2ef957831bf35ee13c8f00288f3d27dc5a57967e85e08718daa727ecdc19e2000e3634bef4779aad8b34404f2b12998d62ebc6b33866c88819ccbb475ecde60cd64ea23453e4f7c30fa3656b01363075d6507c5a44981187e2663ee5676f4f9e6623ba503b5c5aba6755fc248e2d1f824891a3a430d506fa753e96c4185dc08bf7773201bb087e745ad90f500b169da7f6d9f4a8aac6e0a64a45474c8592f177e0036bc6f99314685e5d633feeceb47188a45388e8395d143be717c80df34bcfb281a9aa0404c4f712e0dd6d69bf8ccdac4dc121264608fea11f789a6bd864524b0913ad0523f1eeeddf76262a93bd3ab2e184b43d82cf7a0fa81543600b7f3ba835632307b6e79127544e43436207a3d9411ddb2a6c42c320500073329ded84bd61ee51325c6fff6f5085696ab5068cec51b6cc524c104fb593abbf9851ac7437804f225a18a3711ae9a4383b37135172016cd401ea64c5a345db0dc13b8fca1cabf0ea10f07da4e8e9b4312165000f3bcab742e7765ebc7aa391d35eff19f5ff0bd02b802abef08c33a58c656cda5249bd294c7e807db30e713f880949bfc04d6a839db1b56a8144616e7d04b86711b8cf5815f955e2f3d813a7282a494a1d448a878171af29e91f5b0c944bc02d4e1d0988e5a4015baa51f5fb4b47a25879f9c174cef94908e140d12575dfe7ba2360730c5445d4869c7195a8c9f958cbf5a58065aa305b04b2df2bec4315d634c5f15be25ac1686d451f480fa07e2d3e46bd9103c61f61f27a29f135186f7692f3ee9134888225df57ca5643ecb8571a471ed999e09f98e7e0bbb975ba7d615ca19761349dfc35fc9502b53d95365044425ac98478c760dba154b37e5a4af907ea21a32a76da9809485c10d6905b03650e457089abba7213d9f0bae2bce5f88c8ce1c5cf189258a2d8cd378b044a5b79b090fbf18d3176437d6673ec40be49cf8610b9b4c825c33d5cf77356d5dc5446dd45631f837254104a49d438354539db92bee82eb85688a99f27a62f24e21c5c14c54f1b33ee2285a68351460661d54a4f43ee6a1f95d9ff5326882dbb08c15f9a36dc49f5e75a4ce4e9d4d58788bdca449a09195dd39d6f30a9f6f3ea4651a5f7579af5f66f865f8035ecb579500aeaea848ec22a1c28509389a28ba0f0c3c8edfd024e39ac7414bd27407c6e806581dd38938dd7635f12e798c10ce5c5fcad04d6fa944c54d3d713f940f880f73df41d837894bee51a33fbf15526a0f8388db54c10045cc33a8768a8d18a41455190515ffc3cdbf7cac1c97d9c7a7b1e926cb40d20e8192135c9cdc2617fc64b6dacebb20ddff767a63bf6c33171ad8c4e03dc3201a3c5c8a3782636abb4783adc5382a7fca5f6f9c1008aeddba797246f3fcaae8f13bee3157925c2dd228491cc6ea5d1fe9b89b45bd58427b2d95f40119597a9c78c1bd4f06b43b484f522637fe308698ee2435bda5e24f8910cffd0d2db0ecf218a9afcfd767e9bb68b3fba63afb2f0d070aa07cb30b1862137fd1bb874d4ac094dcb7325099164bf285b88aaf729510956841e33008652d00a75c74c6b376d9e3dbe327811e203751412cc0ac29e50c95555a4c228e66bf8f166ae2584b1be973ea410d7845ded367d86178b2c6c5680989682a28241cefcce32985fa8af2af9dccc74dfbb7d82f356f7dc6b34041541cee45f1ddacc730006b6168fa007b546869754334780ba319bcca68428258f5c887e6dc1fbc4470d3c0f8b9fea98f321a860791dab0135d0989d9fa0ec11906d97a60785fe366d5de17cd00b7d0f91d38bccf007d94bf8040397990fa7b6416e9fb1ef024d52b71b5ac176ba5d286b890254976c14980930c64239ac6589f6fde9e113969cae24badb7d5c068875021c145ecc8d71b402cc3799d26607b8c30628d3a562783029926a312cd8452df59aff4dee5b17fa6b386793238190f53076ec115ba1a8cbd8f76f5a7471f21a2956cfc4ec04426ed3117251718900093080c15adc617b1df078d76e59e069296e94ba450a975fb9823b6b4ea81a3cd142a8d1402b87c7444e9fe91ce489701b0eb98e13c82631c41d6b80fde40aad337049f57bb1883f38e5d0e283f52449743593b95ba8e53aa4a5c14e81611be13a853ffda03b4ae7189db04bb7200c64f9428886c8dbc153b0a7ed142cda8ce73f1d61c6f3633c0e9c7d79a18fe59cebd9c7e5245865673873fe7b8385adda3d052511700c25a7e70273b0c7eab1697704190aacccf69cbc5f7b574f6d49cabc6a63ad95d8baa2019976ec2b77ab67fda1805f21fdd400a63cc52eb4cdb11fe0bebce7ee5b183c80108b682838660e906016cb11e91ec2104482643719ce2434f2faa9f0c7801cb5d8901b1e9e09e66dbc127e4c347fd602efcd28d450195119ca22c518c8781b1da2999cb1228b03519a7f706703b83d79dab952b2a527a717d0e4541f32d5e11c9dcd0ed22f2368bc6bcabefe064335e62c7f53670a0f11809ff4de2a3bfe3b36f9916403d6e109cb1c3461fc727fe6c86a1be4a8282264007a3b016cd5e6a69dc6c0be932abc8a849c7594092b26baccb8de193658140dc27b264053822a513b7f812a8b1f2588632026cd81f919c0a92cd31c4e579bad8b1771b0b0a452e4d329bd5cc42f78c6ca4e3dff6a95d093ee099d7a83b487532e4f002011110011536d481ff03b880e385c37cf4c75b73cd4894151ba61e4cb98975e00ac357fab60450f6de193204699371f0f08cd4501d0c894c7a4e0f401af30c23b51e196e8162c72275a01386e7f1f652212f723900588eaf12fe4a41c0892115b91b2a5610952d228bd272729c13137a428fb47284fefbf4f6043b83371ecec8c09ca77ce43e69546c1c0ea783aff24bf1334d34df4c934fca2bbf11deb0dc505b2280a473b0709f5019ca1928f0f33c91524fc187aab3241bc873569be04e66b0fbab365f3a299b09d2b7c5d82080edf9c0c776505d130cfabfc2b16c2f850246dbd43f0e946ed2ec37e53f096cd9ff8798c75a6a57b06c179aebc5ff5e7b004e2ddc1df206b734f0a6951732ce63434787678389541e8dba59e05b5035d7da7cb722dae3f483a094c6bdb6bdfa191facda2c23c0aeb9c4edb2b5ddca10cd4a4d7b36f569b47b4c03f5058f1b33f9fe43925e24d24db5b36f50b11191d2c07437d3b33b3b090e1133985e3447c2f5d2344a084c5a58bb719327b4b5c2cbbdb287bb917fcf0dffadddd6a2a25ef846b38c079a07aae010f79a6db1204425dc44d879b4ff0f08e55f61f3dcf42b85a8e2c197a657411f469bcaa2933b973636342fbfb1608b647ba0470dffff1c578b3e46152f0998262f600baac4d0ced86d6391b9a47be5ea74544a68cf5f622f76a5c96eda40c6af53b8556e5d2647ac1cefcce5033037d6629a9fc362940fc6b8bc92019988e97fe74b9971e7713ee533697c6a2d7b3b8167c63eadb2678e53a2affa0e532d6db12648860d8095673515242af20979565b838607e43f2282adefc4f4ab8575d5038c23874c6a38740c35fa105394735aa6ceb4b627d19597544fb43c92468084cf1e29b751e517bdbca200958b44bf50ab4e9a8ac62b1e4933bbad3f5c0bae8c59597afced17bd966b1cfbd2a5751b6a72038598aef499113a77fd744bb3b5579db8f85dac349c7e4c9b62feebedb6ec6e41d16d3c142f4faab178c3e331365f875871a48391371eeb204bdbee911347027b9c7c19514780c1245e97deee83c879393e7f097aae103e80d1c749124ef1364ea3d1208886173ae8ae421ca68adbeafb7e621319fd745e2d68b83e37f8c3121af01e5136c091bfd32d2943e07dd84f8e6286015e1f961455e88bcf4d62c1db83127f6c4d8a0140349cbdf14d74d106c89b21f3a93f81feae3ef2d0c9777b8d387cc91c639d07d74f7d8178d71dc87834890e978322cb6e2fcb6b5e6d2a740770b2f07407a312d7dc4fdac2af046d0a703b4d40a4f62e177d09297551756307a55d6f017c33f08f6a5f8d30ca4868202572d549c0866cd1afafd02786eebe65aeeb90bbe17c5f731fcfac0638480ea8e0d5f822f1d6fb0d5d3834546301435f3435484725f030649eac5276f53cf458fa15092e3a966d5c06fcd84bdefd8caed89b315cfea533b92141686da1546d37d11846655c1fbc4d6e186df37d32ee578a428c62123655ff9c747ee748cf1ef372269ae2220598ff2365e6cdbfc6684ca3d8cb5660c14e0cba1f56660f14111593d881dd9294361e300182c022844a34a0675e8487b90639bb403f8b59b2f762d8d1eeb18ea2823a40cbe7aff3129f2f3f7236c1fe11756d1d2ad9bf8cdadb9b50f7bf71096ed827fc0642e43c0560f191771f8c6327a41edb71b4aeea2778ef2a2da9da39f13f25897ab321a425ee37d4dc9aa7df57dabb86eb4217a70abddd8f663c76d39e390274b55af1c689f35d436a9b24403b0ab6bb9c943f03ef5a9dd930226005bb5b4c5f7052c89160aef8dd92c4fec74bd0e55a7a478b01359b44a6354866f97cf2ce1b202c56248ec3ae083f555b95abc96dc632fc9f29ddb946c82fc51d993021754a786210fb90d2998fef40ec2aa2c6bc5dba44d551873fa28b23e245047000cfde816969b4014b60b965f80a63a9cf1fcc721e294bfe6f46b2037a7882fb1733a2737f76841dc51253f6232571206156686a0fc72dcc612e92c57395e09526cb56a9f927224db55eaecf630dfb0baf0cc4baf88f580d0c288cb36bc9cbe425525cce427d2666b4b06cf4490d7740c88fa30bf38a3f6d9e22c1e3741ec9abc50a86f24aaf411c122e8f7fda4419e57615514f780af63493649890ab401b6f5288c0e512e6b566f7fffb49329f93f54ac5aceda11c10fa80d36bb3dc8484331d7f942ba2ce79c09b4a2f37f129e258f0129dc727659f3337a3830162473291b926a5fa875fa06d3cee7c1177eb0ec995c0219cee584cf0e8ccaf991d7a8297ffcdb9360622d3de35183dbd7fe1eb3729221047ef0abd21381c79ffcb542920f73e373a669b5b3a55fa893e668daed7fbb4a7205bc746a3103838eed8452a0a1f85bb4f38ce8d951805075d1bd3572fa2e0eaad0f093b346249372fadf6a2312adf0e477b1a14a342ad90eb37f282d11de0939c5a9c301dc98d825aa6d8affa7b095b8abae69dde9ddd95f8a472303e19e33460b2d6891cb862254ff0e4b3f10d731c9333b40f562525dbb81c0e68bf8e2efa7493fd0d2d56212ca5236c90d31bd4405f0e4641ff3255b0055abbdb5feea36bd6424ad9379d2ab16cadc5c81b5a65c7f8b9edee93907a0e1f25a3823c4874c33a398a4ffa0b161f9f717ca66a15f43173657fb8fae8c55e7397e4c5537d5a4701c108576e22db4e8623785edd0545423d9e139981d0415cce5b6100f28dbd7033d9907815811e294e5cffbdd04c452c09305758193c9f2778da03e8f1c67d3fff248955cd37a428e9a31f4458fe80625416c30a86941caf303911a07150f7522c70c61983e9f4b00b63b9ee9905bf541313deb9f52f1c83a67f17f91150e4736a52e7b2fe0d2fa3088e850856096f8d2d87d4243e7b6632895cecf062fdd22d14238bc11c7fb2d84682e8f28d12ebfc3cf2ba63c2dec21676b29aad5962bedf33ea4db3df22f33824242367a1697496b6868367eb652caa8bb0c6aa3f31abb43f02af2182f7290ab95f4113d4c40859d520eef146fa0660513e0471f130c2e2d38f757a38ce53793bf71c18e2d31285eacf3bc8f2b9521340b006d04eefa30c69a23e46d0245343be158ef2b91933b8f8937afdb504fd2fa03a6ac853916ee21a617d4740e5ec3945f25d9be8be80b34621f7688be67561a7ca8e576e7b0fc8525ed4e543a30d1b7b85633198", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1146.878167][T13059] usbhid 3-1:0.0: can't add hid device: -71 [ 1146.884223][T13059] usbhid: probe of 3-1:0.0 failed with error -71 [ 1146.891673][T13059] usb 3-1: USB disconnect, device number 63 executing program 2: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "63da3564"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) [ 1146.959088][T28172] device syzkaller0 entered promiscuous mode [ 1146.978089][T15517] usbhid 5-1:0.0: can't add hid device: -71 [ 1146.983885][T15517] usbhid: probe of 5-1:0.0 failed with error -71 [ 1146.992774][T15517] usb 5-1: USB disconnect, device number 55 [ 1147.028096][T15516] cdc_ncm 1-1:1.0: bind() failure [ 1147.034127][T15516] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1147.040957][T15516] cdc_ncm 1-1:1.1: bind() failure [ 1147.049221][T15516] usb 1-1: USB disconnect, device number 65 [ 1147.288027][T15519] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1147.308024][T13059] usb 3-1: new high-speed USB device number 64 using dummy_hcd executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x1, 0x2, 0x0, "1a"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) [ 1147.528610][T15519] usb 2-1: Using ep0 maxpacket: 32 [ 1147.548058][T13059] usb 3-1: Using ep0 maxpacket: 32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1147.668177][T13059] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1147.678083][T15519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.682438][ T2358] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1147.696732][T13059] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.706769][T13059] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 1147.707216][T15519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.725729][T15519] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1147.735154][T15519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.744390][T15519] usb 2-1: config 0 descriptor?? [ 1147.754003][T15516] usb 4-1: USB disconnect, device number 67 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1147.788774][T15519] hub 2-1:0.0: USB hub found [ 1147.830004][T28198] device syzkaller0 entered promiscuous mode [ 1147.868159][T13059] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1147.877224][T13059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.885195][T13059] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1147.897103][T13059] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1147.919919][T13059] usb 3-1: SerialNumber: 䀁 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1147.948035][ T2358] usb 5-1: Using ep0 maxpacket: 16 [ 1147.998120][T15519] hub 2-1:0.0: 1 port detected [ 1148.068117][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.078890][ T2358] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1148.091535][ T2358] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1148.100430][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.109103][ T2358] usb 5-1: config 0 descriptor?? executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="65ad9333880189749b1db2804305a942030c54078d802fd1de553469bbf85c16d680e7bb018d3bfcf7fd1f5e664b5e896368ee96bb63eee9f47abe81bfeffa22f816f7f655de5b17de823e44e873677ea9c55a124c1435f4b40589006f28d2d8fccfeb162bfd26ef108218891da937ee3e121cc39a57927485de1343cf5d73a108d6e4cb96de7f08442dd79efb856e2b0051068cd09d010c46bef7e2d895c1058463c14edf77b2701636f0b9d824f118bb9637c6eb808a7b81cfbd98578b452dffd664e9c9aa474e0196cec2aa5c338206786d739a0abbf326baf2184ed135c3e032a1326ff4742aa80297f694b30f92af36c59e6ca8781f7c9b3d5130c96d1834d51af27bacaf3385a36b7f3b7ece7c15f12c0795dafea5186818831f8061914644a8e52976e7672e131f5b96a63e93c42ec41281675617467dd1e21418a0801e3f27f4206185d92bada9d949297411260d2222867303c13bf2eeb043166282eed3f671d89b37ccb1a3250830d6ec5765ef37120630b7bab7fed89eb2f4a32c8a6f403cb7a6f1ac6890e9e2c28c440c699f12fe5bf1cd565d3dcfed3fe37556a4d184fc8d94637d303291e9bd5912a4a75c78407426eb7a404e7c4bdf065db8ed27b09a8e4e9c02d2aef3d9db559d8e0b3737d8c09bae1d346283fc384235e1a45c76f31aba2ec977389004c6b6d7487a0d283f5be9f042b8983e4556be902f9b6fa74ce5801826add186c58530764a8e3e6e4aff09f39fe323eed4eaa750e93137062a07fd0aba55bc4c82d8f763905f85c9165c8c0b428e0a9769621b5fe8096ead7ac16f8aa7be179c6b67c3311b26052cafe58b3155cba3c7ae6b99cdd9bfba40aa2b10e79fdeed7231b5ed59658e43da84f1086c1621e50ce1008dedc3d74cab389f422dafb7d75c3eea107d07947805fb9fa58fe6272611a8d2bcae3c22609567dcb709abd99c82b861a7621f1bfee3d011c3881882ba3301118f320f739373a33d9a16fcfd58d89af416f49ccb09eb4af220c222e0e6f2c3374ef7a564ef02ceb63fa3f24a0c017f81a76e3533aae847911bc774886f1b689988bb5cac3c5b07b60d590679a851176a47d64bc5d33592cd6ffb99f56a6add51ca5d7621f32737f44757f436b2e599301e2a57619faba134c2f0307547d49b540ebb43c301b8380ad1b6b34425002b1c72ae0e1ece0c19223a8f0742fb69cc34d5dc66f041f7a75c95bfb7f83723032d3a16e2cbebc1d58429b50008f77192b2177e9fa9372904fad86f9a294040a3873f20b1f19c5f2c9ff65a732d88ba70578b919b46bc6d265d257fba94d0005bd246ced54944831cdadf78459dc84cc5cec32950f31270bc6b48903abba8c264d7fee798ffaba57ad4f555cdfad5f78a8e98437f0b0c45a2f1e3cd2ab2cac9b4507b5b604577ed4dbf849501301af94162f7fe1206b7a776dbf498f8a71958d8c2ac2c63b8247cd02da2889955f6f4311ec700c472766ec3e06a72ce48e9444633ee5969ad58cbe7d3a3648c57baae1edc6500ceb3d793c55b638c6769054b9b512b563551eb411322fa146e4b836b56e9ada14a7dc51bf19a3a613cd8c9c1effdab206aa45e8bf7b14f35a3dae70b0daa7d23471ad115c8d28ee40bbc5479498a15a7de24734d8590051afea4c1aaa3bee627291f9f16219b2a9d188bc9f4213488a6b7a1736c52b28f7a4b5e5b7f6cf4a01f8e8f89eeae2cc27e563210fa02b32728b894cd9661c4d85fb21fc889c3f2c5c1bee4aae345bc01a40da55714e19b0c9fd7f71107e54880c9f451c4739b71feb77dc1dadec915c92f6e9db2d25ae8c5161a11ea88b83a640d1bb2da1a6967f4bca0f62cc7ba6a449f85f22d90e9471364cbcd5dc160e4a38c52b53aac7b952a93be58b02682267796af98583a2fc64a9b33799b1e24e023d814d6846ee5230d870271adf3f8207b018e179d9ad59ec0f8671db258e86095d457a743a612ba5b21415ecc96803f09446b56c0803c2cd4d485e6c5724a8bc2bf5a5291f0cd5745596be0ddac585747b85f24a5ecc6156df545f82bb8385c2a31e014f59629f610ee96f9991bc9e771467382815eaca60a83ea7a505f72d8e2c2874da4a2ac1931c6d2efbdd1913a347289f3606b11021276b35b44d6823c1674d1965fc76b6d2ca7e6946437650bc73b5dc5511f46e140d301c144f7b9a98e0ecd37ea78a01d1116092c82a7f401ca9ec9c3753ff1684e8cbb4b9ca69bafbf119a5ae9b71f818a9270d71300b243b1ce3e1c7eeffcf6f08ad935460ee606bc78c6c9919a9d26c45da2ea2012fa19791b7f2d2f5d309250714027ee7d209ba81456840bceb89d9e846bdd8b763952d3641d40eb89da0013c4ce992ab46924a4959c2604df5ca12ca3885d7a8acead172a285f9e2c42f9ae7aaa5622f0ce526bb604e28ffcd673b7b7720b131d5273bd670aaad5e493d4167b93f58491cc181c15215a8e8f092aca519dbc90193100bded7fdbc7ee2cc1c110eb453d4362965532174a9d032af7293c9652716672acd92f009b8a80fbf313e4495a01b7eaf485129ab944bd13e601ce638aaff2237c0e9241dd31ec2bc846caaad7c3e36ccc607cbe914d3831b6290d71652fe2629d54ccb7f16fcb522b21628981dff848330da51f03901a61fbae6d4cb3141024b0362b16799bec82623ddf6f8d72d94c5e2694ce5a4798c4254ef1686ceea8e7643a2e078315f416cb026952c89feb5adddf251958ed671e0494d11d7ec0acdbe0ba532df46034a5a73d5f1d247c9e6bf2862b01accd84504f81b1ec57491a114954facda27d659a966c1fd42564fb7ee847140e4d50e89eeff657d95f8b04d0d65d886be1dacabbdeff4f38632fdaa4f4bf174010cc9546711a2cf1c8f2969ba94fb456bd36631997ec6f35c20baac29cdeba43f531b3770be2aadde375ca9e5b3bf8951b18f0631d69ec48b3e922cb053faf32e580dd065d8f19b968a9541ea03fe96f1ffc5e3a442ddd69b63cb11f7911256316b8da387ed308f7eeb94404106e6a6b7022d6fca1cfaf2e90abceb9b2be046201f13c0a9378470bf13466db16fcef584399380113b20a3c05128a57a776d489f13a3476a15d724165c9512f0bab1d429848e95d0e8f6d07638da6b39859811cbf8ffd5b6a04e04a3e3676b7e40d05583009fe16a0c1c1d8dad56ab5ba5eaa7ed9703503381bd7fd609c9e4e514c6554f9d62be8b2b4c5f10314f528756bf9ae6fc0376ce78287adb2eefe88bc1ee876de3d0e8ef4ecc58313b9c0e9065f5396e6b90cd7d14e5f7b48df5e1d7f04e86419dac5888d8775a0617442e2bb705c5323ab211b2e6f07a9d9cc1b2388f2be8bfad4ac9fc76d7a5ff7ac0beb73d256340c2227556381c42fda1cae5ef9a812c0ed97b3ce4c631d63f8a5a3398a230824af2d35bdfe70323ade83ce4ae29700e194ed1c05515d221fcfd5a0333b93bb80a57bcbef2a21246f6ce87527ab742ec5f8bc8d609804e7f4205e12843cb1ca21d2b3a9e50b7bdb211b73b256eac36ffab8ac115f9949746ebd1782d4de79dc609fc9ce236492292ec783bccff0e8652e93ce870105a26da09c4cf67b2d7666bd4161f52f7d84d144b1b0ef03000000ee0ea466dfa9479fab295159f00ee7209544628d5e0fa5d91dcd2dca093d012df5144b54a343f12385df445d4665941236b50179b47ee561d52b6645184044db3e2eed66001a7da86bd9b3710fe39f32cf578f1a1ebaf45f43518d47b43a2829146a703cbe42d2b6863a84df4b3cb3ec07f2a10ebfb0f64000d9c244ff7482b8243ca0915326ebb9e623004ed48991cae68371f47a946a178bc823f340722503da7d03b50f1d078adaab1d07ef39d1d7457ed2f50c34a1fbd5ae656222f2a71c3a43a9af4bb5bbaa6bcce92d6515ee2671ecf5b6a5d7e15565a224f299d1cdd11ffad8cae2d56fcf2e4151db6446c4715769c844285f77e3d269ed7c02264bb9ff052bbe03beea8b35d15864872f64cf587d0c00d0e38a92dde19f093efe1440509f42792e1fd17eb3f237e38468e77f0666494e8cbe1bee84217e93af93cae90c0de0ea2b6843d665e9208fbb843af24bff66594e82a12b5b59d83c2d2ecb16110c651d0e0b7f7872fc11764e138ebf0fcd77470e0da24eff6698a25f4f251805e2b72a9c472596a2751ba50070d1d6dbcf5ebbbfc32e9492b33f24d7c6481dc4ba0e11bce80fc90f37d30e6713c95a0ffda4591990e23765f75a7c00974c92c5dc31a0426f5104f47b519eec45fbcbcc687966adbbe7f589ee9b340ffc16d0ba5e09fb0703fa00243a43572e2c8d4e769ac5c8f503f9de3b17b67986d8748a6914f629dd2d466c03317b72b8b3f06c8cb2af11ca7f990ba7a883ae4f4b9f5f9e048e6b991a57f84ff56474e7b7da75df1a6d66dec049ff4537ae07d36cce1613d4ed4b532f2bbb8bd018f9c126fa882a6d021067b03a878815d9f673831d2801f065450396224c54acb3c84b154e605a749ac42db4e49c45a0c61bb44f4083d35a221a8bff30282d44c4df07f3615ccd075b6ca881a8fbc209bb34e6444c0f04c9365ed53d6b996e46244e0777f9177453d42dcbb047521b9d7e87498f3cddc4803a639bec476871e9d7a5b9b483548567ebf15038b052ddb6bf51136ffe1f076cf9cc8d9875ce198a3d6fbda1c7fc322c53838f721a85c8482e84c9543067cc7950d5e5fd8ed48a581ea5b358b0b9083c09025d7e281c1a68949e6460d02bb03662fac6852905d891d6e8c43e71104b94ba33437b6fbd9b73e7fd46b589fa70b8e5503b4d8f78409712134d98de257fdc1916aacb12fe25794c1a200cdff98d562c05ce513b6f59e07a6125d76975a60ef136288d28002ef4b6f2c760559fff9dedc8e3fe33988e7d834a849cce47ea1ca9afd8a6eeb54aabd77373d1dc6e69aef186d5ec580de5e39876b82037970e6a2285e17768c6f34682527dd38d0a24da71e3384a29b94f2d14cc9bd74e4bab3cc848703e3a47cf0a8b36f4decc89363c91883876cf52c7f95cbfc1e546d9ef6528b98fbb2d078158ae153506be8bb7413d0f6b9f3c2abd9b57959892ae3f6571d26966c835f3cce4d51e3dffea75963adc4b72ae821c976c0781e4602b9c93299c0fb6ae7bb3f473c5e5e5da0f2c6e548fc2373d7b94f8decb162ad303ff943580da54352bca8ff71098ecc22247397505f743f1371630a1eb05ce11796cac3d68f785685de318dd8fcaadc437087935798b50808677f592699daaa1d535b96d03cb892cfd78cf3d8457b752b2e21cd868fcde04627a8562a598996d5a07db6bbe58360f74e023bfda0bfad549398874af251b04c4bd73a60fce67cc33e87ebf9e9e981ce76e5a1548c81bdc5b21a6cd575348a166678b94e9932a563b9a9091a93a0ae171925b822d42030df44aa326c4fdf7fb559b4ea6a7b68c2f1e32df8b6e08c0b2f257c83b23a024d47073bf9fd46e56ad30a7dda38a8ed2c1536fdc822b2d8422005fd357bd1bf0e27f33098df529a82b7c943d32e28386acd74258c1d81f3552c343dc2663956b5a3bcf79e50b66d8e20ab623ad9dc4f19c7b2a84437862756c0e517fc44050659e3c29a20e372e7caf6e3675eec653081fd4839c3469bd06c03e21ebdd90af52339b45ed9ebd3f1819a53e0fe150d2ef957831bf35ee13c8f00288f3d27dc5a57967e85e08718daa727ecdc19e2000e3634bef4779aad8b34404f2b12998d62ebc6b33866c88819ccbb475ecde60cd64ea23453e4f7c30fa3656b01363075d6507c5a44981187e2663ee5676f4f9e6623ba503b5c5aba6755fc248e2d1f824891a3a430d506fa753e96c4185dc08bf7773201bb087e745ad90f500b169da7f6d9f4a8aac6e0a64a45474c8592f177e0036bc6f99314685e5d633feeceb47188a45388e8395d143be717c80df34bcfb281a9aa0404c4f712e0dd6d69bf8ccdac4dc121264608fea11f789a6bd864524b0913ad0523f1eeeddf76262a93bd3ab2e184b43d82cf7a0fa81543600b7f3ba835632307b6e79127544e43436207a3d9411ddb2a6c42c320500073329ded84bd61ee51325c6fff6f5085696ab5068cec51b6cc524c104fb593abbf9851ac7437804f225a18a3711ae9a4383b37135172016cd401ea64c5a345db0dc13b8fca1cabf0ea10f07da4e8e9b4312165000f3bcab742e7765ebc7aa391d35eff19f5ff0bd02b802abef08c33a58c656cda5249bd294c7e807db30e713f880949bfc04d6a839db1b56a8144616e7d04b86711b8cf5815f955e2f3d813a7282a494a1d448a878171af29e91f5b0c944bc02d4e1d0988e5a4015baa51f5fb4b47a25879f9c174cef94908e140d12575dfe7ba2360730c5445d4869c7195a8c9f958cbf5a58065aa305b04b2df2bec4315d634c5f15be25ac1686d451f480fa07e2d3e46bd9103c61f61f27a29f135186f7692f3ee9134888225df57ca5643ecb8571a471ed999e09f98e7e0bbb975ba7d615ca19761349dfc35fc9502b53d95365044425ac98478c760dba154b37e5a4af907ea21a32a76da9809485c10d6905b03650e457089abba7213d9f0bae2bce5f88c8ce1c5cf189258a2d8cd378b044a5b79b090fbf18d3176437d6673ec40be49cf8610b9b4c825c33d5cf77356d5dc5446dd45631f837254104a49d438354539db92bee82eb85688a99f27a62f24e21c5c14c54f1b33ee2285a68351460661d54a4f43ee6a1f95d9ff5326882dbb08c15f9a36dc49f5e75a4ce4e9d4d58788bdca449a09195dd39d6f30a9f6f3ea4651a5f7579af5f66f865f8035ecb579500aeaea848ec22a1c28509389a28ba0f0c3c8edfd024e39ac7414bd27407c6e806581dd38938dd7635f12e798c10ce5c5fcad04d6fa944c54d3d713f940f880f73df41d837894bee51a33fbf15526a0f8388db54c10045cc33a8768a8d18a41455190515ffc3cdbf7cac1c97d9c7a7b1e926cb40d20e8192135c9cdc2617fc64b6dacebb20ddff767a63bf6c33171ad8c4e03dc3201a3c5c8a3782636abb4783adc5382a7fca5f6f9c1008aeddba797246f3fcaae8f13bee3157925c2dd228491cc6ea5d1fe9b89b45bd58427b2d95f40119597a9c78c1bd4f06b43b484f522637fe308698ee2435bda5e24f8910cffd0d2db0ecf218a9afcfd767e9bb68b3fba63afb2f0d070aa07cb30b1862137fd1bb874d4ac094dcb7325099164bf285b88aaf729510956841e33008652d00a75c74c6b376d9e3dbe327811e203751412cc0ac29e50c95555a4c228e66bf8f166ae2584b1be973ea410d7845ded367d86178b2c6c5680989682a28241cefcce32985fa8af2af9dccc74dfbb7d82f356f7dc6b34041541cee45f1ddacc730006b6168fa007b546869754334780ba319bcca68428258f5c887e6dc1fbc4470d3c0f8b9fea98f321a860791dab0135d0989d9fa0ec11906d97a60785fe366d5de17cd00b7d0f91d38bccf007d94bf8040397990fa7b6416e9fb1ef024d52b71b5ac176ba5d286b890254976c14980930c64239ac6589f6fde9e113969cae24badb7d5c068875021c145ecc8d71b402cc3799d26607b8c30628d3a562783029926a312cd8452df59aff4dee5b17fa6b386793238190f53076ec115ba1a8cbd8f76f5a7471f21a2956cfc4ec04426ed3117251718900093080c15adc617b1df078d76e59e069296e94ba450a975fb9823b6b4ea81a3cd142a8d1402b87c7444e9fe91ce489701b0eb98e13c82631c41d6b80fde40aad337049f57bb1883f38e5d0e283f52449743593b95ba8e53aa4a5c14e81611be13a853ffda03b4ae7189db04bb7200c64f9428886c8dbc153b0a7ed142cda8ce73f1d61c6f3633c0e9c7d79a18fe59cebd9c7e5245865673873fe7b8385adda3d052511700c25a7e70273b0c7eab1697704190aacccf69cbc5f7b574f6d49cabc6a63ad95d8baa2019976ec2b77ab67fda1805f21fdd400a63cc52eb4cdb11fe0bebce7ee5b183c80108b682838660e906016cb11e91ec2104482643719ce2434f2faa9f0c7801cb5d8901b1e9e09e66dbc127e4c347fd602efcd28d450195119ca22c518c8781b1da2999cb1228b03519a7f706703b83d79dab952b2a527a717d0e4541f32d5e11c9dcd0ed22f2368bc6bcabefe064335e62c7f53670a0f11809ff4de2a3bfe3b36f9916403d6e109cb1c3461fc727fe6c86a1be4a8282264007a3b016cd5e6a69dc6c0be932abc8a849c7594092b26baccb8de193658140dc27b264053822a513b7f812a8b1f2588632026cd81f919c0a92cd31c4e579bad8b1771b0b0a452e4d329bd5cc42f78c6ca4e3dff6a95d093ee099d7a83b487532e4f002011110011536d481ff03b880e385c37cf4c75b73cd4894151ba61e4cb98975e00ac357fab60450f6de193204699371f0f08cd4501d0c894c7a4e0f401af30c23b51e196e8162c72275a01386e7f1f652212f723900588eaf12fe4a41c0892115b91b2a5610952d228bd272729c13137a428fb47284fefbf4f6043b83371ecec8c09ca77ce43e69546c1c0ea783aff24bf1334d34df4c934fca2bbf11deb0dc505b2280a473b0709f5019ca1928f0f33c91524fc187aab3241bc873569be04e66b0fbab365f3a299b09d2b7c5d82080edf9c0c776505d130cfabfc2b16c2f850246dbd43f0e946ed2ec37e53f096cd9ff8798c75a6a57b06c179aebc5ff5e7b004e2ddc1df206b734f0a6951732ce63434787678389541e8dba59e05b5035d7da7cb722dae3f483a094c6bdb6bdfa191facda2c23c0aeb9c4edb2b5ddca10cd4a4d7b36f569b47b4c03f5058f1b33f9fe43925e24d24db5b36f50b11191d2c07437d3b33b3b090e1133985e3447c2f5d2344a084c5a58bb719327b4b5c2cbbdb287bb917fcf0dffadddd6a2a25ef846b38c079a07aae010f79a6db1204425dc44d879b4ff0f08e55f61f3dcf42b85a8e2c197a657411f469bcaa2933b973636342fbfb1608b647ba0470dffff1c578b3e46152f0998262f600baac4d0ced86d6391b9a47be5ea74544a68cf5f622f76a5c96eda40c6af53b8556e5d2647ac1cefcce5033037d6629a9fc362940fc6b8bc92019988e97fe74b9971e7713ee533697c6a2d7b3b8167c63eadb2678e53a2affa0e532d6db12648860d8095673515242af20979565b838607e43f2282adefc4f4ab8575d5038c23874c6a38740c35fa105394735aa6ceb4b627d19597544fb43c92468084cf1e29b751e517bdbca200958b44bf50ab4e9a8ac62b1e4933bbad3f5c0bae8c59597afced17bd966b1cfbd2a5751b6a72038598aef499113a77fd744bb3b5579db8f85dac349c7e4c9b62feebedb6ec6e41d16d3c142f4faab178c3e331365f875871a48391371eeb204bdbee911347027b9c7c19514780c1245e97deee83c879393e7f097aae103e80d1c749124ef1364ea3d1208886173ae8ae421ca68adbeafb7e621319fd745e2d68b83e37f8c3121af01e5136c091bfd32d2943e07dd84f8e6286015e1f961455e88bcf4d62c1db83127f6c4d8a0140349cbdf14d74d106c89b21f3a93f81feae3ef2d0c9777b8d387cc91c639d07d74f7d8178d71dc87834890e978322cb6e2fcb6b5e6d2a740770b2f07407a312d7dc4fdac2af046d0a703b4d40a4f62e177d09297551756307a55d6f017c33f08f6a5f8d30ca4868202572d549c0866cd1afafd02786eebe65aeeb90bbe17c5f731fcfac0638480ea8e0d5f822f1d6fb0d5d3834546301435f3435484725f030649eac5276f53cf458fa15092e3a966d5c06fcd84bdefd8caed89b315cfea533b92141686da1546d37d11846655c1fbc4d6e186df37d32ee578a428c62123655ff9c747ee748cf1ef372269ae2220598ff2365e6cdbfc6684ca3d8cb5660c14e0cba1f56660f14111593d881dd9294361e300182c022844a34a0675e8487b90639bb403f8b59b2f762d8d1eeb18ea2823a40cbe7aff3129f2f3f7236c1fe11756d1d2ad9bf8cdadb9b50f7bf71096ed827fc0642e43c0560f191771f8c6327a41edb71b4aeea2778ef2a2da9da39f13f25897ab321a425ee37d4dc9aa7df57dabb86eb4217a70abddd8f663c76d39e390274b55af1c689f35d436a9b24403b0ab6bb9c943f03ef5a9dd930226005bb5b4c5f7052c89160aef8dd92c4fec74bd0e55a7a478b01359b44a6354866f97cf2ce1b202c56248ec3ae083f555b95abc96dc632fc9f29ddb946c82fc51d993021754a786210fb90d2998fef40ec2aa2c6bc5dba44d551873fa28b23e245047000cfde816969b4014b60b965f80a63a9cf1fcc721e294bfe6f46b2037a7882fb1733a2737f76841dc51253f6232571206156686a0fc72dcc612e92c57395e09526cb56a9f927224db55eaecf630dfb0baf0cc4baf88f580d0c288cb36bc9cbe425525cce427d2666b4b06cf4490d7740c88fa30bf38a3f6d9e22c1e3741ec9abc50a86f24aaf411c122e8f7fda4419e57615514f780af63493649890ab401b6f5288c0e512e6b566f7fffb49329f93f54ac5aceda11c10fa80d36bb3dc8484331d7f942ba2ce79c09b4a2f37f129e258f0129dc727659f3337a3830162473291b926a5fa875fa06d3cee7c1177eb0ec995c0219cee584cf0e8ccaf991d7a8297ffcdb9360622d3de35183dbd7fe1eb3729221047ef0abd21381c79ffcb542920f73e373a669b5b3a55fa893e668daed7fbb4a7205bc746a3103838eed8452a0a1f85bb4f38ce8d951805075d1bd3572fa2e0eaad0f093b346249372fadf6a2312adf0e477b1a14a342ad90eb37f282d11de0939c5a9c301dc98d825aa6d8affa7b095b8abae69dde9ddd95f8a472303e19e33460b2d6891cb862254ff0e4b3f10d731c9333b40f562525dbb81c0e68bf8e2efa7493fd0d2d56212ca5236c90d31bd4405f0e4641ff3255b0055abbdb5feea36bd6424ad9379d2ab16cadc5c81b5a65c7f8b9edee93907a0e1f25a3823c4874c33a398a4ffa0b161f9f717ca66a15f43173657fb8fae8c55e7397e4c5537d5a4701c108576e22db4e8623785edd0545423d9e139981d0415cce5b6100f28dbd7033d9907815811e294e5cffbdd04c452c09305758193c9f2778da03e8f1c67d3fff248955cd37a428e9a31f4458fe80625416c30a86941caf303911a07150f7522c70c61983e9f4b00b63b9ee9905bf541313deb9f52f1c83a67f17f91150e4736a52e7b2fe0d2fa3088e850856096f8d2d87d4243e7b6632895cecf062fdd22d14238bc11c7fb2d84682e8f28d12ebfc3cf2ba63c2dec21676b29aad5962bedf33ea4db3df22f33824242367a1697496b6868367eb652caa8bb0c6aa3f31abb43f02af2182f7290ab95f4113d4c40859d520eef146fa0660513e0471f130c2e2d38f757a38ce53793bf71c18e2d31285eacf3bc8f2b9521340b006d04eefa30c69a23e46d0245343be158ef2b91933b8f8937afdb504fd2fa03a6ac853916ee21a617d4740e5ec3945f25d9be8be80b34621f7688be67561a7ca8e576e7b0fc8525ed4e543a30d1b7b85633198", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) [ 1148.238161][T13059] usb 3-1: 0:2 : does not exist [ 1148.248489][T13059] usb 3-1: USB disconnect, device number 64 [ 1148.258037][T12517] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1148.498025][T12517] usb 4-1: Using ep0 maxpacket: 32 [ 1148.618091][T12517] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1148.628775][T12517] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1148.637644][T12517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.647232][T12517] usb 4-1: config 0 descriptor?? executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1148.668240][T28202] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1148.688593][T12517] hub 4-1:0.0: bad descriptor, ignoring hub [ 1148.694325][T12517] hub: probe of 4-1:0.0 failed with error -5 [ 1148.700659][T12517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1148.744719][T28212] device syzkaller0 entered promiscuous mode executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1148.819158][T28214] device syzkaller0 entered promiscuous mode executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1148.878121][T15516] hub 2-1:0.0: activate --> -90 executing program 0: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "63da3564"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1148.988779][T28182] UDC core: couldn't find an available UDC or it's busy: -16 [ 1148.996148][T28182] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.098073][T15516] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 1149.178028][T12517] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1149.308036][T28029] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1149.418019][T12517] usb 3-1: Using ep0 maxpacket: 16 [ 1149.428265][T15516] usb 2-1: USB disconnect, device number 51 executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1149.538129][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.549841][ T2358] usbhid 5-1:0.0: can't add hid device: -71 [ 1149.555822][T28029] usb 1-1: Using ep0 maxpacket: 32 [ 1149.564369][ T2358] usbhid: probe of 5-1:0.0 failed with error -71 [ 1149.570925][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.581909][ T2358] usb 5-1: USB disconnect, device number 56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1149.588974][T12517] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1149.591452][T28228] device syzkaller0 entered promiscuous mode [ 1149.599127][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.613263][T12517] usb 3-1: config 0 descriptor?? [ 1149.679170][T28029] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1149.687667][T28029] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.697852][T28029] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.707311][T28231] device syzkaller0 entered promiscuous mode executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="65ad9333880189749b1db2804305a942030c54078d802fd1de553469bbf85c16d680e7bb018d3bfcf7fd1f5e664b5e896368ee96bb63eee9f47abe81bfeffa22f816f7f655de5b17de823e44e873677ea9c55a124c1435f4b40589006f28d2d8fccfeb162bfd26ef108218891da937ee3e121cc39a57927485de1343cf5d73a108d6e4cb96de7f08442dd79efb856e2b0051068cd09d010c46bef7e2d895c1058463c14edf77b2701636f0b9d824f118bb9637c6eb808a7b81cfbd98578b452dffd664e9c9aa474e0196cec2aa5c338206786d739a0abbf326baf2184ed135c3e032a1326ff4742aa80297f694b30f92af36c59e6ca8781f7c9b3d5130c96d1834d51af27bacaf3385a36b7f3b7ece7c15f12c0795dafea5186818831f8061914644a8e52976e7672e131f5b96a63e93c42ec41281675617467dd1e21418a0801e3f27f4206185d92bada9d949297411260d2222867303c13bf2eeb043166282eed3f671d89b37ccb1a3250830d6ec5765ef37120630b7bab7fed89eb2f4a32c8a6f403cb7a6f1ac6890e9e2c28c440c699f12fe5bf1cd565d3dcfed3fe37556a4d184fc8d94637d303291e9bd5912a4a75c78407426eb7a404e7c4bdf065db8ed27b09a8e4e9c02d2aef3d9db559d8e0b3737d8c09bae1d346283fc384235e1a45c76f31aba2ec977389004c6b6d7487a0d283f5be9f042b8983e4556be902f9b6fa74ce5801826add186c58530764a8e3e6e4aff09f39fe323eed4eaa750e93137062a07fd0aba55bc4c82d8f763905f85c9165c8c0b428e0a9769621b5fe8096ead7ac16f8aa7be179c6b67c3311b26052cafe58b3155cba3c7ae6b99cdd9bfba40aa2b10e79fdeed7231b5ed59658e43da84f1086c1621e50ce1008dedc3d74cab389f422dafb7d75c3eea107d07947805fb9fa58fe6272611a8d2bcae3c22609567dcb709abd99c82b861a7621f1bfee3d011c3881882ba3301118f320f739373a33d9a16fcfd58d89af416f49ccb09eb4af220c222e0e6f2c3374ef7a564ef02ceb63fa3f24a0c017f81a76e3533aae847911bc774886f1b689988bb5cac3c5b07b60d590679a851176a47d64bc5d33592cd6ffb99f56a6add51ca5d7621f32737f44757f436b2e599301e2a57619faba134c2f0307547d49b540ebb43c301b8380ad1b6b34425002b1c72ae0e1ece0c19223a8f0742fb69cc34d5dc66f041f7a75c95bfb7f83723032d3a16e2cbebc1d58429b50008f77192b2177e9fa9372904fad86f9a294040a3873f20b1f19c5f2c9ff65a732d88ba70578b919b46bc6d265d257fba94d0005bd246ced54944831cdadf78459dc84cc5cec32950f31270bc6b48903abba8c264d7fee798ffaba57ad4f555cdfad5f78a8e98437f0b0c45a2f1e3cd2ab2cac9b4507b5b604577ed4dbf849501301af94162f7fe1206b7a776dbf498f8a71958d8c2ac2c63b8247cd02da2889955f6f4311ec700c472766ec3e06a72ce48e9444633ee5969ad58cbe7d3a3648c57baae1edc6500ceb3d793c55b638c6769054b9b512b563551eb411322fa146e4b836b56e9ada14a7dc51bf19a3a613cd8c9c1effdab206aa45e8bf7b14f35a3dae70b0daa7d23471ad115c8d28ee40bbc5479498a15a7de24734d8590051afea4c1aaa3bee627291f9f16219b2a9d188bc9f4213488a6b7a1736c52b28f7a4b5e5b7f6cf4a01f8e8f89eeae2cc27e563210fa02b32728b894cd9661c4d85fb21fc889c3f2c5c1bee4aae345bc01a40da55714e19b0c9fd7f71107e54880c9f451c4739b71feb77dc1dadec915c92f6e9db2d25ae8c5161a11ea88b83a640d1bb2da1a6967f4bca0f62cc7ba6a449f85f22d90e9471364cbcd5dc160e4a38c52b53aac7b952a93be58b02682267796af98583a2fc64a9b33799b1e24e023d814d6846ee5230d870271adf3f8207b018e179d9ad59ec0f8671db258e86095d457a743a612ba5b21415ecc96803f09446b56c0803c2cd4d485e6c5724a8bc2bf5a5291f0cd5745596be0ddac585747b85f24a5ecc6156df545f82bb8385c2a31e014f59629f610ee96f9991bc9e771467382815eaca60a83ea7a505f72d8e2c2874da4a2ac1931c6d2efbdd1913a347289f3606b11021276b35b44d6823c1674d1965fc76b6d2ca7e6946437650bc73b5dc5511f46e140d301c144f7b9a98e0ecd37ea78a01d1116092c82a7f401ca9ec9c3753ff1684e8cbb4b9ca69bafbf119a5ae9b71f818a9270d71300b243b1ce3e1c7eeffcf6f08ad935460ee606bc78c6c9919a9d26c45da2ea2012fa19791b7f2d2f5d309250714027ee7d209ba81456840bceb89d9e846bdd8b763952d3641d40eb89da0013c4ce992ab46924a4959c2604df5ca12ca3885d7a8acead172a285f9e2c42f9ae7aaa5622f0ce526bb604e28ffcd673b7b7720b131d5273bd670aaad5e493d4167b93f58491cc181c15215a8e8f092aca519dbc90193100bded7fdbc7ee2cc1c110eb453d4362965532174a9d032af7293c9652716672acd92f009b8a80fbf313e4495a01b7eaf485129ab944bd13e601ce638aaff2237c0e9241dd31ec2bc846caaad7c3e36ccc607cbe914d3831b6290d71652fe2629d54ccb7f16fcb522b21628981dff848330da51f03901a61fbae6d4cb3141024b0362b16799bec82623ddf6f8d72d94c5e2694ce5a4798c4254ef1686ceea8e7643a2e078315f416cb026952c89feb5adddf251958ed671e0494d11d7ec0acdbe0ba532df46034a5a73d5f1d247c9e6bf2862b01accd84504f81b1ec57491a114954facda27d659a966c1fd42564fb7ee847140e4d50e89eeff657d95f8b04d0d65d886be1dacabbdeff4f38632fdaa4f4bf174010cc9546711a2cf1c8f2969ba94fb456bd36631997ec6f35c20baac29cdeba43f531b3770be2aadde375ca9e5b3bf8951b18f0631d69ec48b3e922cb053faf32e580dd065d8f19b968a9541ea03fe96f1ffc5e3a442ddd69b63cb11f7911256316b8da387ed308f7eeb94404106e6a6b7022d6fca1cfaf2e90abceb9b2be046201f13c0a9378470bf13466db16fcef584399380113b20a3c05128a57a776d489f13a3476a15d724165c9512f0bab1d429848e95d0e8f6d07638da6b39859811cbf8ffd5b6a04e04a3e3676b7e40d05583009fe16a0c1c1d8dad56ab5ba5eaa7ed9703503381bd7fd609c9e4e514c6554f9d62be8b2b4c5f10314f528756bf9ae6fc0376ce78287adb2eefe88bc1ee876de3d0e8ef4ecc58313b9c0e9065f5396e6b90cd7d14e5f7b48df5e1d7f04e86419dac5888d8775a0617442e2bb705c5323ab211b2e6f07a9d9cc1b2388f2be8bfad4ac9fc76d7a5ff7ac0beb73d256340c2227556381c42fda1cae5ef9a812c0ed97b3ce4c631d63f8a5a3398a230824af2d35bdfe70323ade83ce4ae29700e194ed1c05515d221fcfd5a0333b93bb80a57bcbef2a21246f6ce87527ab742ec5f8bc8d609804e7f4205e12843cb1ca21d2b3a9e50b7bdb211b73b256eac36ffab8ac115f9949746ebd1782d4de79dc609fc9ce236492292ec783bccff0e8652e93ce870105a26da09c4cf67b2d7666bd4161f52f7d84d144b1b0ef03000000ee0ea466dfa9479fab295159f00ee7209544628d5e0fa5d91dcd2dca093d012df5144b54a343f12385df445d4665941236b50179b47ee561d52b6645184044db3e2eed66001a7da86bd9b3710fe39f32cf578f1a1ebaf45f43518d47b43a2829146a703cbe42d2b6863a84df4b3cb3ec07f2a10ebfb0f64000d9c244ff7482b8243ca0915326ebb9e623004ed48991cae68371f47a946a178bc823f340722503da7d03b50f1d078adaab1d07ef39d1d7457ed2f50c34a1fbd5ae656222f2a71c3a43a9af4bb5bbaa6bcce92d6515ee2671ecf5b6a5d7e15565a224f299d1cdd11ffad8cae2d56fcf2e4151db6446c4715769c844285f77e3d269ed7c02264bb9ff052bbe03beea8b35d15864872f64cf587d0c00d0e38a92dde19f093efe1440509f42792e1fd17eb3f237e38468e77f0666494e8cbe1bee84217e93af93cae90c0de0ea2b6843d665e9208fbb843af24bff66594e82a12b5b59d83c2d2ecb16110c651d0e0b7f7872fc11764e138ebf0fcd77470e0da24eff6698a25f4f251805e2b72a9c472596a2751ba50070d1d6dbcf5ebbbfc32e9492b33f24d7c6481dc4ba0e11bce80fc90f37d30e6713c95a0ffda4591990e23765f75a7c00974c92c5dc31a0426f5104f47b519eec45fbcbcc687966adbbe7f589ee9b340ffc16d0ba5e09fb0703fa00243a43572e2c8d4e769ac5c8f503f9de3b17b67986d8748a6914f629dd2d466c03317b72b8b3f06c8cb2af11ca7f990ba7a883ae4f4b9f5f9e048e6b991a57f84ff56474e7b7da75df1a6d66dec049ff4537ae07d36cce1613d4ed4b532f2bbb8bd018f9c126fa882a6d021067b03a878815d9f673831d2801f065450396224c54acb3c84b154e605a749ac42db4e49c45a0c61bb44f4083d35a221a8bff30282d44c4df07f3615ccd075b6ca881a8fbc209bb34e6444c0f04c9365ed53d6b996e46244e0777f9177453d42dcbb047521b9d7e87498f3cddc4803a639bec476871e9d7a5b9b483548567ebf15038b052ddb6bf51136ffe1f076cf9cc8d9875ce198a3d6fbda1c7fc322c53838f721a85c8482e84c9543067cc7950d5e5fd8ed48a581ea5b358b0b9083c09025d7e281c1a68949e6460d02bb03662fac6852905d891d6e8c43e71104b94ba33437b6fbd9b73e7fd46b589fa70b8e5503b4d8f78409712134d98de257fdc1916aacb12fe25794c1a200cdff98d562c05ce513b6f59e07a6125d76975a60ef136288d28002ef4b6f2c760559fff9dedc8e3fe33988e7d834a849cce47ea1ca9afd8a6eeb54aabd77373d1dc6e69aef186d5ec580de5e39876b82037970e6a2285e17768c6f34682527dd38d0a24da71e3384a29b94f2d14cc9bd74e4bab3cc848703e3a47cf0a8b36f4decc89363c91883876cf52c7f95cbfc1e546d9ef6528b98fbb2d078158ae153506be8bb7413d0f6b9f3c2abd9b57959892ae3f6571d26966c835f3cce4d51e3dffea75963adc4b72ae821c976c0781e4602b9c93299c0fb6ae7bb3f473c5e5e5da0f2c6e548fc2373d7b94f8decb162ad303ff943580da54352bca8ff71098ecc22247397505f743f1371630a1eb05ce11796cac3d68f785685de318dd8fcaadc437087935798b50808677f592699daaa1d535b96d03cb892cfd78cf3d8457b752b2e21cd868fcde04627a8562a598996d5a07db6bbe58360f74e023bfda0bfad549398874af251b04c4bd73a60fce67cc33e87ebf9e9e981ce76e5a1548c81bdc5b21a6cd575348a166678b94e9932a563b9a9091a93a0ae171925b822d42030df44aa326c4fdf7fb559b4ea6a7b68c2f1e32df8b6e08c0b2f257c83b23a024d47073bf9fd46e56ad30a7dda38a8ed2c1536fdc822b2d8422005fd357bd1bf0e27f33098df529a82b7c943d32e28386acd74258c1d81f3552c343dc2663956b5a3bcf79e50b66d8e20ab623ad9dc4f19c7b2a84437862756c0e517fc44050659e3c29a20e372e7caf6e3675eec653081fd4839c3469bd06c03e21ebdd90af52339b45ed9ebd3f1819a53e0fe150d2ef957831bf35ee13c8f00288f3d27dc5a57967e85e08718daa727ecdc19e2000e3634bef4779aad8b34404f2b12998d62ebc6b33866c88819ccbb475ecde60cd64ea23453e4f7c30fa3656b01363075d6507c5a44981187e2663ee5676f4f9e6623ba503b5c5aba6755fc248e2d1f824891a3a430d506fa753e96c4185dc08bf7773201bb087e745ad90f500b169da7f6d9f4a8aac6e0a64a45474c8592f177e0036bc6f99314685e5d633feeceb47188a45388e8395d143be717c80df34bcfb281a9aa0404c4f712e0dd6d69bf8ccdac4dc121264608fea11f789a6bd864524b0913ad0523f1eeeddf76262a93bd3ab2e184b43d82cf7a0fa81543600b7f3ba835632307b6e79127544e43436207a3d9411ddb2a6c42c320500073329ded84bd61ee51325c6fff6f5085696ab5068cec51b6cc524c104fb593abbf9851ac7437804f225a18a3711ae9a4383b37135172016cd401ea64c5a345db0dc13b8fca1cabf0ea10f07da4e8e9b4312165000f3bcab742e7765ebc7aa391d35eff19f5ff0bd02b802abef08c33a58c656cda5249bd294c7e807db30e713f880949bfc04d6a839db1b56a8144616e7d04b86711b8cf5815f955e2f3d813a7282a494a1d448a878171af29e91f5b0c944bc02d4e1d0988e5a4015baa51f5fb4b47a25879f9c174cef94908e140d12575dfe7ba2360730c5445d4869c7195a8c9f958cbf5a58065aa305b04b2df2bec4315d634c5f15be25ac1686d451f480fa07e2d3e46bd9103c61f61f27a29f135186f7692f3ee9134888225df57ca5643ecb8571a471ed999e09f98e7e0bbb975ba7d615ca19761349dfc35fc9502b53d95365044425ac98478c760dba154b37e5a4af907ea21a32a76da9809485c10d6905b03650e457089abba7213d9f0bae2bce5f88c8ce1c5cf189258a2d8cd378b044a5b79b090fbf18d3176437d6673ec40be49cf8610b9b4c825c33d5cf77356d5dc5446dd45631f837254104a49d438354539db92bee82eb85688a99f27a62f24e21c5c14c54f1b33ee2285a68351460661d54a4f43ee6a1f95d9ff5326882dbb08c15f9a36dc49f5e75a4ce4e9d4d58788bdca449a09195dd39d6f30a9f6f3ea4651a5f7579af5f66f865f8035ecb579500aeaea848ec22a1c28509389a28ba0f0c3c8edfd024e39ac7414bd27407c6e806581dd38938dd7635f12e798c10ce5c5fcad04d6fa944c54d3d713f940f880f73df41d837894bee51a33fbf15526a0f8388db54c10045cc33a8768a8d18a41455190515ffc3cdbf7cac1c97d9c7a7b1e926cb40d20e8192135c9cdc2617fc64b6dacebb20ddff767a63bf6c33171ad8c4e03dc3201a3c5c8a3782636abb4783adc5382a7fca5f6f9c1008aeddba797246f3fcaae8f13bee3157925c2dd228491cc6ea5d1fe9b89b45bd58427b2d95f40119597a9c78c1bd4f06b43b484f522637fe308698ee2435bda5e24f8910cffd0d2db0ecf218a9afcfd767e9bb68b3fba63afb2f0d070aa07cb30b1862137fd1bb874d4ac094dcb7325099164bf285b88aaf729510956841e33008652d00a75c74c6b376d9e3dbe327811e203751412cc0ac29e50c95555a4c228e66bf8f166ae2584b1be973ea410d7845ded367d86178b2c6c5680989682a28241cefcce32985fa8af2af9dccc74dfbb7d82f356f7dc6b34041541cee45f1ddacc730006b6168fa007b546869754334780ba319bcca68428258f5c887e6dc1fbc4470d3c0f8b9fea98f321a860791dab0135d0989d9fa0ec11906d97a60785fe366d5de17cd00b7d0f91d38bccf007d94bf8040397990fa7b6416e9fb1ef024d52b71b5ac176ba5d286b890254976c14980930c64239ac6589f6fde9e113969cae24badb7d5c068875021c145ecc8d71b402cc3799d26607b8c30628d3a562783029926a312cd8452df59aff4dee5b17fa6b386793238190f53076ec115ba1a8cbd8f76f5a7471f21a2956cfc4ec04426ed3117251718900093080c15adc617b1df078d76e59e069296e94ba450a975fb9823b6b4ea81a3cd142a8d1402b87c7444e9fe91ce489701b0eb98e13c82631c41d6b80fde40aad337049f57bb1883f38e5d0e283f52449743593b95ba8e53aa4a5c14e81611be13a853ffda03b4ae7189db04bb7200c64f9428886c8dbc153b0a7ed142cda8ce73f1d61c6f3633c0e9c7d79a18fe59cebd9c7e5245865673873fe7b8385adda3d052511700c25a7e70273b0c7eab1697704190aacccf69cbc5f7b574f6d49cabc6a63ad95d8baa2019976ec2b77ab67fda1805f21fdd400a63cc52eb4cdb11fe0bebce7ee5b183c80108b682838660e906016cb11e91ec2104482643719ce2434f2faa9f0c7801cb5d8901b1e9e09e66dbc127e4c347fd602efcd28d450195119ca22c518c8781b1da2999cb1228b03519a7f706703b83d79dab952b2a527a717d0e4541f32d5e11c9dcd0ed22f2368bc6bcabefe064335e62c7f53670a0f11809ff4de2a3bfe3b36f9916403d6e109cb1c3461fc727fe6c86a1be4a8282264007a3b016cd5e6a69dc6c0be932abc8a849c7594092b26baccb8de193658140dc27b264053822a513b7f812a8b1f2588632026cd81f919c0a92cd31c4e579bad8b1771b0b0a452e4d329bd5cc42f78c6ca4e3dff6a95d093ee099d7a83b487532e4f002011110011536d481ff03b880e385c37cf4c75b73cd4894151ba61e4cb98975e00ac357fab60450f6de193204699371f0f08cd4501d0c894c7a4e0f401af30c23b51e196e8162c72275a01386e7f1f652212f723900588eaf12fe4a41c0892115b91b2a5610952d228bd272729c13137a428fb47284fefbf4f6043b83371ecec8c09ca77ce43e69546c1c0ea783aff24bf1334d34df4c934fca2bbf11deb0dc505b2280a473b0709f5019ca1928f0f33c91524fc187aab3241bc873569be04e66b0fbab365f3a299b09d2b7c5d82080edf9c0c776505d130cfabfc2b16c2f850246dbd43f0e946ed2ec37e53f096cd9ff8798c75a6a57b06c179aebc5ff5e7b004e2ddc1df206b734f0a6951732ce63434787678389541e8dba59e05b5035d7da7cb722dae3f483a094c6bdb6bdfa191facda2c23c0aeb9c4edb2b5ddca10cd4a4d7b36f569b47b4c03f5058f1b33f9fe43925e24d24db5b36f50b11191d2c07437d3b33b3b090e1133985e3447c2f5d2344a084c5a58bb719327b4b5c2cbbdb287bb917fcf0dffadddd6a2a25ef846b38c079a07aae010f79a6db1204425dc44d879b4ff0f08e55f61f3dcf42b85a8e2c197a657411f469bcaa2933b973636342fbfb1608b647ba0470dffff1c578b3e46152f0998262f600baac4d0ced86d6391b9a47be5ea74544a68cf5f622f76a5c96eda40c6af53b8556e5d2647ac1cefcce5033037d6629a9fc362940fc6b8bc92019988e97fe74b9971e7713ee533697c6a2d7b3b8167c63eadb2678e53a2affa0e532d6db12648860d8095673515242af20979565b838607e43f2282adefc4f4ab8575d5038c23874c6a38740c35fa105394735aa6ceb4b627d19597544fb43c92468084cf1e29b751e517bdbca200958b44bf50ab4e9a8ac62b1e4933bbad3f5c0bae8c59597afced17bd966b1cfbd2a5751b6a72038598aef499113a77fd744bb3b5579db8f85dac349c7e4c9b62feebedb6ec6e41d16d3c142f4faab178c3e331365f875871a48391371eeb204bdbee911347027b9c7c19514780c1245e97deee83c879393e7f097aae103e80d1c749124ef1364ea3d1208886173ae8ae421ca68adbeafb7e621319fd745e2d68b83e37f8c3121af01e5136c091bfd32d2943e07dd84f8e6286015e1f961455e88bcf4d62c1db83127f6c4d8a0140349cbdf14d74d106c89b21f3a93f81feae3ef2d0c9777b8d387cc91c639d07d74f7d8178d71dc87834890e978322cb6e2fcb6b5e6d2a740770b2f07407a312d7dc4fdac2af046d0a703b4d40a4f62e177d09297551756307a55d6f017c33f08f6a5f8d30ca4868202572d549c0866cd1afafd02786eebe65aeeb90bbe17c5f731fcfac0638480ea8e0d5f822f1d6fb0d5d3834546301435f3435484725f030649eac5276f53cf458fa15092e3a966d5c06fcd84bdefd8caed89b315cfea533b92141686da1546d37d11846655c1fbc4d6e186df37d32ee578a428c62123655ff9c747ee748cf1ef372269ae2220598ff2365e6cdbfc6684ca3d8cb5660c14e0cba1f56660f14111593d881dd9294361e300182c022844a34a0675e8487b90639bb403f8b59b2f762d8d1eeb18ea2823a40cbe7aff3129f2f3f7236c1fe11756d1d2ad9bf8cdadb9b50f7bf71096ed827fc0642e43c0560f191771f8c6327a41edb71b4aeea2778ef2a2da9da39f13f25897ab321a425ee37d4dc9aa7df57dabb86eb4217a70abddd8f663c76d39e390274b55af1c689f35d436a9b24403b0ab6bb9c943f03ef5a9dd930226005bb5b4c5f7052c89160aef8dd92c4fec74bd0e55a7a478b01359b44a6354866f97cf2ce1b202c56248ec3ae083f555b95abc96dc632fc9f29ddb946c82fc51d993021754a786210fb90d2998fef40ec2aa2c6bc5dba44d551873fa28b23e245047000cfde816969b4014b60b965f80a63a9cf1fcc721e294bfe6f46b2037a7882fb1733a2737f76841dc51253f6232571206156686a0fc72dcc612e92c57395e09526cb56a9f927224db55eaecf630dfb0baf0cc4baf88f580d0c288cb36bc9cbe425525cce427d2666b4b06cf4490d7740c88fa30bf38a3f6d9e22c1e3741ec9abc50a86f24aaf411c122e8f7fda4419e57615514f780af63493649890ab401b6f5288c0e512e6b566f7fffb49329f93f54ac5aceda11c10fa80d36bb3dc8484331d7f942ba2ce79c09b4a2f37f129e258f0129dc727659f3337a3830162473291b926a5fa875fa06d3cee7c1177eb0ec995c0219cee584cf0e8ccaf991d7a8297ffcdb9360622d3de35183dbd7fe1eb3729221047ef0abd21381c79ffcb542920f73e373a669b5b3a55fa893e668daed7fbb4a7205bc746a3103838eed8452a0a1f85bb4f38ce8d951805075d1bd3572fa2e0eaad0f093b346249372fadf6a2312adf0e477b1a14a342ad90eb37f282d11de0939c5a9c301dc98d825aa6d8affa7b095b8abae69dde9ddd95f8a472303e19e33460b2d6891cb862254ff0e4b3f10d731c9333b40f562525dbb81c0e68bf8e2efa7493fd0d2d56212ca5236c90d31bd4405f0e4641ff3255b0055abbdb5feea36bd6424ad9379d2ab16cadc5c81b5a65c7f8b9edee93907a0e1f25a3823c4874c33a398a4ffa0b161f9f717ca66a15f43173657fb8fae8c55e7397e4c5537d5a4701c108576e22db4e8623785edd0545423d9e139981d0415cce5b6100f28dbd7033d9907815811e294e5cffbdd04c452c09305758193c9f2778da03e8f1c67d3fff248955cd37a428e9a31f4458fe80625416c30a86941caf303911a07150f7522c70c61983e9f4b00b63b9ee9905bf541313deb9f52f1c83a67f17f91150e4736a52e7b2fe0d2fa3088e850856096f8d2d87d4243e7b6632895cecf062fdd22d14238bc11c7fb2d84682e8f28d12ebfc3cf2ba63c2dec21676b29aad5962bedf33ea4db3df22f33824242367a1697496b6868367eb652caa8bb0c6aa3f31abb43f02af2182f7290ab95f4113d4c40859d520eef146fa0660513e0471f130c2e2d38f757a38ce53793bf71c18e2d31285eacf3bc8f2b9521340b006d04eefa30c69a23e46d0245343be158ef2b91933b8f8937afdb504fd2fa03a6ac853916ee21a617d4740e5ec3945f25d9be8be80b34621f7688be67561a7ca8e576e7b0fc8525ed4e543a30d1b7b85633198", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x1, 0x2, 0x0, "1a"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1149.858087][T28029] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1149.867305][T28029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.875179][T28029] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1149.887153][T28029] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1149.909635][T28029] usb 1-1: SerialNumber: 䀁 [ 1150.089070][T12517] sony 0003:054C:0374.01AF: item fetching failed at offset 5/7 [ 1150.096563][T12517] sony 0003:054C:0374.01AF: parse failed [ 1150.102026][T12517] sony: probe of 0003:054C:0374.01AF failed with error -22 [ 1150.108016][T15517] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1150.228118][T28029] usb 1-1: 0:2 : does not exist [ 1150.237316][T28029] usb 1-1: USB disconnect, device number 66 [ 1150.303632][T12517] usb 3-1: USB disconnect, device number 65 [ 1150.348009][T15517] usb 2-1: Using ep0 maxpacket: 16 [ 1150.468100][T15517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.478831][T15517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.491654][T15517] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.500531][T15517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.509325][T15517] usb 2-1: config 0 descriptor?? executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1150.722112][T28250] device syzkaller0 entered promiscuous mode executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 4: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "63da3564"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90}, 0x0, 0x0, 0x0, 0x0}) [ 1150.840791][T28254] device syzkaller0 entered promiscuous mode executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1150.958224][T12517] usb 1-1: new high-speed USB device number 67 using dummy_hcd executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1151.007885][T28263] device syzkaller0 entered promiscuous mode executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1151.060076][T28266] device syzkaller0 entered promiscuous mode [ 1151.088163][T15519] usb 4-1: USB disconnect, device number 68 [ 1151.098126][T28029] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1151.318083][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.329122][T12517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.338728][T28029] usb 5-1: Using ep0 maxpacket: 32 [ 1151.343697][T12517] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1151.352549][T12517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.361434][T12517] usb 1-1: config 0 descriptor?? [ 1151.379025][T28235] UDC core: couldn't find an available UDC or it's busy: -16 [ 1151.386247][T28235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1151.398122][ T2358] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1151.458078][T28029] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1151.466656][T28029] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.476565][T28029] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.638068][ T2358] usb 4-1: Using ep0 maxpacket: 16 [ 1151.643223][T28029] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.652154][T28029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.660067][T28029] usb 5-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1151.671844][T28029] usb 5-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1151.694481][T28029] usb 5-1: SerialNumber: 䀁 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1151.768936][ T2358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.788019][ T2358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.807311][ T2358] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1151.819707][T28272] device syzkaller0 entered promiscuous mode [ 1151.825545][ T2358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.833677][T12517] hid (null): bogus close delimiter [ 1151.848049][ T2358] usb 4-1: config 0 descriptor?? executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) [ 1151.958104][T15517] usbhid 2-1:0.0: can't add hid device: -71 [ 1151.963929][T15517] usbhid: probe of 2-1:0.0 failed with error -71 [ 1151.971359][T15517] usb 2-1: USB disconnect, device number 52 [ 1152.018429][T28029] usb 5-1: 0:2 : does not exist [ 1152.024723][T28029] usb 5-1: USB disconnect, device number 57 [ 1152.038183][T12517] usb 1-1: language id specifier not provided by device, defaulting to English [ 1152.168067][ T2357] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1152.329059][ T2358] sony 0003:054C:0374.01B1: item fetching failed at offset 5/7 [ 1152.336731][ T2358] sony 0003:054C:0374.01B1: parse failed [ 1152.342264][ T2358] sony: probe of 0003:054C:0374.01B1 failed with error -22 [ 1152.348027][T15517] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1152.408013][ T2357] usb 3-1: Using ep0 maxpacket: 32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1152.478086][T12517] uclogic 0003:256C:006D.01B0: failed retrieving string descriptor #200: -71 [ 1152.481210][T28281] device syzkaller0 entered promiscuous mode [ 1152.486872][T12517] uclogic 0003:256C:006D.01B0: failed retrieving pen parameters: -71 [ 1152.501022][T12517] uclogic 0003:256C:006D.01B0: failed probing pen v2 parameters: -71 [ 1152.509171][T12517] uclogic 0003:256C:006D.01B0: failed probing parameters: -71 [ 1152.516554][T12517] uclogic: probe of 0003:256C:006D.01B0 failed with error -71 [ 1152.525335][T12517] usb 1-1: USB disconnect, device number 67 [ 1152.532361][T15516] usb 4-1: USB disconnect, device number 69 [ 1152.538066][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1152.538101][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1152.538138][ T2357] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1152.574991][ T2357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.583596][ T2357] usb 3-1: config 0 descriptor?? [ 1152.598680][T15517] usb 2-1: Using ep0 maxpacket: 16 [ 1152.608073][T28274] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1152.628938][ T2357] hub 3-1:0.0: USB hub found [ 1152.718437][T15517] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.728502][T15517] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.739149][T15517] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.868083][ T2358] usb 5-1: new high-speed USB device number 58 using dummy_hcd executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1152.928069][ T2357] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1152.938185][T15517] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.947120][T15517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.955102][T15517] usb 2-1: Product: syz [ 1152.959100][T15517] usb 2-1: Manufacturer: syz [ 1152.963440][T15517] usb 2-1: SerialNumber: syz executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x2, "b8ef"}, @local=@item_012={0x1, 0x2, 0x0, "1a"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1153.008911][T28287] device syzkaller0 entered promiscuous mode executing program 0: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1153.108129][ T2358] usb 5-1: Using ep0 maxpacket: 16 [ 1153.228190][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.238958][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.248610][ T2358] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1153.257481][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.266509][ T2358] usb 5-1: config 0 descriptor?? [ 1153.308132][ T2357] usbhid 3-1:0.0: can't add hid device: -71 [ 1153.314015][ T2357] usbhid: probe of 3-1:0.0 failed with error -71 [ 1153.328030][T12517] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1153.348658][ T2357] usb 3-1: USB disconnect, device number 66 [ 1153.358067][T15516] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1153.568057][T12517] usb 4-1: Using ep0 maxpacket: 16 [ 1153.628014][T15516] usb 1-1: Using ep0 maxpacket: 32 [ 1153.688090][T12517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.698871][T12517] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1153.711430][T12517] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1153.720295][T12517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.729027][T12517] usb 4-1: config 0 descriptor?? executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1153.739076][ T2358] sony 0003:054C:0374.01B2: item fetching failed at offset 5/7 [ 1153.746661][ T2358] sony 0003:054C:0374.01B2: parse failed [ 1153.752135][ T2358] sony: probe of 0003:054C:0374.01B2 failed with error -22 [ 1153.768473][T15516] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.778501][T15516] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1153.940999][T15518] usb 5-1: USB disconnect, device number 58 [ 1153.958061][T15516] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.966952][T15516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.974807][T15516] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1153.986809][T15516] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1154.009267][T15516] usb 1-1: SerialNumber: 䀁 [ 1154.078095][T15517] cdc_ncm 2-1:1.0: bind() failure [ 1154.083935][T15517] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1154.090581][T15517] cdc_ncm 2-1:1.1: bind() failure [ 1154.096546][T15517] usb 2-1: USB disconnect, device number 53 [ 1154.128025][ T2358] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1154.338165][T15516] usb 1-1: 0:2 : does not exist [ 1154.344933][T15516] usb 1-1: USB disconnect, device number 68 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1154.488099][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.499216][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.508834][ T2358] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1154.517628][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.526716][ T2358] usb 3-1: config 0 descriptor?? executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1154.594943][T28305] device syzkaller0 entered promiscuous mode [ 1154.608718][T28290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1154.615937][T28290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1154.651868][T28307] device syzkaller0 entered promiscuous mode executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1154.748038][T13474] usb 5-1: new high-speed USB device number 59 using dummy_hcd executing program 0: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1154.968053][T28029] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1154.988104][T13474] usb 5-1: Using ep0 maxpacket: 16 [ 1155.008296][ T2358] hid (null): bogus close delimiter executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1155.098037][T15517] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1155.108255][T13474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.119124][T13474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.132572][T13474] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1155.142266][T13474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.152265][T13474] usb 5-1: config 0 descriptor?? [ 1155.188114][T12517] usbhid 4-1:0.0: can't add hid device: -71 [ 1155.194903][T12517] usbhid: probe of 4-1:0.0 failed with error -71 [ 1155.202203][T12517] usb 4-1: USB disconnect, device number 70 [ 1155.208046][T28029] usb 2-1: Using ep0 maxpacket: 32 [ 1155.228111][ T2358] usb 3-1: language id specifier not provided by device, defaulting to English [ 1155.328178][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1155.339204][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1155.350175][T28029] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1155.358019][T15517] usb 1-1: Using ep0 maxpacket: 8 [ 1155.359101][T28029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.372688][T28029] usb 2-1: config 0 descriptor?? [ 1155.388133][T28309] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1155.408877][T28029] hub 2-1:0.0: USB hub found [ 1155.488068][T15517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.558020][T12517] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1155.629037][T13474] sony 0003:054C:0374.01B4: item fetching failed at offset 5/7 [ 1155.636535][T13474] sony 0003:054C:0374.01B4: parse failed [ 1155.642026][T13474] sony: probe of 0003:054C:0374.01B4 failed with error -22 [ 1155.668093][ T2358] uclogic 0003:256C:006D.01B3: failed retrieving string descriptor #200: -71 [ 1155.676743][ T2358] uclogic 0003:256C:006D.01B3: failed retrieving pen parameters: -71 [ 1155.684871][ T2358] uclogic 0003:256C:006D.01B3: failed probing pen v2 parameters: -71 [ 1155.688105][T15517] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1155.692853][ T2358] uclogic 0003:256C:006D.01B3: failed probing parameters: -71 [ 1155.702040][T15517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.709474][ T2358] uclogic: probe of 0003:256C:006D.01B3 failed with error -71 [ 1155.717414][T15517] usb 1-1: Product: syz [ 1155.724401][T28029] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1155.728595][T15517] usb 1-1: Manufacturer: syz [ 1155.738283][ T2358] usb 3-1: USB disconnect, device number 67 [ 1155.745563][T15517] usb 1-1: SerialNumber: syz [ 1155.753684][T15517] usb 1-1: config 0 descriptor?? [ 1155.798104][T12517] usb 4-1: Using ep0 maxpacket: 16 [ 1155.829860][T13474] usb 5-1: USB disconnect, device number 59 [ 1155.919070][T12517] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.929014][T12517] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.939828][T12517] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.038096][T15517] usb 1-1: Found UVC 0.00 device syz (8086:0b03) [ 1156.044350][T15517] usb 1-1: No valid video chain found. [ 1156.051413][T15517] usb 1-1: USB disconnect, device number 69 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1156.108087][T28029] usbhid 2-1:0.0: can't add hid device: -71 [ 1156.113912][T12517] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.122774][T28029] usbhid: probe of 2-1:0.0 failed with error -71 [ 1156.128927][T12517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.137757][T12517] usb 4-1: Product: syz [ 1156.141808][T12517] usb 4-1: Manufacturer: syz [ 1156.146213][T12517] usb 4-1: SerialNumber: syz executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1156.158481][T28029] usb 2-1: USB disconnect, device number 54 [ 1156.189917][T28321] device syzkaller0 entered promiscuous mode executing program 2: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1156.257671][T28323] device syzkaller0 entered promiscuous mode executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1156.568036][ T2358] usb 3-1: new high-speed USB device number 68 using dummy_hcd executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1156.617041][T28335] device syzkaller0 entered promiscuous mode executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1156.668044][T15517] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1156.678972][T28337] device syzkaller0 entered promiscuous mode [ 1156.798244][T15516] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1156.808180][ T2358] usb 3-1: Using ep0 maxpacket: 32 [ 1156.928222][ T2358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.938012][T15517] usb 5-1: Using ep0 maxpacket: 16 [ 1156.938283][ T2358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1156.998040][T28029] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1157.068155][T12517] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1157.068158][T15517] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.068189][T15517] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.074255][T12517] cdc_ncm 4-1:1.0: bind() failure [ 1157.085250][T15517] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.098746][T12517] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1157.102809][T15517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.111266][ T2358] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1157.119322][T15517] usb 5-1: config 0 descriptor?? [ 1157.128937][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.146996][T12517] cdc_ncm 4-1:1.1: bind() failure [ 1157.155900][T12517] usb 4-1: USB disconnect, device number 71 [ 1157.162858][ T2358] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1157.175292][ T2358] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1157.197905][ T2358] usb 3-1: SerialNumber: 䀁 [ 1157.198138][T15516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.213366][T15516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.222942][T15516] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1157.231801][T15516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.240498][T15516] usb 1-1: config 0 descriptor?? [ 1157.248014][T28029] usb 2-1: Using ep0 maxpacket: 16 [ 1157.368287][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.379122][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.388764][T28029] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1157.397588][T28029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.406147][T28029] usb 2-1: config 0 descriptor?? executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f7525"], 0x0, 0x0, 0x0, 0x0}) [ 1157.518108][ T2358] usb 3-1: 0:2 : does not exist [ 1157.527044][ T2358] usb 3-1: USB disconnect, device number 68 [ 1157.718236][T15516] hid (null): bogus close delimiter [ 1157.828054][T12517] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1157.889003][T28029] sony 0003:054C:0374.01B6: item fetching failed at offset 5/7 [ 1157.896507][T28029] sony 0003:054C:0374.01B6: parse failed [ 1157.902235][T28029] sony: probe of 0003:054C:0374.01B6 failed with error -22 executing program 2: r0 = syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f40102030109023300010000000009040000000e0100000924060001a3e1f74c05240000000d240f01004000000200ffff"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1157.938189][T15516] usb 1-1: language id specifier not provided by device, defaulting to English [ 1158.008917][T28329] UDC core: couldn't find an available UDC or it's busy: -16 [ 1158.016266][T28329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1158.068028][T12517] usb 4-1: Using ep0 maxpacket: 32 [ 1158.092018][T13059] usb 2-1: USB disconnect, device number 55 [ 1158.188090][T12517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.198921][T12517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.208524][T12517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1158.217343][T12517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.225190][T28029] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1158.233562][T12517] usb 4-1: config 0 descriptor?? [ 1158.278670][T12517] hub 4-1:0.0: USB hub found [ 1158.378057][T15516] uclogic 0003:256C:006D.01B5: failed retrieving string descriptor #200: -71 [ 1158.386760][T15516] uclogic 0003:256C:006D.01B5: failed retrieving pen parameters: -71 [ 1158.394681][T15516] uclogic 0003:256C:006D.01B5: failed probing pen v2 parameters: -71 [ 1158.402602][T15516] uclogic 0003:256C:006D.01B5: failed probing parameters: -71 [ 1158.409848][T15516] uclogic: probe of 0003:256C:006D.01B5 failed with error -71 [ 1158.418269][T15516] usb 1-1: USB disconnect, device number 70 [ 1158.468088][T28029] usb 3-1: Using ep0 maxpacket: 8 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1158.498075][T12517] hub 4-1:0.0: 1 port detected executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1158.588086][T15517] usbhid 5-1:0.0: can't add hid device: -71 [ 1158.588183][T28029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.593927][T15517] usbhid: probe of 5-1:0.0 failed with error -71 [ 1158.614058][T15517] usb 5-1: USB disconnect, device number 60 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 1: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x29}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) [ 1158.683908][T28353] device syzkaller0 entered promiscuous mode [ 1158.758222][T28029] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1158.767489][T28029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.775416][T28029] usb 3-1: Product: syz [ 1158.779488][T28029] usb 3-1: Manufacturer: syz [ 1158.783860][T28029] usb 3-1: SerialNumber: syz [ 1158.790897][T28029] usb 3-1: config 0 descriptor?? executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1159.008013][T15516] usb 2-1: new high-speed USB device number 56 using dummy_hcd executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1159.068075][T28029] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 1159.074306][T28029] usb 3-1: No valid video chain found. [ 1159.082522][T28029] usb 3-1: USB disconnect, device number 69 [ 1159.138071][T15517] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1159.268050][T15516] usb 2-1: Using ep0 maxpacket: 32 [ 1159.368140][T15520] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1159.408116][T15516] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.418051][T15517] usb 1-1: Using ep0 maxpacket: 16 [ 1159.423096][T15516] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.432379][T15518] usb 4-1: USB disconnect, device number 72 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1159.548107][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.562760][T15517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1159.575842][T15517] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1159.584838][T15517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1159.596483][T15517] usb 1-1: config 0 descriptor?? [ 1159.608096][T15516] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.616949][T15516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.624885][T15520] usb 5-1: Using ep0 maxpacket: 16 [ 1159.629994][T15516] usb 2-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1159.642164][T15516] usb 2-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1159.667582][T15516] usb 2-1: SerialNumber: 䀁 [ 1159.674770][T28368] device syzkaller0 entered promiscuous mode [ 1159.768105][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.779394][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.789610][T15520] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1159.798518][T15520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.807201][T15520] usb 5-1: config 0 descriptor?? executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 1159.977498][T28373] device syzkaller0 entered promiscuous mode [ 1159.988011][T28029] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1159.988371][T15516] usb 2-1: 0:2 : does not exist [ 1160.011448][T15516] usb 2-1: USB disconnect, device number 56 [ 1160.228020][T28029] usb 3-1: Using ep0 maxpacket: 32 [ 1160.288854][T15520] sony 0003:054C:0374.01B7: item fetching failed at offset 5/7 [ 1160.296395][T15520] sony 0003:054C:0374.01B7: parse failed [ 1160.302084][T15520] sony: probe of 0003:054C:0374.01B7 failed with error -22 [ 1160.348168][T28029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1160.359188][T28029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1160.370274][T28029] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1160.379080][T28029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.388084][T28029] usb 3-1: config 0 descriptor?? executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f"], 0x0, 0x0, 0x0, 0x0}) [ 1160.408081][T28371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1160.428645][T28029] hub 3-1:0.0: USB hub found [ 1160.459095][T28359] UDC core: couldn't find an available UDC or it's busy: -16 [ 1160.466308][T28359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.489866][T15516] usb 5-1: USB disconnect, device number 61 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1160.645142][T28384] device syzkaller0 entered promiscuous mode executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1160.708169][T15520] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1160.728046][T28029] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1160.958310][T15520] usb 2-1: Using ep0 maxpacket: 32 executing program 0: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 1160.998038][ T2358] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1161.038606][T15517] usbhid 1-1:0.0: can't add hid device: -71 [ 1161.044368][T15517] usbhid: probe of 1-1:0.0 failed with error -71 [ 1161.051834][T15517] usb 1-1: USB disconnect, device number 71 [ 1161.088155][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.098900][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.108094][T28029] usbhid 3-1:0.0: can't add hid device: -32 [ 1161.108564][T15520] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1161.114754][T28029] usbhid: probe of 3-1:0.0 failed with error -32 [ 1161.123006][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.128558][T15520] usb 2-1: config 0 descriptor?? [ 1161.178740][T15520] hub 2-1:0.0: USB hub found [ 1161.248019][ T2358] usb 4-1: Using ep0 maxpacket: 32 [ 1161.368118][ T2358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1161.379154][ T2358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1161.388097][T15520] hub 2-1:0.0: 1 port detected [ 1161.390102][ T2358] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1161.403529][ T2358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.412523][ T2358] usb 4-1: config 0 descriptor?? [ 1161.418056][T15517] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1161.428092][T28386] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1161.449016][ T2358] hub 4-1:0.0: USB hub found executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1161.556807][T28398] device syzkaller0 entered promiscuous mode executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1161.676359][T28402] device syzkaller0 entered promiscuous mode [ 1161.688145][T15517] usb 1-1: Using ep0 maxpacket: 32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1161.748161][ T2358] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1161.818070][T15517] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1161.826937][T15517] usb 1-1: config 1 has no interface number 1 [ 1161.832876][T15517] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1162.008162][T15517] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1162.017094][T15517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.024908][T15517] usb 1-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 [ 1162.036853][T15517] usb 1-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1162.059383][T15517] usb 1-1: SerialNumber: 䀁 [ 1162.088044][T28029] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1162.138096][ T2358] usbhid 4-1:0.0: can't add hid device: -71 [ 1162.144031][ T2358] usbhid: probe of 4-1:0.0 failed with error -71 [ 1162.178460][ T2358] usb 4-1: USB disconnect, device number 73 [ 1162.288073][T15520] hub 2-1:0.0: activate --> -90 [ 1162.328035][T28029] usb 5-1: Using ep0 maxpacket: 16 [ 1162.368142][T15517] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1162.408392][T15517] usb 1-1: USB disconnect, device number 72 [ 1162.448177][T28029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.459198][T28029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1162.472099][T28029] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1162.481019][T28029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.490136][T28029] usb 5-1: config 0 descriptor?? executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[], 0x0) [ 1162.818123][T15520] usb 2-1: USB disconnect, device number 57 [ 1162.928098][T15517] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1163.018250][ T2358] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 1163.058156][ T2358] usb 3-1: device reset changed ep0 maxpacket size! [ 1163.064882][ T2358] usb 3-1: USB disconnect, device number 70 [ 1163.088039][T15516] usb 1-1: new high-speed USB device number 73 using dummy_hcd executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1163.178022][T15517] usb 4-1: Using ep0 maxpacket: 16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1163.308118][T15517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.318916][T15517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.328849][T15517] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1163.337827][T15517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.350479][T15517] usb 4-1: config 0 descriptor?? [ 1163.368288][T15516] usb 1-1: device descriptor read/64, error -71 [ 1163.368694][T28404] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.382125][T28404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.392356][T28420] device syzkaller0 entered promiscuous mode executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x0, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1163.418031][ T2358] usb 3-1: new high-speed USB device number 71 using dummy_hcd executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f"], 0x0, 0x0, 0x0, 0x0}) [ 1163.658030][ T2358] usb 3-1: Using ep0 maxpacket: 16 [ 1163.768011][T15516] usb 1-1: device descriptor read/64, error -71 [ 1163.774116][T28369] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1163.778204][ T2358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.791439][ T2358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.802123][ T2358] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1163.838990][T15517] sony 0003:054C:0374.01B8: item fetching failed at offset 5/7 [ 1163.846523][T15517] sony 0003:054C:0374.01B8: parse failed [ 1163.852044][T15517] sony: probe of 0003:054C:0374.01B8 failed with error -22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, 0x0, &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1163.948149][T28029] usbhid 5-1:0.0: can't add hid device: -71 [ 1163.953998][T28029] usbhid: probe of 5-1:0.0 failed with error -71 [ 1163.961418][T28029] usb 5-1: USB disconnect, device number 62 [ 1163.968087][ T2358] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.977523][ T2358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.985794][ T2358] usb 3-1: Product: syz [ 1163.989832][ T2358] usb 3-1: Manufacturer: syz executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f7525"], 0x0, 0x0, 0x0, 0x0}) [ 1163.994262][ T2358] usb 3-1: SerialNumber: syz [ 1164.028037][T28369] usb 2-1: Using ep0 maxpacket: 32 [ 1164.038200][T15516] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1164.047524][T15517] usb 4-1: USB disconnect, device number 74 [ 1164.148213][T28369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.159052][T28369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.168795][T28369] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1164.177648][T28369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.186499][T28369] usb 2-1: config 0 descriptor?? [ 1164.228683][T28369] hub 2-1:0.0: USB hub found [ 1164.318025][T15516] usb 1-1: device descriptor read/64, error -71 [ 1164.418033][T28029] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1164.448139][T28369] hub 2-1:0.0: 1 port detected executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x0, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x0, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1164.658026][T28029] usb 5-1: Using ep0 maxpacket: 32 [ 1164.758110][T15516] usb 1-1: device descriptor read/64, error -71 [ 1164.778141][T28029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.788907][T28029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.798671][T28029] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1164.807549][T28029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.816396][T28029] usb 5-1: config 0 descriptor?? [ 1164.858672][T28029] hub 5-1:0.0: USB hub found [ 1164.868024][T15520] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1164.878136][T15516] usb usb1-port1: attempt power cycle [ 1164.918123][ T2358] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1164.923962][ T2358] cdc_ncm 3-1:1.0: bind() failure [ 1164.929832][ T2358] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1164.936597][ T2358] cdc_ncm 3-1:1.1: bind() failure [ 1164.942871][ T2358] usb 3-1: USB disconnect, device number 71 [ 1165.078065][T28029] hub 5-1:0.0: 1 port detected [ 1165.118222][T15520] usb 4-1: Using ep0 maxpacket: 16 [ 1165.238097][T15520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.248858][T15520] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1165.261683][T15520] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1165.270557][T15520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.280105][T15520] usb 4-1: config 0 descriptor?? [ 1165.288036][T15516] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1165.328063][T28369] hub 2-1:0.0: activate --> -90 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1165.459613][T15516] usb 1-1: device descriptor read/8, error -71 [ 1165.738092][T15516] usb 1-1: device descriptor read/8, error -71 [ 1165.772481][T15520] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.01B9/input/input127 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1165.778023][ T2358] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1165.785116][T15520] microsoft 0003:045E:07DA.01B9: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1165.868184][T28369] usb 2-1: USB disconnect, device number 58 [ 1166.008815][T28369] usb 5-1: USB disconnect, device number 63 [ 1166.158219][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.169000][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.170838][T28441] UDC core: couldn't find an available UDC or it's busy: -16 [ 1166.178993][ T2358] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1166.185867][T28441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1166.194971][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.210660][ T2358] usb 3-1: config 0 descriptor?? [ 1166.228026][T15516] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1166.276201][T28453] device syzkaller0 entered promiscuous mode executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1166.318132][T15516] usb 1-1: Using ep0 maxpacket: 16 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1166.361352][T28455] device syzkaller0 entered promiscuous mode executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1166.468117][T15516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.478997][T15516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.488497][T15516] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1166.497294][T15516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.505854][T15516] usb 1-1: config 0 descriptor?? executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x0, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1166.688256][ T2358] hid (null): bogus close delimiter [ 1166.698069][T15519] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1166.709624][T15517] usb 4-1: USB disconnect, device number 75 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1166.742527][T28467] device syzkaller0 entered promiscuous mode executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f7525"], 0x0, 0x0, 0x0, 0x0}) [ 1166.836404][T28469] device syzkaller0 entered promiscuous mode [ 1166.908084][ T2358] usb 3-1: language id specifier not provided by device, defaulting to English [ 1166.918172][T15520] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1166.948038][T15519] usb 2-1: Using ep0 maxpacket: 16 [ 1166.979361][T15516] sony 0003:054C:0374.01BB: item fetching failed at offset 5/7 [ 1166.986911][T15516] sony 0003:054C:0374.01BB: parse failed [ 1166.992418][T15516] sony: probe of 0003:054C:0374.01BB failed with error -22 [ 1167.088062][T15519] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.098055][T15519] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.108793][T15519] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.168075][T15520] usb 5-1: Using ep0 maxpacket: 16 [ 1167.179540][T28029] usb 1-1: USB disconnect, device number 76 [ 1167.278194][T15517] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1167.308148][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.318926][T15519] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1167.327688][T15519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.335675][T15520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.345253][T15519] usb 2-1: Product: syz [ 1167.348043][ T2358] uclogic 0003:256C:006D.01BA: failed retrieving string descriptor #200: -71 [ 1167.349236][T15519] usb 2-1: Manufacturer: syz [ 1167.357822][ T2358] uclogic 0003:256C:006D.01BA: failed retrieving pen parameters: -71 [ 1167.362324][T15520] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1167.370324][ T2358] uclogic 0003:256C:006D.01BA: failed probing pen v2 parameters: -71 [ 1167.379376][T15519] usb 2-1: SerialNumber: syz [ 1167.387430][ T2358] uclogic 0003:256C:006D.01BA: failed probing parameters: -71 [ 1167.391578][T15520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.398855][ T2358] uclogic: probe of 0003:256C:006D.01BA failed with error -71 [ 1167.407550][T15520] usb 5-1: config 0 descriptor?? [ 1167.422578][ T2358] usb 3-1: USB disconnect, device number 72 [ 1167.538035][T15517] usb 4-1: Using ep0 maxpacket: 32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1167.658636][T15517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.669877][T15517] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.680495][T15517] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1167.689403][T15517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1167.704629][T15517] usb 4-1: config 0 descriptor?? [ 1167.750352][T15517] hub 4-1:0.0: USB hub found executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x0, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1167.858973][T28482] device syzkaller0 entered promiscuous mode executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1167.909258][T15520] sony 0003:054C:0374.01BC: item fetching failed at offset 5/7 [ 1167.916830][T15520] sony 0003:054C:0374.01BC: parse failed [ 1167.922361][T15520] sony: probe of 0003:054C:0374.01BC failed with error -22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1167.966485][T28484] device syzkaller0 entered promiscuous mode [ 1167.978118][T15517] hub 4-1:0.0: 1 port detected [ 1168.088070][T28029] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1168.115509][T15520] usb 5-1: USB disconnect, device number 64 [ 1168.278038][ T2358] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1168.328034][T28029] usb 1-1: Using ep0 maxpacket: 16 [ 1168.348074][T15519] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1168.353971][T15519] cdc_ncm 2-1:1.0: bind() failure [ 1168.360093][T15519] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1168.366714][T15519] cdc_ncm 2-1:1.1: bind() failure [ 1168.373559][T15519] usb 2-1: USB disconnect, device number 59 [ 1168.448146][T28029] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.459213][T28029] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1168.472208][T28029] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1168.481117][T28029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.491390][T28029] usb 1-1: config 0 descriptor?? [ 1168.518044][ T2358] usb 3-1: Using ep0 maxpacket: 16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1168.638095][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.648985][ T2358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.658735][ T2358] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1168.667612][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.679832][ T2358] usb 3-1: config 0 descriptor?? executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f7525"], 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1168.855271][T28499] device syzkaller0 entered promiscuous mode [ 1168.918675][T15519] usb 4-1: USB disconnect, device number 76 [ 1168.972470][T28029] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.01BD/input/input128 [ 1168.984912][T28029] microsoft 0003:045E:07DA.01BD: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1169.048052][T28369] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1169.159143][ T2358] sony 0003:054C:0374.01BE: item fetching failed at offset 5/7 [ 1169.166655][ T2358] sony 0003:054C:0374.01BE: parse failed [ 1169.172293][ T2358] sony: probe of 0003:054C:0374.01BE failed with error -22 [ 1169.208043][T15517] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1169.308062][T28369] usb 5-1: Using ep0 maxpacket: 32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1169.371146][T28480] UDC core: couldn't find an available UDC or it's busy: -16 [ 1169.379502][ T2358] usb 3-1: USB disconnect, device number 73 [ 1169.383197][T28480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1169.428075][T28369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.442907][T28369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.452912][T28369] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1169.461899][T28369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.469949][T15517] usb 2-1: Using ep0 maxpacket: 16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1169.476892][T28369] usb 5-1: config 0 descriptor?? executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1169.523763][T28369] hub 5-1:0.0: USB hub found executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1169.598458][T15517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.609400][T15517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.618942][T15517] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1169.627887][T15517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.636815][T15517] usb 2-1: config 0 descriptor?? [ 1169.738078][T28369] hub 5-1:0.0: 1 port detected executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1169.858048][ T2358] usb 4-1: new high-speed USB device number 77 using dummy_hcd executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1169.898400][T15519] usb 1-1: USB disconnect, device number 77 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 2: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x0, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1170.098037][ T2358] usb 4-1: Using ep0 maxpacket: 16 [ 1170.129141][T15517] sony 0003:054C:0374.01BF: item fetching failed at offset 5/7 [ 1170.136747][T15517] sony 0003:054C:0374.01BF: parse failed [ 1170.142330][T15517] sony: probe of 0003:054C:0374.01BF failed with error -22 [ 1170.218097][ T2358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.228231][ T2358] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.239355][ T2358] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.318023][T13059] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1170.331108][T15517] usb 2-1: USB disconnect, device number 60 [ 1170.408099][ T2358] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1170.417106][ T2358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.425121][ T2358] usb 4-1: Product: syz [ 1170.429069][ T2358] usb 4-1: Manufacturer: syz [ 1170.433477][ T2358] usb 4-1: SerialNumber: syz [ 1170.438026][T15519] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1170.559086][T13059] usb 3-1: Using ep0 maxpacket: 16 [ 1170.618056][T28369] hub 5-1:0.0: activate --> -90 [ 1170.678114][T13059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.688883][T13059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1170.698018][T15519] usb 1-1: Using ep0 maxpacket: 16 [ 1170.702620][T13059] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1170.715365][T13059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.724059][T13059] usb 3-1: config 0 descriptor?? executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1170.818087][T15519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.818842][T12517] usb 5-1: USB disconnect, device number 65 [ 1170.828878][T15519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.845031][T28369] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1170.851789][T15519] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x0, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1170.861791][T15519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.872927][T15519] usb 1-1: config 0 descriptor?? executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f75"], 0x0, 0x0, 0x0, 0x0}) [ 1171.213076][T13059] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.01C0/input/input129 [ 1171.225881][T13059] microsoft 0003:045E:07DA.01C0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1171.268021][T28029] usb 2-1: new high-speed USB device number 61 using dummy_hcd executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 1171.358126][ T2358] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1171.364166][ T2358] cdc_ncm 4-1:1.0: bind() failure [ 1171.369668][T15519] sony 0003:054C:0374.01C1: item fetching failed at offset 5/7 [ 1171.371394][ T2358] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1171.377233][T15519] sony 0003:054C:0374.01C1: parse failed [ 1171.384082][ T2358] cdc_ncm 4-1:1.1: bind() failure [ 1171.390971][T15519] sony: probe of 0003:054C:0374.01C1 failed with error -22 [ 1171.404767][ T2358] usb 4-1: USB disconnect, device number 77 [ 1171.508042][T28029] usb 2-1: Using ep0 maxpacket: 32 [ 1171.572096][T15519] usb 1-1: USB disconnect, device number 78 [ 1171.608129][T13059] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1171.626755][T28528] UDC core: couldn't find an available UDC or it's busy: -16 [ 1171.634193][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.644895][T28528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1171.652433][T28029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.662686][T28029] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1171.671582][T28029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.680473][T28029] usb 2-1: config 0 descriptor?? [ 1171.718730][T28029] hub 2-1:0.0: USB hub found executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x0, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1171.848010][T13059] usb 5-1: Using ep0 maxpacket: 32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1171.938169][T28029] hub 2-1:0.0: 1 port detected executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0}, 0x0) [ 1171.968145][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1171.979444][T13059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1171.990759][T13059] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1171.999805][T13059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.012955][T13059] usb 5-1: config 0 descriptor?? executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1172.038103][T28542] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1172.058780][T13059] hub 5-1:0.0: USB hub found executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) [ 1172.099573][T28557] device syzkaller0 entered promiscuous mode executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x0, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1172.167727][T12517] usb 3-1: USB disconnect, device number 74 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1172.294136][T28571] device syzkaller0 entered promiscuous mode [ 1172.308150][T15520] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1172.358071][T13059] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1172.608059][ T2358] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1172.638055][T12517] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1172.688093][T15520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.698820][T15520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.708373][T15520] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1172.717190][T15520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.725819][T15520] usb 4-1: config 0 descriptor?? [ 1172.738171][T13059] usbhid 5-1:0.0: can't add hid device: -32 [ 1172.744020][T13059] usbhid: probe of 5-1:0.0 failed with error -32 [ 1172.808083][T13474] hub 2-1:0.0: activate --> -90 [ 1172.848058][ T2358] usb 1-1: Using ep0 maxpacket: 16 [ 1172.878072][T12517] usb 3-1: Using ep0 maxpacket: 16 [ 1172.968156][ T2358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.978947][ T2358] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1172.991604][ T2358] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1173.000505][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.011314][ T2358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.019273][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.029158][T12517] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1173.038332][ T2358] usb 1-1: config 0 descriptor?? [ 1173.043498][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.052319][T12517] usb 3-1: config 0 descriptor?? [ 1173.211839][T13059] usb 2-1: USB disconnect, device number 61 [ 1173.218497][T15520] hid (null): bogus close delimiter [ 1173.438102][T15520] usb 4-1: language id specifier not provided by device, defaulting to English [ 1173.529089][T12517] sony 0003:054C:0374.01C3: item fetching failed at offset 5/7 [ 1173.536726][T12517] sony 0003:054C:0374.01C3: parse failed [ 1173.542312][T12517] sony: probe of 0003:054C:0374.01C3 failed with error -22 executing program 1: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1173.743818][T12517] usb 3-1: USB disconnect, device number 75 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b00442f"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1173.854177][T28587] device syzkaller0 entered promiscuous mode [ 1173.878073][T15520] uclogic 0003:256C:006D.01C2: failed retrieving string descriptor #200: -71 [ 1173.886729][T15520] uclogic 0003:256C:006D.01C2: failed retrieving pen parameters: -71 [ 1173.894660][T15520] uclogic 0003:256C:006D.01C2: failed probing pen v2 parameters: -71 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1173.902535][T15520] uclogic 0003:256C:006D.01C2: failed probing parameters: -71 [ 1173.909857][T15520] uclogic: probe of 0003:256C:006D.01C2 failed with error -71 [ 1173.918494][T15520] usb 4-1: USB disconnect, device number 78 [ 1173.924560][T28575] UDC core: couldn't find an available UDC or it's busy: -16 [ 1173.934042][T28575] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f"], 0x0, 0x0, 0x0, 0x0}) [ 1174.208014][T13059] usb 2-1: new high-speed USB device number 62 using dummy_hcd executing program 4: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) [ 1174.404988][T28600] device syzkaller0 entered promiscuous mode executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) executing program 0: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0}, 0x0) [ 1174.448088][T13059] usb 2-1: Using ep0 maxpacket: 16 [ 1174.498064][ T2358] usbhid 1-1:0.0: can't add hid device: -71 [ 1174.503891][ T2358] usbhid: probe of 1-1:0.0 failed with error -71 [ 1174.511273][ T2358] usb 1-1: USB disconnect, device number 79 [ 1174.528141][T12517] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1174.568166][T13059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.579263][T13059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.589047][T13059] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1174.597850][T13059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.606687][T13059] usb 2-1: config 0 descriptor?? [ 1174.628294][T13474] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 1174.668095][T13474] usb 5-1: device reset changed ep0 maxpacket size! [ 1174.674724][T13474] usb 5-1: USB disconnect, device number 66 [ 1174.738016][T15520] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1174.778025][T12517] usb 3-1: Using ep0 maxpacket: 32 [ 1174.878048][ T2358] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1174.898159][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.909086][T12517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.918974][T12517] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1174.927907][T12517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.936532][T12517] usb 3-1: config 0 descriptor?? [ 1174.978661][T12517] hub 3-1:0.0: USB hub found [ 1174.988111][T15520] usb 4-1: Using ep0 maxpacket: 32 [ 1175.028041][T13474] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1175.089248][T13059] sony 0003:054C:0374.01C4: item fetching failed at offset 5/7 [ 1175.096834][T13059] sony 0003:054C:0374.01C4: parse failed [ 1175.102281][T13059] sony: probe of 0003:054C:0374.01C4 failed with error -22 [ 1175.118091][T15520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1175.129220][T15520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1175.140271][T15520] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1175.149231][T15520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.157781][T15520] usb 4-1: config 0 descriptor?? [ 1175.178112][T28607] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1175.198141][T12517] hub 3-1:0.0: 1 port detected [ 1175.198895][T15520] hub 4-1:0.0: USB hub found [ 1175.238121][ T2358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.248970][ T2358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.258595][ T2358] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1175.267397][ T2358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.276383][ T2358] usb 1-1: config 0 descriptor?? [ 1175.291063][T15519] usb 2-1: USB disconnect, device number 62 [ 1175.388094][T13474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.398880][T13474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.408550][T13474] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1175.417478][T13474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.426669][T13474] usb 5-1: config 0 descriptor?? [ 1175.498076][T15520] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1175.758250][ T2358] hid (null): bogus close delimiter executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, 0x0, &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1175.868090][T15520] usbhid 4-1:0.0: can't add hid device: -32 [ 1175.874453][T15520] usbhid: probe of 4-1:0.0 failed with error -32 [ 1175.908350][T13474] hid (null): bogus close delimiter [ 1175.978075][ T2358] usb 1-1: language id specifier not provided by device, defaulting to English [ 1176.068118][T13059] hub 3-1:0.0: activate --> -90 [ 1176.128129][T13474] usb 5-1: language id specifier not provided by device, defaulting to English [ 1176.138177][T12517] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1176.378024][T12517] usb 2-1: Using ep0 maxpacket: 16 [ 1176.418094][ T2358] uclogic 0003:256C:006D.01C5: failed retrieving string descriptor #200: -71 [ 1176.426916][ T2358] uclogic 0003:256C:006D.01C5: failed retrieving pen parameters: -71 [ 1176.434902][ T2358] uclogic 0003:256C:006D.01C5: failed probing pen v2 parameters: -71 [ 1176.442859][ T2358] uclogic 0003:256C:006D.01C5: failed probing parameters: -71 [ 1176.450227][ T2358] uclogic: probe of 0003:256C:006D.01C5 failed with error -71 [ 1176.458716][ T2358] usb 1-1: USB disconnect, device number 80 [ 1176.498080][T12517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.509207][T12517] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1176.522032][T12517] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1176.530928][T12517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.539660][T12517] usb 2-1: config 0 descriptor?? [ 1176.588081][T13474] uclogic 0003:256C:006D.01C6: failed retrieving string descriptor #200: -71 [ 1176.596851][T13474] uclogic 0003:256C:006D.01C6: failed retrieving pen parameters: -71 [ 1176.604754][T13474] uclogic 0003:256C:006D.01C6: failed probing pen v2 parameters: -71 [ 1176.612753][T13474] uclogic 0003:256C:006D.01C6: failed probing parameters: -71 [ 1176.620316][T13474] uclogic: probe of 0003:256C:006D.01C6 failed with error -71 [ 1176.629109][T13059] usb 3-1: USB disconnect, device number 76 [ 1176.636560][T13474] usb 5-1: USB disconnect, device number 67 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) [ 1176.950752][T28621] device syzkaller0 entered promiscuous mode executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "9330ab6e51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, 0x0, &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 2: syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "63da35644d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0xc8, 0x0, {0x7, 0x25, 0x1, 0x2, 0x6, 0x5a4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0x2, 0x4, 0x10, 0x2}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x101}, @generic={0x10, 0x10, 0x3, "cafc46941443bcf433edc895be"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf3, 0x1, 0x8}]}, 0x8, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "5a9d783c7db82b7d82f042b1647d6d716a8bb1cd918ce1aa21ae6fc59218f8"}}, {0x9b, &(0x7f0000000180)=@string={0x9b, 0x3, "1d0256643f79c6045437a04cf6030d5a6b237bcf6028e381de2d4d7e444ddb8a62ecbffe4cd2c970ff1e4cb15d09c14eb9ede7d50cba42da9333c20b4750648ae8715fb1689d91fd4a002efd553761d860d87feb763c66f703a68a9e003d88dfe70a884ff5660b38d56ac9fb3af8a2d23240f3b1d1b8fabef7e121c145d1b4f4f206764e37fb51f3061fcc3daf2b6736401d339b1f25d1a7d6"}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "46d77aa5c9ee98f6b8d88ded7a35743b685daa37936dc827b76e903dd61abdae67da392de6203be6a237095bd7fb2f1de94761210e2b5a357255459cd25329a7775fbe"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x813}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "35d3dd8ae9c889c6d3d2d0b6a0d7b92a0c69fcc0bdb5d7b305fd14dd108835abfb20838fcdec0fdd2a1f857e8894bcea1aaca55d60ce51688be2939c22f89d830e58510b86bff321df10c875aa5fb4c7811d6b4e7bea92c449b5262791ebed326d785166c777ed4035bd6127bde3d379ea263b21125c473a8474efbad6c8290b4e43f81f7fb87f097cd81cf96a9ff0c3a4d13a5a2cc6b6136f9e"}}, {0x6e, &(0x7f0000000400)=@string={0x6e, 0x3, "ba24da7382699cae628815b0f325f869b58550e1ed3f19c14e65ae52b6ab82cef696e119c0f155c4b76287dd8b5b2d5b71d342da4fd2d8386643474918587133f7164755a4f3321196ff8c1aaded94bb54665e6120725b1e05469a598c95cbe84e050af0f56ecfccafb4ef3f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}]}) executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) [ 1177.298013][T15517] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1177.318023][T13474] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1177.348046][ T2358] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1177.418825][T28617] UDC core: couldn't find an available UDC or it's busy: -16 [ 1177.426229][T28617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001400)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000004000000546f"], 0x0, 0x0, 0x0, 0x0}) [ 1177.558006][T15517] usb 1-1: Using ep0 maxpacket: 16 [ 1177.558150][T13474] usb 3-1: Using ep0 maxpacket: 32 [ 1177.688108][T13474] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1177.688108][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.688142][T15517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.696952][T13474] usb 3-1: config 1 has no interface number 1 [ 1177.708068][T15517] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1177.717622][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.723419][T15517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.732343][ T2358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.743907][T15517] usb 1-1: config 0 descriptor?? [ 1177.750750][T13474] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1177.777635][ T2358] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1177.786510][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.795306][ T2358] usb 5-1: config 0 descriptor?? [ 1177.800454][T13059] usb 4-1: reset high-speed USB device number 79 using dummy_hcd executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1177.953617][T13474] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1177.962666][T13474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.970957][T13474] usb 3-1: Product: 흆ꕺ㕺㭴嵨㞪涓⟈溷㶐᫖꺽ⴹ⃦㞢嬉ﯗᴯ䟩Ⅱ⬎㕚啲鱅叒ꜩ彷 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1177.983076][T13474] usb 3-1: Manufacturer: ȝ摖礿ӆ㝔䲠϶娍⍫콻⡠臣ⷞ繍䵄諛ﺿ퉌烉ỿ녌ढ़仁헧먌㎓ூ假詤燨녟鵨﶑Jﴮ㝕㱶ꘃ麊㴀૧侈曵㠋櫕﯉튢䀲뇳룑뻺섡텅۲乶﬷ἆ㷌⮯㙧ᵀ鬳┟ꟑ [ 1178.001928][T28640] device syzkaller0 entered promiscuous mode [ 1178.006056][T12517] usbhid 2-1:0.0: can't add hid device: -71 [ 1178.017567][T13474] usb 3-1: SerialNumber: 䀁 [ 1178.022501][T12517] usbhid: probe of 2-1:0.0 failed with error -71 [ 1178.037789][T12517] usb 2-1: USB disconnect, device number 63 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, 0x0, &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1178.098113][T13059] usb 4-1: device firmware changed [ 1178.103169][T13059] usb 4-1: USB disconnect, device number 79 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010300000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000490905810300020000000904010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001240)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x20, 0x80, 0xffffffffffffff6b}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1178.258979][T15517] sony 0003:054C:0374.01C7: item fetching failed at offset 5/7 [ 1178.266485][T15517] sony 0003:054C:0374.01C7: parse failed [ 1178.271986][T15517] sony: probe of 0003:054C:0374.01C7 failed with error -22 [ 1178.278351][ T2358] hid (null): bogus close delimiter [ 1178.348087][T13474] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1178.370832][T13474] usb 3-1: USB disconnect, device number 77 [ 1178.381682][T17231] udevd[17231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1178.458019][T13059] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1178.472605][T15517] usb 1-1: USB disconnect, device number 81 [ 1178.498081][ T2358] usb 5-1: language id specifier not provided by device, defaulting to English [ 1178.538044][T12517] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1178.698012][T13059] usb 4-1: Using ep0 maxpacket: 32 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x1, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_012={0x2, 0x2, 0x0, "1a8b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='B') readahead(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003100000001003"]}, 0x0) [ 1178.778151][T12517] usb 2-1: Using ep0 maxpacket: 16 [ 1178.818111][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.829054][T13059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.838692][T13059] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1178.847562][T13059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.856174][T13059] usb 4-1: config 0 descriptor?? [ 1178.898661][T13059] hub 4-1:0.0: USB hub found [ 1178.908086][T12517] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.918231][T12517] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.929087][T12517] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60dd690b"], 0x0) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 1178.941689][ T2358] uclogic 0003:256C:006D.01C8: failed retrieving string descriptor #200: -71 [ 1178.950264][ T2358] uclogic 0003:256C:006D.01C8: failed retrieving pen parameters: -71 [ 1178.958129][ T2358] uclogic 0003:256C:006D.01C8: failed probing pen v2 parameters: -71 [ 1178.966020][ T2358] uclogic 0003:256C:006D.01C8: failed probing parameters: -71 [ 1178.973577][ T2358] uclogic: probe of 0003:256C:006D.01C8 failed with error -71 [ 1178.982293][ T2358] usb 5-1: USB disconnect, device number 68 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_discard_preallocations\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) [ 1179.024089][T28655] device syzkaller0 entered promiscuous mode executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) [ 1279.097958][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1279.104393][ C1] rcu: 1-...!: (1 GPs behind) idle=025/1/0x4000000000000000 softirq=171681/171682 fqs=0 last_accelerate: 5716/7e26 dyntick_enabled: 1 [ 1279.118009][ C1] (t=10000 jiffies g=176273 q=159) [ 1279.123121][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g176273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1279.135273][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=53668 [ 1279.143083][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g176273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1279.154461][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1279.164260][ C1] rcu: RCU grace-period kthread stack dump: [ 1279.169988][ C1] task:rcu_preempt state:I stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 1279.179020][ C1] Call Trace: [ 1279.182141][ C1] [ 1279.184923][ C1] __schedule+0xccc/0x1590 [ 1279.189171][ C1] ? __sched_text_start+0x8/0x8 [ 1279.193856][ C1] ? __kasan_check_write+0x14/0x20 [ 1279.198807][ C1] schedule+0x11f/0x1e0 [ 1279.202797][ C1] schedule_timeout+0x18c/0x370 [ 1279.207483][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1279.212516][ C1] ? console_conditional_schedule+0x30/0x30 [ 1279.218243][ C1] ? update_process_times+0x200/0x200 [ 1279.223454][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1279.228835][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 1279.233436][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1279.238640][ C1] ? __note_gp_changes+0x4ab/0x920 [ 1279.243589][ C1] ? rcu_gp_init+0xc30/0xc30 [ 1279.248014][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1279.253050][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 1279.257478][ C1] rcu_gp_kthread+0xa4/0x350 [ 1279.261902][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1279.266589][ C1] ? rcu_barrier_callback+0x50/0x50 [ 1279.271623][ C1] ? __kasan_check_read+0x11/0x20 [ 1279.276482][ C1] ? __kthread_parkme+0xb2/0x200 [ 1279.281259][ C1] kthread+0x421/0x510 [ 1279.285162][ C1] ? rcu_barrier_callback+0x50/0x50 [ 1279.290371][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1279.294798][ C1] ret_from_fork+0x1f/0x30 [ 1279.299053][ C1] [ 1279.301916][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1279.308082][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1279.313146][ C0] NMI backtrace for cpu 0 [ 1279.313175][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 1279.313196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1279.313211][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 1279.313233][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1279.313248][ C0] RSP: 0018:ffffc900000d7620 EFLAGS: 00000246 [ 1279.313265][ C0] RAX: 0000000000000001 RBX: 1ffff9200001aec8 RCX: 1ffffffff0d1aa9c [ 1279.313279][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 1279.313291][ C0] RBP: ffffc900000d76d0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 1279.313305][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1279.313317][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff9200001aecc [ 1279.313331][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1279.313346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.313360][ C0] CR2: 0000001b2ea21000 CR3: 0000000125789000 CR4: 00000000003506b0 [ 1279.313376][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1279.313387][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1279.313399][ C0] Call Trace: [ 1279.313405][ C0] [ 1279.313413][ C0] ? show_regs+0x58/0x60 [ 1279.313431][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 1279.313453][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1279.313476][ C0] ? kvm_wait+0x147/0x180 [ 1279.313492][ C0] ? kvm_wait+0x147/0x180 [ 1279.313508][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1279.313527][ C0] ? nmi_handle+0xa8/0x280 [ 1279.313546][ C0] ? kvm_wait+0x147/0x180 [ 1279.313562][ C0] ? default_do_nmi+0x69/0x160 [ 1279.313581][ C0] ? exc_nmi+0xaf/0x120 [ 1279.313598][ C0] ? end_repeat_nmi+0x16/0x31 [ 1279.313620][ C0] ? kvm_wait+0x147/0x180 [ 1279.313637][ C0] ? kvm_wait+0x147/0x180 [ 1279.313653][ C0] ? kvm_wait+0x147/0x180 [ 1279.313670][ C0] [ 1279.313675][ C0] [ 1279.313681][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1279.313699][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1279.313730][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 1279.313755][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1279.313774][ C0] ? kasan_set_track+0x5d/0x70 [ 1279.313790][ C0] ? kasan_set_free_info+0x23/0x40 [ 1279.313807][ C0] ? ____kasan_slab_free+0x126/0x160 [ 1279.313823][ C0] ? __kasan_slab_free+0x11/0x20 [ 1279.313839][ C0] ? kmem_cache_free+0x116/0x2e0 [ 1279.313857][ C0] ? delayed_put_pid+0xb6/0x120 [ 1279.313874][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1279.313894][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1279.313914][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1279.313952][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 1279.313972][ C0] ? security_task_free+0x9a/0xc0 [ 1279.313996][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1279.314013][ C0] bpf_trace_run2+0xec/0x210 [ 1279.314033][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1279.314051][ C0] ? security_task_free+0x9a/0xc0 [ 1279.314071][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 1279.314090][ C0] ? security_task_free+0x9a/0xc0 [ 1279.314109][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1279.314127][ C0] ? security_task_free+0x9a/0xc0 [ 1279.314146][ C0] kfree+0x1f3/0x220 [ 1279.314166][ C0] security_task_free+0x9a/0xc0 [ 1279.314185][ C0] __put_task_struct+0xed/0x3e0 [ 1279.314205][ C0] ? delayed_put_task_struct+0x61/0x1a0 [ 1279.314224][ C0] delayed_put_task_struct+0x69/0x1a0 [ 1279.314243][ C0] ? put_task_struct_rcu_user+0x90/0x90 [ 1279.314261][ C0] rcu_do_batch+0x57a/0xc10 [ 1279.314286][ C0] ? local_bh_enable+0x20/0x20 [ 1279.314307][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1279.314325][ C0] ? sched_clock+0x9/0x10 [ 1279.314345][ C0] rcu_core+0x517/0x1020 [ 1279.314363][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1279.314384][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1279.314404][ C0] ? rcu_softirq_qs+0xd7/0x310 [ 1279.314422][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 1279.314441][ C0] ? irqtime_account_irq+0x79/0x3c0 [ 1279.314463][ C0] rcu_core_si+0x9/0x10 [ 1279.314480][ C0] __do_softirq+0x26d/0x5bf [ 1279.314499][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1279.314520][ C0] run_ksoftirqd+0x23/0x30 [ 1279.314538][ C0] smpboot_thread_fn+0x466/0x8d0 [ 1279.314562][ C0] kthread+0x421/0x510 [ 1279.314579][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 1279.314599][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1279.314617][ C0] ret_from_fork+0x1f/0x30 [ 1279.314639][ C0] [ 1279.315140][ C1] NMI backtrace for cpu 1 [ 1279.761086][ C1] CPU: 1 PID: 28636 Comm: syz-executor.3 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 1279.772631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1279.782526][ C1] Call Trace: [ 1279.785644][ C1] [ 1279.788353][ C1] dump_stack_lvl+0x151/0x1b7 [ 1279.792847][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1279.798330][ C1] ? ttwu_do_wakeup+0x187/0x430 [ 1279.803203][ C1] dump_stack+0x15/0x17 [ 1279.807171][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 1279.811947][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1279.818022][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1279.823316][ C1] ? __kasan_check_write+0x14/0x20 [ 1279.828262][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1279.832953][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1279.838850][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 1279.844667][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1279.850571][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1279.856294][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 1279.861251][ C1] print_cpu_stall+0x315/0x5f0 [ 1279.865844][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 1279.870878][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 1279.876952][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 1279.882109][ C1] update_process_times+0x198/0x200 [ 1279.887226][ C1] tick_sched_timer+0x188/0x240 [ 1279.891915][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 1279.897293][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 1279.902330][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1279.907278][ C1] ? clockevents_program_event+0x22f/0x300 [ 1279.912923][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1279.918818][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 1279.923824][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1279.929524][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 1279.934994][ C1] [ 1279.937963][ C1] [ 1279.940740][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1279.946555][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 1279.951327][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1279.970770][ C1] RSP: 0018:ffffc90000cff520 EFLAGS: 00000246 [ 1279.976670][ C1] RAX: 0000000000000003 RBX: 1ffff9200019fea8 RCX: ffffffff8154f88f [ 1279.984527][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888129fcd108 [ 1279.992308][ C1] RBP: ffffc90000cff5d0 R08: dffffc0000000000 R09: ffffed10253f9a22 [ 1280.000107][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1280.007923][ C1] R13: ffff888129fcd108 R14: 0000000000000003 R15: 1ffff9200019feac [ 1280.015735][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1280.021809][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1280.027878][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1280.032826][ C1] ? pv_hash+0x86/0x150 [ 1280.036821][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 1280.042724][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1280.048973][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1280.053744][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1280.058779][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1280.064073][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 1280.069106][ C1] ? sock_map_unref+0x352/0x4d0 [ 1280.073793][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1280.079175][ C1] bpf_trace_run2+0xec/0x210 [ 1280.083601][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1280.088287][ C1] ? sock_map_unref+0x352/0x4d0 [ 1280.092975][ C1] ? sock_map_unref+0x352/0x4d0 [ 1280.097673][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1280.102268][ C1] ? sock_map_unref+0x352/0x4d0 [ 1280.107034][ C1] kfree+0x1f3/0x220 [ 1280.110767][ C1] sock_map_unref+0x352/0x4d0 [ 1280.115283][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 1280.120402][ C1] ? raw_ioctl+0x1992/0x3510 [ 1280.124828][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1280.130207][ C1] bpf_trace_run2+0xec/0x210 [ 1280.134636][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1280.139321][ C1] ? raw_ioctl+0x1992/0x3510 [ 1280.143748][ C1] ? __kasan_check_write+0x14/0x20 [ 1280.148696][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1280.154117][ C1] ? raw_ioctl+0x1992/0x3510 [ 1280.158542][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1280.163141][ C1] ? raw_ioctl+0x1992/0x3510 [ 1280.167569][ C1] kfree+0x1f3/0x220 [ 1280.171302][ C1] ? __kasan_check_read+0x11/0x20 [ 1280.176160][ C1] raw_ioctl+0x1992/0x3510 [ 1280.180419][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 1280.185533][ C1] ? has_cap_mac_admin+0x3c0/0x3c0 [ 1280.190481][ C1] ? hrtimer_nanosleep+0x107/0x3f0 [ 1280.195427][ C1] ? hrtimer_nanosleep+0x306/0x3f0 [ 1280.200373][ C1] ? nanosleep_copyout+0x120/0x120 [ 1280.205325][ C1] ? selinux_file_ioctl+0x3cc/0x540 [ 1280.210357][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 1280.216171][ C1] ? __fget_files+0x31e/0x380 [ 1280.220687][ C1] ? security_file_ioctl+0x84/0xb0 [ 1280.225631][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 1280.230758][ C1] __se_sys_ioctl+0x114/0x190 [ 1280.235267][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1280.239695][ C1] do_syscall_64+0x3d/0xb0 [ 1280.243948][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1280.249671][ C1] RIP: 0033:0x7fe979411c0b [ 1280.253927][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1280.273367][ C1] RSP: 002b:00007fe978182ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.281608][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe979411c0b [ 1280.289425][ C1] RDX: 00007fe978184080 RSI: 0000000080085502 RDI: 0000000000000003 [ 1280.297233][ C1] RBP: 00007fe97945e4a4 R08: 0000000000000000 R09: 0000000000000000 [ 1280.305045][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1280.312856][ C1] R13: 0000000020000240 R14: 00007fe97953ff80 R15: 00007ffd29800ad8 [ 1280.320673][ C1] [ 1431.072511][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [ksoftirqd/0:13] [ 1431.080662][ C0] Modules linked in: [ 1431.084400][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 1431.095414][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1431.105311][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 1431.110085][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1431.129873][ C0] RSP: 0018:ffffc900000d7620 EFLAGS: 00000246 [ 1431.135772][ C0] RAX: 0000000000000001 RBX: 1ffff9200001aec8 RCX: 1ffffffff0d1aa9c [ 1431.143586][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 1431.151398][ C0] RBP: ffffc900000d76d0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 1431.159210][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1431.167019][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff9200001aecc [ 1431.174833][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1431.183598][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1431.190021][ C0] CR2: 0000001b2ea21000 CR3: 0000000125789000 CR4: 00000000003506b0 [ 1431.197926][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1431.205731][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1431.213555][ C0] Call Trace: [ 1431.216665][ C0] [ 1431.219365][ C0] ? show_regs+0x58/0x60 [ 1431.223439][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 1431.228383][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 1431.233501][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 1431.238719][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1431.243746][ C0] ? clockevents_program_event+0x22f/0x300 [ 1431.249386][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1431.255290][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 1431.260241][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1431.266137][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 1431.271781][ C0] [ 1431.274556][ C0] [ 1431.277334][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1431.283340][ C0] ? kvm_wait+0x147/0x180 [ 1431.287488][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1431.293479][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1431.298449][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 1431.304330][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1431.310574][ C0] ? kasan_set_track+0x5d/0x70 [ 1431.315181][ C0] ? kasan_set_free_info+0x23/0x40 [ 1431.320123][ C0] ? ____kasan_slab_free+0x126/0x160 [ 1431.325244][ C0] ? __kasan_slab_free+0x11/0x20 [ 1431.330019][ C0] ? kmem_cache_free+0x116/0x2e0 [ 1431.334790][ C0] ? delayed_put_pid+0xb6/0x120 [ 1431.339482][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1431.344258][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1431.349286][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1431.354583][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 1431.359618][ C0] ? security_task_free+0x9a/0xc0 [ 1431.364480][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1431.369855][ C0] bpf_trace_run2+0xec/0x210 [ 1431.374284][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1431.378969][ C0] ? security_task_free+0x9a/0xc0 [ 1431.383831][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 1431.388951][ C0] ? security_task_free+0x9a/0xc0 [ 1431.393821][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1431.398417][ C0] ? security_task_free+0x9a/0xc0 [ 1431.403271][ C0] kfree+0x1f3/0x220 [ 1431.407005][ C0] security_task_free+0x9a/0xc0 [ 1431.411691][ C0] __put_task_struct+0xed/0x3e0 [ 1431.416375][ C0] ? delayed_put_task_struct+0x61/0x1a0 [ 1431.421881][ C0] delayed_put_task_struct+0x69/0x1a0 [ 1431.427066][ C0] ? put_task_struct_rcu_user+0x90/0x90 [ 1431.432447][ C0] rcu_do_batch+0x57a/0xc10 [ 1431.436792][ C0] ? local_bh_enable+0x20/0x20 [ 1431.441392][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1431.446418][ C0] ? sched_clock+0x9/0x10 [ 1431.450588][ C0] rcu_core+0x517/0x1020 [ 1431.454666][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1431.459358][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1431.464387][ C0] ? rcu_softirq_qs+0xd7/0x310 [ 1431.468987][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 1431.474368][ C0] ? irqtime_account_irq+0x79/0x3c0 [ 1431.479407][ C0] rcu_core_si+0x9/0x10 [ 1431.483395][ C0] __do_softirq+0x26d/0x5bf [ 1431.487735][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 1431.492770][ C0] run_ksoftirqd+0x23/0x30 [ 1431.497020][ C0] smpboot_thread_fn+0x466/0x8d0 [ 1431.501810][ C0] kthread+0x421/0x510 [ 1431.505699][ C0] ? cpu_report_death+0x1a0/0x1a0 [ 1431.510562][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1431.514986][ C0] ret_from_fork+0x1f/0x30 [ 1431.519246][ C0] [ 1431.522107][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1431.527173][ C1] NMI backtrace for cpu 1 [ 1431.527184][ C1] CPU: 1 PID: 28636 Comm: syz-executor.3 Tainted: G W 5.15.148-syzkaller-00013-gad06eaf051cd #0 [ 1431.527205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1431.527215][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 1431.527236][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1431.527251][ C1] RSP: 0018:ffffc90000cff520 EFLAGS: 00000246 [ 1431.527267][ C1] RAX: 0000000000000003 RBX: 1ffff9200019fea8 RCX: ffffffff8154f88f [ 1431.527280][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888129fcd108 [ 1431.527293][ C1] RBP: ffffc90000cff5d0 R08: dffffc0000000000 R09: ffffed10253f9a22 [ 1431.527306][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1431.527318][ C1] R13: ffff888129fcd108 R14: 0000000000000003 R15: 1ffff9200019feac [ 1431.527331][ C1] FS: 00007fe9781856c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1431.527347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1431.527360][ C1] CR2: 00007ffc4fcce638 CR3: 00000001276ba000 CR4: 00000000003506a0 [ 1431.527376][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1431.527386][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1431.527398][ C1] Call Trace: [ 1431.527403][ C1] [ 1431.527410][ C1] ? show_regs+0x58/0x60 [ 1431.527429][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 1431.527450][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1431.527471][ C1] ? kvm_wait+0x147/0x180 [ 1431.527486][ C1] ? kvm_wait+0x147/0x180 [ 1431.527502][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1431.527521][ C1] ? nmi_handle+0xa8/0x280 [ 1431.527539][ C1] ? kvm_wait+0x147/0x180 [ 1431.527555][ C1] ? default_do_nmi+0x69/0x160 [ 1431.527575][ C1] ? exc_nmi+0xaf/0x120 [ 1431.527591][ C1] ? end_repeat_nmi+0x16/0x31 [ 1431.527609][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1431.527632][ C1] ? kvm_wait+0x147/0x180 [ 1431.527648][ C1] ? kvm_wait+0x147/0x180 [ 1431.527664][ C1] ? kvm_wait+0x147/0x180 [ 1431.527680][ C1] [ 1431.527685][ C1] [ 1431.527691][ C1] ? asm_common_interrupt+0x27/0x40 [ 1431.527707][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1431.527725][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1431.527746][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 1431.527768][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1431.527791][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1431.527819][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1431.527842][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1431.527863][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 1431.527881][ C1] ? sock_map_unref+0x352/0x4d0 [ 1431.527899][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1431.527915][ C1] bpf_trace_run2+0xec/0x210 [ 1431.527934][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1431.527952][ C1] ? sock_map_unref+0x352/0x4d0 [ 1431.527970][ C1] ? sock_map_unref+0x352/0x4d0 [ 1431.527987][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1431.528004][ C1] ? sock_map_unref+0x352/0x4d0 [ 1431.528022][ C1] kfree+0x1f3/0x220 [ 1431.528041][ C1] sock_map_unref+0x352/0x4d0 [ 1431.528061][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 1431.528080][ C1] ? raw_ioctl+0x1992/0x3510 [ 1431.528098][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x1a4 [ 1431.528112][ C1] bpf_trace_run2+0xec/0x210 [ 1431.528131][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1431.528148][ C1] ? raw_ioctl+0x1992/0x3510 [ 1431.528166][ C1] ? __kasan_check_write+0x14/0x20 [ 1431.528183][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1431.528201][ C1] ? raw_ioctl+0x1992/0x3510 [ 1431.528218][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1431.528234][ C1] ? raw_ioctl+0x1992/0x3510 [ 1431.528251][ C1] kfree+0x1f3/0x220 [ 1431.528268][ C1] ? __kasan_check_read+0x11/0x20 [ 1431.528286][ C1] raw_ioctl+0x1992/0x3510 [ 1431.528307][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 1431.528324][ C1] ? has_cap_mac_admin+0x3c0/0x3c0 [ 1431.528342][ C1] ? hrtimer_nanosleep+0x107/0x3f0 [ 1431.528359][ C1] ? hrtimer_nanosleep+0x306/0x3f0 [ 1431.528376][ C1] ? nanosleep_copyout+0x120/0x120 [ 1431.528394][ C1] ? selinux_file_ioctl+0x3cc/0x540 [ 1431.528413][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 1431.528434][ C1] ? __fget_files+0x31e/0x380 [ 1431.528453][ C1] ? security_file_ioctl+0x84/0xb0 [ 1431.528471][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 1431.528489][ C1] __se_sys_ioctl+0x114/0x190 [ 1431.528509][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1431.528528][ C1] do_syscall_64+0x3d/0xb0 [ 1431.528544][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1431.528565][ C1] RIP: 0033:0x7fe979411c0b [ 1431.528595][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1431.528609][ C1] RSP: 002b:00007fe978182ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.528626][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe979411c0b [ 1431.528638][ C1] RDX: 00007fe978184080 RSI: 0000000080085502 RDI: 0000000000000003 [ 1431.528650][ C1] RBP: 00007fe97945e4a4 R08: 0000000000000000 R09: 0000000000000000 [ 1431.528661][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1431.528672][ C1] R13: 0000000020000240 R14: 00007fe97953ff80 R15: 00007ffd29800ad8 [ 1431.528689][ C1]