(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:49 executing program 5: socket$packet(0x11, 0x2, 0x300) (async) syz_clone(0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) (async) syz_clone(0xa8824680, &(0x7f0000002400)="e544b64a8118c3d664e508330be7696c346dfc80f18ad6f6abcbd981f7903838ab815718ccc906c5dfb4ede085bf994571b284ac56999aa721140c5979381bdb6bd0760dd24f16e5869b351e7eb99117815ed4d3e4db42cfd678ba68dab8ef150dfe646c112bbe4c92d2298f8bddbf88351dd8dc0345c95329dc4b77c461742b57831ae4a073", 0x86, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x5411, 0x0) (async) r0 = syz_clone(0xc0000400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="21728f1d450897edb26b1bb9334cb4ed") sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) (async) ioprio_set$pid(0x2, r0, 0x4000) 18:21:49 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x60, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:49 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 639.282719][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x68, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6c, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 639.385705][ T3675] rc_core: IR keymap rc-hauppauge not found [ 639.402701][ T3675] Registered IR keymap rc-empty [ 639.407605][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.408902][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:49 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_clone(0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0xa8824680, &(0x7f0000002400)="e544b64a8118c3d664e508330be7696c346dfc80f18ad6f6abcbd981f7903838ab815718ccc906c5dfb4ede085bf994571b284ac56999aa721140c5979381bdb6bd0760dd24f16e5869b351e7eb99117815ed4d3e4db42cfd678ba68dab8ef150dfe646c112bbe4c92d2298f8bddbf88351dd8dc0345c95329dc4b77c461742b57831ae4a073", 0x86, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_clone(0xc0000400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="21728f1d450897edb26b1bb9334cb4ed") sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) ioprio_set$pid(0x2, r0, 0x4000) socket$packet(0x11, 0x2, 0x300) (async) syz_clone(0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) (async) syz_clone(0xa8824680, &(0x7f0000002400)="e544b64a8118c3d664e508330be7696c346dfc80f18ad6f6abcbd981f7903838ab815718ccc906c5dfb4ede085bf994571b284ac56999aa721140c5979381bdb6bd0760dd24f16e5869b351e7eb99117815ed4d3e4db42cfd678ba68dab8ef150dfe646c112bbe4c92d2298f8bddbf88351dd8dc0345c95329dc4b77c461742b57831ae4a073", 0x86, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x5411, 0x0) (async) syz_clone(0xc0000400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="21728f1d450897edb26b1bb9334cb4ed") (async) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc800) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) (async) ioprio_set$pid(0x2, r0, 0x4000) (async) [ 639.467902][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.503253][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 639.522771][ T4314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 639.552893][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input200 18:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 639.558739][T15706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.582801][T14638] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 639.600029][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.644169][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.682794][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.722583][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.752691][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.762561][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 639.782866][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.812616][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.832564][T14638] usb 1-1: Using ep0 maxpacket: 16 [ 639.846972][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.882858][ T4314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.893694][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.900872][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.911943][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 639.921965][ T4314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 639.931854][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 639.939341][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.952714][T14638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.962905][T14638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.974852][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 639.983144][T14638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 639.992937][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 640.002807][T14638] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 640.014632][ T3675] usb 2-1: USB disconnect, device number 41 [ 640.022344][T14638] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.052927][ T4314] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.061983][ T4314] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.070418][ T4314] usb 4-1: Manufacturer: syz [ 640.082082][ T4314] usb 4-1: config 0 descriptor?? [ 640.112967][T14638] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.122116][T14638] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.131858][T14638] usb 1-1: Manufacturer: syz [ 640.153923][T14638] usb 1-1: config 0 descriptor?? [ 640.331775][T15687] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.341659][T15687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.359715][T15687] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.368193][T15687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.377388][T15687] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.384967][T15687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.392794][ T3675] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 640.394826][T15691] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.401512][T15687] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.415590][T15691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.419996][T15691] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.425562][T15687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.438733][T15691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.443411][T15687] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.454017][T15687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.463735][T15691] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.471233][T15691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.480349][T15691] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.500277][T15691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.510804][T15691] UDC core: couldn't find an available UDC or it's busy: -16 [ 640.518513][T15691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 640.552600][ T4314] rc_core: IR keymap rc-hauppauge not found [ 640.558527][ T4314] Registered IR keymap rc-empty [ 640.563851][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.592729][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.602844][T14638] rc_core: IR keymap rc-hauppauge not found [ 640.609318][T14638] Registered IR keymap rc-empty [ 640.614458][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.623264][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 640.636033][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 640.641898][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input201 [ 640.655483][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.665057][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.692764][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.700268][T14638] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 640.714986][T14638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input202 [ 640.729136][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.742556][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.752652][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.763107][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.770441][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.781992][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 640.791940][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 640.801917][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.815565][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.822997][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.852756][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.860057][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.893847][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.901045][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.908447][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.918214][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.926405][ T3675] usb 2-1: Manufacturer: syz [ 640.932706][ T3675] usb 2-1: config 0 descriptor?? [ 640.942542][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.949734][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 640.982720][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 640.989969][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 641.022795][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.030053][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 641.063723][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.071773][ T4314] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 641.081196][ T4314] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.091847][ T4314] usb 4-1: USB disconnect, device number 9 [ 641.097836][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.132595][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 641.163743][T14638] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 641.171760][T14638] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 641.186513][T15695] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.188425][T14638] usb 1-1: USB disconnect, device number 119 [ 641.205836][T15695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.219635][T15695] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.233786][T15695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.252237][T15695] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.259697][T15695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.269052][T15695] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.276524][T15695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.286378][T15695] UDC core: couldn't find an available UDC or it's busy: -16 [ 641.294992][T15695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:52 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:52 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_clone(0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0xa8824680, &(0x7f0000002400)="e544b64a8118c3d664e508330be7696c346dfc80f18ad6f6abcbd981f7903838ab815718ccc906c5dfb4ede085bf994571b284ac56999aa721140c5979381bdb6bd0760dd24f16e5869b351e7eb99117815ed4d3e4db42cfd678ba68dab8ef150dfe646c112bbe4c92d2298f8bddbf88351dd8dc0345c95329dc4b77c461742b57831ae4a073", 0x86, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_clone(0xc0000400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="21728f1d450897edb26b1bb9334cb4ed") sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) ioprio_set$pid(0x2, r0, 0x4000) 18:21:52 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:52 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x74, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 642.546893][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x7a, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 642.662807][ T3675] rc_core: IR keymap rc-hauppauge not found [ 642.669284][ T3675] Registered IR keymap rc-empty [ 642.678040][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.701170][T15737] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 642.722646][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.753179][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 642.791515][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input203 [ 642.800779][T15742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.823067][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.832826][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd 18:21:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfc, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 642.842911][T15470] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 642.862861][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.893017][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.922837][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.923646][T15750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.963013][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.002665][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.032745][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.062781][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.092603][T15470] usb 1-1: Using ep0 maxpacket: 16 [ 643.092638][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 643.097913][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.132919][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 643.163503][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 643.171892][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.187607][ T3675] usb 2-1: USB disconnect, device number 42 [ 643.212652][T15470] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.225419][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.237067][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.247686][T15470] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 643.255359][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.257767][T15470] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.290017][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.301558][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.311938][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 643.322232][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.352787][T15470] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 643.361952][T15470] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 643.370158][T15470] usb 1-1: Manufacturer: syz [ 643.385686][T15470] usb 1-1: config 0 descriptor?? [ 643.422967][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 643.432127][ T6] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 643.440471][ T6] usb 4-1: Manufacturer: syz [ 643.447389][ T6] usb 4-1: config 0 descriptor?? [ 643.572624][ T3675] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 643.625867][T15730] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.634855][T15730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.644299][T15730] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.651775][T15730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.660538][T15730] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.668400][T15730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.677568][T15730] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.685988][T15730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.695607][T15730] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.703392][T15730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.704533][T15724] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.718991][T15724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.740359][T15724] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.758010][T15724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.769590][T15724] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.777283][T15724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.788590][T15724] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.796140][T15724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.805507][T15724] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.813352][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 643.816425][T15724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.818570][T15470] rc_core: IR keymap rc-hauppauge not found [ 643.832024][T15470] Registered IR keymap rc-empty [ 643.837040][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 643.872568][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 643.906095][T15470] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 643.922861][ T6] rc_core: IR keymap rc-hauppauge not found [ 643.929087][ T6] Registered IR keymap rc-empty [ 643.930637][T15470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input204 [ 643.940207][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 643.947813][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.965435][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.976738][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.986744][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 643.992669][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 643.997076][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.016250][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.030300][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.033575][ T6] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 644.051292][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input205 [ 644.066516][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.072694][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.102845][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.108653][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.128170][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.137253][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.142534][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.152574][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.159731][ T3675] usb 2-1: Manufacturer: syz [ 644.171115][ T3675] usb 2-1: config 0 descriptor?? [ 644.182726][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.189555][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.222695][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.222719][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.252673][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.262968][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.282658][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.302648][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.312804][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 644.332598][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.343895][T15470] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 644.352086][T15470] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 644.362657][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.376387][T15470] usb 1-1: USB disconnect, device number 120 [ 644.402670][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 644.417498][T15733] UDC core: couldn't find an available UDC or it's busy: -16 [ 644.435389][T15733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 644.445629][T15733] UDC core: couldn't find an available UDC or it's busy: -16 [ 644.453939][ T6] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 644.456870][T15733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 644.462006][ T6] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 644.491196][T14638] usb 4-1: USB disconnect, device number 10 [ 644.511896][T15733] UDC core: couldn't find an available UDC or it's busy: -16 [ 644.521476][T15733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 644.530962][T15733] UDC core: couldn't find an available UDC or it's busy: -16 [ 644.549245][T15733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 644.560848][T15733] UDC core: couldn't find an available UDC or it's busy: -16 [ 644.568710][T15733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:21:55 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x300, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:55 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:55 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x500, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 645.847376][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 645.868768][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:21:56 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_clone(0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0xa8824680, &(0x7f0000002400)="e544b64a8118c3d664e508330be7696c346dfc80f18ad6f6abcbd981f7903838ab815718ccc906c5dfb4ede085bf994571b284ac56999aa721140c5979381bdb6bd0760dd24f16e5869b351e7eb99117815ed4d3e4db42cfd678ba68dab8ef150dfe646c112bbe4c92d2298f8bddbf88351dd8dc0345c95329dc4b77c461742b57831ae4a073", 0x86, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x5411, 0x0) r0 = syz_clone(0xc0000400, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="21728f1d450897edb26b1bb9334cb4ed") sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc800) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) ioprio_set$pid(0x2, r0, 0x4000) 18:21:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 645.952524][ T3675] rc_core: IR keymap rc-hauppauge not found [ 645.958462][ T3675] Registered IR keymap rc-empty [ 645.977994][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 645.994544][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x600, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 646.032687][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.063178][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 646.084510][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input206 [ 646.102814][ T3673] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 646.116135][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 646.136374][T15780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.141528][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.192584][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.222594][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.252579][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.282844][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.313201][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.344088][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.372550][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.405096][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.412693][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 646.417999][ T3673] usb 1-1: Using ep0 maxpacket: 16 [ 646.432738][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.463637][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 646.471647][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 646.482947][ T3675] usb 2-1: USB disconnect, device number 43 [ 646.582733][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.593334][ T3673] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.609834][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.620822][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.638240][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.648234][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.658888][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 646.669783][ T3673] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 646.679876][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.693177][ T3673] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.813083][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 646.822232][ T3673] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 646.831444][ T6] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.840010][ T3673] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.848786][ T6] usb 4-1: Manufacturer: syz [ 646.853710][ T3673] usb 1-1: Manufacturer: syz [ 646.861602][ T6] usb 4-1: config 0 descriptor?? [ 646.863857][ T3675] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 646.867960][ T3673] usb 1-1: config 0 descriptor?? [ 647.112550][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 647.119835][T15760] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.123849][T15759] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.127437][T15760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.142656][T15759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.146309][T15760] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.159432][T15759] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.159502][T15760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.169119][T15759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.179087][T15760] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.190110][T15760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.199536][T15759] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.200022][T15760] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.210684][T15759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.214625][T15760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.233497][T15759] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.234822][T15760] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.241050][T15759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.248486][T15760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.260134][T15759] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.272207][T15759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.294271][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.311395][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.330731][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 647.340616][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 647.342651][ T6] rc_core: IR keymap rc-hauppauge not found [ 647.350597][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.364014][ T6] Registered IR keymap rc-empty [ 647.378856][ T3673] rc_core: IR keymap rc-hauppauge not found [ 647.385132][ T3673] Registered IR keymap rc-empty [ 647.390256][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.397663][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.432688][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.444253][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.462985][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 647.463145][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 647.473069][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 647.485805][ T3673] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 647.495610][ T3675] usb 2-1: Manufacturer: syz [ 647.517382][ T3675] usb 2-1: config 0 descriptor?? [ 647.520024][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input208 [ 647.536974][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input207 [ 647.556469][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.563919][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.592990][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.600284][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.632758][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.640676][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.663760][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.672904][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.692603][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.703144][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.722751][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.732658][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.752628][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.758488][T15767] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.762818][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.767396][T15767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.784435][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.787502][T15767] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.799298][T15767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.802556][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.809351][T15767] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.814230][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.821389][T15767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.839367][T15767] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.846847][T15767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.852648][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 647.857464][T15767] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.861531][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.869506][T15767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.883708][ T6] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 647.891885][ T6] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.912558][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.939366][T14638] usb 4-1: USB disconnect, device number 11 [ 647.944068][ T3673] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 647.961295][ T3673] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.980167][ T3673] usb 1-1: USB disconnect, device number 121 18:21:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x623, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000ca49a85a27bf7b7300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9f, 0x0, "c6b8d95502134fd21c437303865098b875af8f"}) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) read(r2, &(0x7f0000000080)=""/75, 0x4b) r4 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) 18:21:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:59 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:59 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 649.153101][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x700, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x900, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 649.283479][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:21:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xa00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 649.352548][ T3675] rc_core: IR keymap rc-hauppauge not found [ 649.358724][ T3675] Registered IR keymap rc-empty [ 649.369792][T15811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.395118][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.432889][ T3673] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 649.440639][ T14] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 649.442677][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 649.488266][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.517913][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 649.561302][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input209 [ 649.601569][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.642622][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.672599][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.702628][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.702963][ T3673] usb 4-1: Using ep0 maxpacket: 16 [ 649.715099][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 649.732627][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.762636][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.792642][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.822656][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.843645][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.854715][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.862877][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.866072][ T3673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.883140][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 649.893526][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.904783][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 649.912618][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 649.918567][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 649.934254][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.944886][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 649.955015][ T3673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 649.955124][ T3673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.983613][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 649.996161][ T3675] usb 2-1: USB disconnect, device number 44 [ 650.052921][ T3673] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 650.062240][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 650.079757][ T3673] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 650.088365][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 650.097555][ T3673] usb 4-1: Manufacturer: syz 18:22:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000ca49a85a27bf7b7300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9f, 0x0, "c6b8d95502134fd21c437303865098b875af8f"}) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) read(r2, &(0x7f0000000080)=""/75, 0x4b) r4 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000ca49a85a27bf7b7300"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9f, 0x0, "c6b8d95502134fd21c437303865098b875af8f"}) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) (async) read(r2, &(0x7f0000000080)=""/75, 0x4b) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) (async) [ 650.102248][ T14] usb 1-1: Manufacturer: syz [ 650.113569][ T3673] usb 4-1: config 0 descriptor?? [ 650.123023][ T14] usb 1-1: config 0 descriptor?? [ 650.242792][T15821] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 650.374686][T15794] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.382103][T15794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.382219][T15796] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.390010][ T3675] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 650.397217][T15796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.406056][T15794] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.421177][T15794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.425750][T15796] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.432179][T15794] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.444573][T15794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.447053][T15796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.455057][T15794] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.467206][T15794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.469891][T15796] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.477726][T15794] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.489661][T15796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.489791][T15794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.500459][T15796] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.512867][T15796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.521857][T15796] UDC core: couldn't find an available UDC or it's busy: -16 [ 650.529930][T15796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 650.592535][ T3673] rc_core: IR keymap rc-hauppauge not found [ 650.598458][ T3673] Registered IR keymap rc-empty [ 650.608206][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.615624][ T14] rc_core: IR keymap rc-hauppauge not found [ 650.621546][ T14] Registered IR keymap rc-empty [ 650.631425][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.652565][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 650.662971][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.671990][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.704414][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 650.717807][ T14] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 650.731305][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input211 [ 650.746896][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input210 [ 650.765584][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.772712][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.773187][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.795860][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.807398][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 650.817449][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 650.822732][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.828291][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.834760][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.882848][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.890237][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.912697][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.922910][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 650.932056][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 650.932556][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.940185][ T3675] usb 2-1: Manufacturer: syz [ 650.948167][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 650.954559][ T3675] usb 2-1: config 0 descriptor?? [ 650.992946][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 651.000426][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.032684][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 651.040004][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.072748][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 651.080160][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.124004][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 651.131209][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.152783][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 651.172624][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.184922][ T14] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 651.193113][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 651.209215][T15799] UDC core: couldn't find an available UDC or it's busy: -16 [ 651.213007][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.224662][T15799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 651.226499][ T14] usb 1-1: USB disconnect, device number 122 [ 651.239955][T15799] UDC core: couldn't find an available UDC or it's busy: -16 [ 651.248007][T15799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 651.259448][T15799] UDC core: couldn't find an available UDC or it's busy: -16 [ 651.271287][T15799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 651.273565][ T3673] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 651.286715][T15799] UDC core: couldn't find an available UDC or it's busy: -16 [ 651.286740][T15799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 651.288846][T15799] UDC core: couldn't find an available UDC or it's busy: -16 [ 651.316987][ T3673] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 651.326214][T15799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 651.341152][ T3673] usb 4-1: USB disconnect, device number 12 18:22:01 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 652.032769][ T3673] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 652.302586][ T3673] usb 4-1: Using ep0 maxpacket: 16 [ 652.442783][ T3673] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.452958][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.464266][ T3673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 652.474273][ T3673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 652.484388][ T3673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:22:02 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xc00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000ca49a85a27bf7b7300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9f, 0x0, "c6b8d95502134fd21c437303865098b875af8f"}) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) read(r2, &(0x7f0000000080)=""/75, 0x4b) r4 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e010000000000ca49a85a27bf7b7300"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9f, 0x0, "c6b8d95502134fd21c437303865098b875af8f"}) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) (async) read(r2, &(0x7f0000000080)=""/75, 0x4b) (async) dup3(r1, r0, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x3) (async) 18:22:02 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 652.593119][ T3673] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 652.606206][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xe00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 652.639080][ T3673] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 18:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 652.682649][ T3673] usb 4-1: Manufacturer: syz [ 652.731171][ T3673] usb 4-1: config 0 descriptor?? 18:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 652.757974][T15843] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 652.770254][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.772624][ T3675] rc_core: IR keymap rc-hauppauge not found [ 652.787159][ T3675] Registered IR keymap rc-empty [ 652.792731][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 652.832760][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.863090][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 18:22:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 652.892830][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input212 [ 652.902137][T15855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.965461][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 652.983000][ T14] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 652.995164][T15829] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.008517][T15829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.018873][T15829] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.022850][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.028383][T15829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.044679][T15829] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.052095][T15829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.061114][T15829] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.065288][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.068809][T15829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.087221][T15829] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.097060][T15829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.104650][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.132663][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.162602][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.192724][ T3673] rc_core: IR keymap rc-hauppauge not found [ 653.196635][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.198642][ T3673] Registered IR keymap rc-empty [ 653.198707][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.232873][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.242839][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.250914][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 653.262696][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.283409][ T3673] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 653.293625][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 653.297068][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input213 [ 653.323190][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.343759][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 653.351757][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 653.367267][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.383742][ T3675] usb 2-1: USB disconnect, device number 45 [ 653.412842][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.420112][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.431455][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.442664][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.449847][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 653.459585][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 653.470288][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.483480][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.523848][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.552589][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.562897][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.571946][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.580530][ T14] usb 1-1: Manufacturer: syz [ 653.585463][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.596732][ T14] usb 1-1: config 0 descriptor?? [ 653.622990][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.652620][ T3673] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 653.683788][ T3673] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 653.691892][ T3673] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 653.733014][ T3673] usb 4-1: USB disconnect, device number 13 [ 653.743790][ T3675] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 653.834368][T15836] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.841752][T15836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.850308][T15836] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.857706][T15836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.869977][T15836] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.880981][T15836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.890127][T15836] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.897712][T15836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.906999][T15836] UDC core: couldn't find an available UDC or it's busy: -16 [ 653.914616][T15836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 653.982574][ T14] rc_core: IR keymap rc-hauppauge not found [ 653.988613][ T14] Registered IR keymap rc-empty [ 653.994560][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.012604][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 654.022780][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.053580][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 654.067902][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input214 [ 654.083351][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.112603][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.142726][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.152631][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.163386][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.174397][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.184293][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.184373][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:22:04 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 654.201336][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.212648][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.244095][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.282625][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.302724][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 654.311907][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.312665][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.320497][ T3675] usb 2-1: Manufacturer: syz [ 654.340085][ T3675] usb 2-1: config 0 descriptor?? [ 654.364806][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.392625][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.423657][ T14] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 654.431679][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 654.506585][ T14] usb 1-1: USB disconnect, device number 123 [ 654.552833][T14638] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 654.587085][T15840] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.595620][T15840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.604742][T15840] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.612130][T15840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.620594][T15840] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.628012][T15840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.636318][T15840] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.644765][T15840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.653463][T15840] UDC core: couldn't find an available UDC or it's busy: -16 [ 654.660930][T15840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.802572][T14638] usb 4-1: Using ep0 maxpacket: 16 [ 654.922699][T14638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.932996][T14638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.945050][T14638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.954920][T14638] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 654.964849][T14638] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.052777][T14638] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 655.061880][T14638] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 655.078432][T14638] usb 4-1: Manufacturer: syz [ 655.085337][T14638] usb 4-1: config 0 descriptor?? [ 655.325807][T15866] UDC core: couldn't find an available UDC or it's busy: -16 [ 655.333263][T15866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 655.341739][T15866] UDC core: couldn't find an available UDC or it's busy: -16 [ 655.352523][T15866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 655.361189][T15866] UDC core: couldn't find an available UDC or it's busy: -16 [ 655.368658][T15866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 655.377380][T15866] UDC core: couldn't find an available UDC or it's busy: -16 [ 655.384978][T15866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 655.393505][T15866] UDC core: couldn't find an available UDC or it's busy: -16 [ 655.400898][T15866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 655.472688][T14638] rc_core: IR keymap rc-hauppauge not found [ 655.478711][T14638] Registered IR keymap rc-empty [ 655.483978][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.513555][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.543578][T14638] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 655.556960][T14638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input215 [ 655.573791][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.602577][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.632762][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.662548][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.692754][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.722687][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.752813][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.782829][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.813532][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 655.842719][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:22:06 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4048885, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @private2}, 0x1c) 18:22:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x19f8, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:06 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 655.873671][T14638] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 655.881691][T14638] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 18:22:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4048885, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @private2}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x4048885, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @private2}, 0x1c) (async) [ 655.925141][T15871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x1f00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 655.997767][ T6] usb 4-1: USB disconnect, device number 14 18:22:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4048885, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @private2}, 0x1c) [ 656.072690][ T3675] rc_core: IR keymap rc-hauppauge not found [ 656.079885][ T3675] Registered IR keymap rc-empty [ 656.107743][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x2000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 656.137782][T15886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 656.162540][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.203183][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 656.234193][T15892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 656.236174][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input216 [ 656.252483][ T14] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 656.270608][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.302640][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.332651][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.364892][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.395484][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.432676][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.462881][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) [ 656.492541][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.512671][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 656.522545][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.562764][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.595503][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 656.603761][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.615054][ T3675] usb 2-1: USB disconnect, device number 46 [ 656.652886][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.663345][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.676680][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 656.687316][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 656.697271][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.802719][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.811848][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.820038][ T14] usb 1-1: Manufacturer: syz [ 656.826580][ T14] usb 1-1: config 0 descriptor?? [ 656.992544][ T3675] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 657.076616][T15877] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.084044][T15877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.092333][T15877] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.102529][T15877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.112042][T15877] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.120196][T15877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.128932][T15877] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.136492][T15877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.147440][T15877] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.155124][T15877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.222684][ T14] rc_core: IR keymap rc-hauppauge not found [ 657.228614][ T14] Registered IR keymap rc-empty [ 657.232540][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 657.240758][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.274252][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.316274][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 657.329704][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input217 [ 657.344473][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.352746][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.362953][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.374611][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 657.382647][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.384339][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 657.401079][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.424344][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.462825][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.492689][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 657.501729][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 657.502520][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.518173][ T3675] usb 2-1: Manufacturer: syz [ 657.530228][ T3675] usb 2-1: config 0 descriptor?? [ 657.545856][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.582696][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.622743][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.653521][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.692576][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 657.733534][ T14] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 657.741598][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 657.790718][T14638] usb 1-1: USB disconnect, device number 124 [ 657.802901][T15879] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.816373][T15879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.828294][T15879] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.836361][T15879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.845093][T15879] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.852762][T15879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.862227][T15879] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.871276][T15879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.882515][T15879] UDC core: couldn't find an available UDC or it's busy: -16 [ 657.890035][T15879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 657.972709][ T3675] rc_core: IR keymap rc-hauppauge not found [ 657.979038][ T3675] Registered IR keymap rc-empty [ 657.984320][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.015430][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.054299][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 658.069800][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input218 [ 658.084951][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.112658][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.147278][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.183304][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.214900][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.252920][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.292820][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.330269][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.382810][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.422688][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 658.463777][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 658.471878][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 658.499579][ T3673] usb 2-1: USB disconnect, device number 47 18:22:09 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x2306, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:09 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) 18:22:09 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) dup(r0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async) 18:22:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x4800, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 659.071921][T15907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:09 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x4c00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 659.174698][T15920] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 659.252360][T15926] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 659.332615][ T3673] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 659.342707][ T3675] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 659.392554][ T6] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 659.482695][ T14] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 659.572587][ T3673] usb 1-1: Using ep0 maxpacket: 16 [ 659.582989][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 659.632787][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 659.692709][ T3673] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.703401][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.714616][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.722738][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.724431][ T3673] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 659.741982][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.744427][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 659.755664][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.761009][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.771167][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 659.780998][ T3673] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.803806][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.810027][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.833587][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.846953][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 659.858653][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.912864][ T3673] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.913370][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.922218][ T3673] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.939708][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.939736][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.958082][ T3675] usb 4-1: Manufacturer: syz [ 659.963085][ T6] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 659.963120][ T6] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 659.989098][ T3673] usb 1-1: Manufacturer: syz [ 659.991516][ T3675] usb 4-1: config 0 descriptor?? [ 659.995606][ T6] usb 2-1: Manufacturer: syz [ 660.007533][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.021172][ T3673] usb 1-1: config 0 descriptor?? [ 660.031041][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 660.031943][ T6] usb 2-1: config 0 descriptor?? [ 660.050501][ T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 660.060400][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.152642][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 660.161997][ T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 660.170755][ T14] usb 6-1: Manufacturer: syz [ 660.183994][ T14] usb 6-1: config 0 descriptor?? [ 660.245518][T15909] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.253149][T15909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.261501][T15909] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.271479][T15909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.280523][T15908] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.288194][T15908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.297033][T15909] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.297566][T15908] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.308149][T15909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.311880][T15908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.321424][T15912] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.340287][T15908] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.340606][T15912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.349538][T15908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.366121][T15909] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.368996][T15908] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.382018][T15908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.385030][T15912] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.392745][T15908] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.403850][T15909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.404879][T15908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.419366][T15912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.427688][T15909] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.431917][T15924] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.435337][T15909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.450474][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.461178][T15912] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.469807][T15912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.479570][T15924] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.479582][T15912] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.479603][T15912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.513920][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.515951][T15912] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.532390][T15912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.550167][T15924] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.561558][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.581808][T15924] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.592233][ T3673] rc_core: IR keymap rc-hauppauge not found [ 660.592590][ T3675] rc_core: IR keymap rc-hauppauge not found [ 660.602549][ T3673] Registered IR keymap rc-empty [ 660.605358][ T3675] Registered IR keymap rc-empty [ 660.610143][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.614207][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.624462][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.642583][ T6] rc_core: IR keymap rc-hauppauge not found [ 660.647155][T15924] UDC core: couldn't find an available UDC or it's busy: -16 [ 660.648578][ T6] Registered IR keymap rc-empty [ 660.656344][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.662861][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.675499][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.681671][T15924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 660.703220][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 660.713311][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 660.716980][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input220 [ 660.744160][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.758934][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.772151][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input219 [ 660.790073][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.798226][ T6] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2 [ 660.810976][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.820185][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2/input221 [ 660.833854][ T14] rc_core: IR keymap rc-hauppauge not found [ 660.839863][ T14] Registered IR keymap rc-empty [ 660.842837][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.844995][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.859799][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 660.867858][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.882738][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.892775][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.902728][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.910030][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 660.922635][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.922939][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.942841][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 660.950472][ T14] rc rc3: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc3 [ 660.963402][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 660.972180][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc3/input222 [ 660.972806][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 660.985999][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.000373][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 661.024469][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.032666][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 661.042780][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.050061][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 661.058106][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.072867][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 661.072873][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.092667][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.099910][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 661.107318][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.124163][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 661.142840][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.150197][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.157608][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 661.162552][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 661.192729][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.201356][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.204302][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 661.208884][ T3673] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 661.225857][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 661.253474][ T3675] usb 4-1: USB disconnect, device number 15 [ 661.253623][ T3673] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 661.267689][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.275052][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.294591][ T3673] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 661.306449][ T3673] usb 1-1: USB disconnect, device number 125 [ 661.313915][ T6] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 661.321917][ T6] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 661.330457][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.356188][ T6] usb 2-1: USB disconnect, device number 48 [ 661.362548][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.402704][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.442619][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 661.473425][ T14] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 661.481437][ T14] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 661.512760][ T14] usb 6-1: USB disconnect, device number 44 18:22:11 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x5865, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:11 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:11 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x3b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 661.806470][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x3e}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6558, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 661.908400][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x9260, 0x4) ftruncate(r4, 0x200002) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 18:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x41}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 661.982277][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 662.072615][ T4314] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 662.072680][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 662.122662][ T6] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 662.312568][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 662.342684][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 662.373445][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 662.432744][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.443068][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.454278][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 662.464379][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 662.474362][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.492851][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.503270][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.514586][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.525412][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 662.535217][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.546118][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 662.555822][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 662.562629][ T4314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 662.565539][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.582037][ T4314] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 662.587494][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 662.587528][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.618221][ T4314] usb 1-1: Manufacturer: syz [ 662.625184][ T4314] usb 1-1: config 0 descriptor?? [ 662.672843][ T14] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 662.681903][ T14] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 662.690275][ T6] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 662.699568][ T6] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 662.707879][ T14] usb 4-1: Manufacturer: syz [ 662.713318][ T6] usb 2-1: Manufacturer: syz [ 662.727596][ T14] usb 4-1: config 0 descriptor?? [ 662.741361][ T6] usb 2-1: config 0 descriptor?? [ 662.865092][T15942] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.872650][T15942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.880914][T15942] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.888389][T15942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.896660][T15942] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.904773][T15942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.913168][T15942] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.920533][T15942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.929398][T15942] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.937101][T15942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 662.986357][T15941] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.990930][T15944] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.001286][T15944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.002686][T15941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.018400][T15944] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.021338][T15941] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.026360][T15944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.033450][ T4314] rc_core: IR keymap rc-hauppauge not found [ 663.046247][T15944] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.054424][ T4314] Registered IR keymap rc-empty [ 663.055607][T15941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.059436][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.076924][T15944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.082114][T15941] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.088781][T15944] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.091901][T15941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.094210][T15941] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.099432][T15944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.107120][T15941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.129163][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.133849][T15941] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.144585][T15941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.156883][T15944] UDC core: couldn't find an available UDC or it's busy: -16 [ 663.164406][T15944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 663.173076][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 663.191646][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input223 [ 663.209049][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.242744][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.252556][ T14] rc_core: IR keymap rc-hauppauge not found [ 663.258660][ T14] Registered IR keymap rc-empty [ 663.264176][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.272556][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.272831][ T6] rc_core: IR keymap rc-hauppauge not found [ 663.285853][ T6] Registered IR keymap rc-empty [ 663.290735][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.298100][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.302869][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.342712][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.343204][ T14] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 663.362638][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.370383][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input224 [ 663.381864][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.393248][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.403326][ T6] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2 [ 663.417248][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc2/input225 [ 663.422711][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.430944][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.454763][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.472762][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.472761][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.487174][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.502578][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.532564][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 663.532842][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.547409][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.563951][ T4314] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 663.571954][ T4314] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 663.591456][ T4314] usb 1-1: USB disconnect, device number 126 [ 663.598618][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.606445][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.642605][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.650260][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.682603][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.689890][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.732685][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.744140][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.783685][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.790981][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.832660][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.840013][ T14] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 663.872633][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.880811][ T14] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 663.889181][ T14] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 663.900910][ T14] usb 4-1: USB disconnect, device number 16 [ 663.923590][ T6] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 663.931608][ T6] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 663.957935][ T6] usb 2-1: USB disconnect, device number 49 18:22:14 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6800, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x9260, 0x4) (async) ftruncate(r4, 0x200002) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 18:22:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x43}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:14 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:14 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 664.425480][T15974] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x9260, 0x4) ftruncate(r4, 0x200002) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) close(r2) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x9260, 0x4) (async) ftruncate(r4, 0x200002) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendfile(r2, r4, 0x0, 0x80001d00c0d0) (async) 18:22:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6c00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x7400, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 664.568946][T15988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 664.666297][T15993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 664.676226][ T6] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 664.702534][ T4314] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 664.722871][ T3675] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 664.922529][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 664.972510][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 664.994062][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 665.042601][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.057322][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.068908][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.084922][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 665.097101][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.112885][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.123604][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.135037][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.145487][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.155732][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.166876][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 665.176973][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.187196][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.192798][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.200643][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 665.216172][ T6] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.219299][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.231671][ T6] usb 4-1: Manufacturer: syz [ 665.255306][ T6] usb 4-1: config 0 descriptor?? [ 665.292941][ T4314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.302041][ T4314] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.310118][ T4314] usb 1-1: Manufacturer: syz [ 665.315061][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.325523][ T4314] usb 1-1: config 0 descriptor?? [ 665.330572][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.338661][ T3675] usb 2-1: Manufacturer: syz [ 665.350129][ T3675] usb 2-1: config 0 descriptor?? [ 665.501302][T15971] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.508802][T15971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.518077][T15971] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.525531][T15971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.535011][T15971] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.542395][T15971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.552118][T15971] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.559570][T15971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.568065][T15971] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.575503][T15971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.575825][T15973] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.590715][T15973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.605769][T15979] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.616995][T15973] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.624558][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.626336][T15973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.639347][T15979] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.647287][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.649772][T15973] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.662279][T15973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.662537][T15979] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.672638][ T6] rc_core: IR keymap rc-hauppauge not found [ 665.683421][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.685612][T15973] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.692834][ T6] Registered IR keymap rc-empty [ 665.704599][T15973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.706155][T15979] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.719913][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.721855][T15973] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.728888][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.746251][T15979] UDC core: couldn't find an available UDC or it's busy: -16 [ 665.753797][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.753856][T15973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.760974][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 665.783180][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 665.816087][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input226 [ 665.850395][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.862871][ T4314] rc_core: IR keymap rc-hauppauge not found [ 665.868789][ T4314] Registered IR keymap rc-empty [ 665.878118][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 665.884015][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.885369][ T3675] rc_core: IR keymap rc-hauppauge not found [ 665.904208][ T3675] Registered IR keymap rc-empty [ 665.909181][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 665.923294][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.942737][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 665.950024][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 665.952685][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.992645][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 665.993238][ T4314] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 666.015420][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 666.022676][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 666.030312][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input228 [ 666.049305][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input227 [ 666.068095][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.075843][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.102759][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 666.122803][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.130241][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.132678][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 666.172701][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 666.172861][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.187245][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.202581][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 666.222653][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.231633][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.234549][ T6] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 666.247326][ T6] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.258232][ T6] usb 4-1: USB disconnect, device number 17 [ 666.272881][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.280186][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.312543][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.319810][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.352650][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.359847][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.382826][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.402575][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.432510][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.442885][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.462663][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.482669][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 666.494584][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 666.503174][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.518628][ T3675] usb 2-1: USB disconnect, device number 50 [ 666.533598][ T4314] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 666.541819][ T4314] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.568895][ T4314] usb 1-1: USB disconnect, device number 127 18:22:17 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x9260, 0x4) ftruncate(r4, 0x200002) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 18:22:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x7a00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:17 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:17 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 667.015127][T16005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x80fe, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x8100, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 667.158244][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 667.276928][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xc0fe, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 667.322632][ T3675] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 667.364762][ T4314] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 667.388921][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.452776][T15470] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 667.592577][ T3675] usb 2-1: Using ep0 maxpacket: 16 [ 667.652624][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 667.712798][T15470] usb 1-1: Using ep0 maxpacket: 16 [ 667.718072][ T3675] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.728567][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.739915][ T3675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.750031][ T3675] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.760164][ T3675] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.773552][ T4314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.783910][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.795244][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.805023][ T4314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.815059][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.832768][T15470] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.843559][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.855225][T15470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.865281][ T3675] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.874615][T15470] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.884350][ T3675] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.892348][ T3675] usb 2-1: Manufacturer: syz [ 667.897315][T15470] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.911941][ T3675] usb 2-1: config 0 descriptor?? [ 667.917291][ T4314] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.926598][ T4314] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.934847][ T4314] usb 4-1: Manufacturer: syz [ 667.942981][ T4314] usb 4-1: config 0 descriptor?? [ 668.032902][T15470] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 668.041991][T15470] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 668.050075][T15470] usb 1-1: Manufacturer: syz [ 668.058397][T15470] usb 1-1: config 0 descriptor?? [ 668.186612][T16007] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.186711][T16009] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.194107][T16007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.195023][T16007] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.205044][T16009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.209720][T16007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.226027][T16009] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.235275][T16007] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.246349][T16009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.252125][T16007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.265400][T16009] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.266790][T16007] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.280058][T16009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.281704][T16007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.289061][T16009] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.299612][T16007] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.310401][T16007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.310940][T16009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.327547][T16015] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.335253][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.336663][T16009] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.344878][T16015] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.357755][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.361884][T16009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.369351][T16015] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.380504][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.392629][T16015] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.400197][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.409493][T16015] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.417016][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.452657][ T3675] rc_core: IR keymap rc-hauppauge not found [ 668.458582][ T3675] Registered IR keymap rc-empty [ 668.464671][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.497873][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.505381][ T4314] rc_core: IR keymap rc-hauppauge not found [ 668.511291][ T4314] Registered IR keymap rc-empty [ 668.516517][T15470] rc_core: IR keymap rc-hauppauge not found [ 668.522553][T15470] Registered IR keymap rc-empty [ 668.527551][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.534912][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.574436][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 668.587670][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.594937][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.602935][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input229 [ 668.618338][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.626124][ T4314] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 668.639195][T15470] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 668.652694][T15470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input231 [ 668.667800][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input230 [ 668.681230][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.691545][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.698854][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.712633][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.732798][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.740332][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.747731][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.793689][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.800897][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.808102][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.829694][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.852773][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.860003][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.867386][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.912638][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.919903][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.927293][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 668.972635][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 668.981597][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 668.988999][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 669.032832][ T3675] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 669.040082][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 669.047393][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.064439][ T3675] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 669.072546][ T3675] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.083762][ T3675] usb 2-1: USB disconnect, device number 51 [ 669.092628][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 669.099840][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.132680][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.139927][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 669.162790][ T4314] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 669.182713][T15470] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 669.193969][ T4314] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 669.201950][ T4314] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.216557][ T4314] usb 4-1: USB disconnect, device number 18 [ 669.225852][T15470] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 669.234096][T15470] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.247294][T15470] usb 1-1: USB disconnect, device number 2 18:22:19 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x38000, 0xffff, 0x3, 0x6]}, &(0x7f0000000180)=0x54) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES16], 0xfc30) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x94) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) 18:22:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x2}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:19 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 669.564354][T16034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:19 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) (async, rerun: 32) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 32) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x38000, 0xffff, 0x3, 0x6]}, &(0x7f0000000180)=0x54) (async) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES16], 0xfc30) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x94) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (rerun: 32) 18:22:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf819, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x3}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) (async) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) (async) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x38000, 0xffff, 0x3, 0x6]}, &(0x7f0000000180)=0x54) (async) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES16], 0xfc30) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x94) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) 18:22:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x4}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfc00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 669.727732][T16049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.832340][T16060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.881331][T15470] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 669.962668][ T3675] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 670.002506][ T6] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 670.152566][T15470] usb 2-1: Using ep0 maxpacket: 16 [ 670.212698][ T3675] usb 1-1: Using ep0 maxpacket: 16 [ 670.242514][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 670.312684][T15470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.322958][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.334342][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.344365][T15470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.354378][T15470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.362712][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.367637][ T3675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.387643][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.395749][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.409712][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.409746][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.409779][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.442514][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.452161][ T3675] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.461920][ T3675] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.483063][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.492194][ T6] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.502967][T15470] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.506515][ T6] usb 4-1: Manufacturer: syz [ 670.512486][T15470] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.525875][T15470] usb 2-1: Manufacturer: syz [ 670.538827][ T6] usb 4-1: config 0 descriptor?? [ 670.540848][T15470] usb 2-1: config 0 descriptor?? [ 670.572743][ T3675] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.581884][ T3675] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.590803][ T3675] usb 1-1: Manufacturer: syz [ 670.607551][ T3675] usb 1-1: config 0 descriptor?? [ 670.784649][T16050] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.792061][T16050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.797984][T16038] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.800847][T16050] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.814367][T16050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.814509][T16038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.825897][T16050] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.836898][T16050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.848309][T16038] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.856992][T16050] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.865974][T16050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.866550][T16041] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.873572][T16038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.889448][T16038] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.896509][T16041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.898071][T16050] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.912074][T16038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.917514][T16041] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.920048][T16050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.928741][T16041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.935892][T16038] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.947829][T16041] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.957108][T16041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.960136][T16038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.966700][T16041] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.980132][T16041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.985539][T16038] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.995269][T16038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 671.003782][T16041] UDC core: couldn't find an available UDC or it's busy: -16 [ 671.011321][T16041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 671.062662][ T6] rc_core: IR keymap rc-hauppauge not found [ 671.068988][ T6] Registered IR keymap rc-empty [ 671.074211][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.082723][T15470] rc_core: IR keymap rc-hauppauge not found [ 671.088633][T15470] Registered IR keymap rc-empty [ 671.098256][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.102572][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.105465][ T3675] rc_core: IR keymap rc-hauppauge not found [ 671.118492][ T3675] Registered IR keymap rc-empty [ 671.129214][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.143849][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 671.156695][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.158350][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input232 [ 671.172674][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.179900][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.203844][T15470] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 671.212717][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.219632][ T3675] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2 [ 671.240486][T15470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input233 [ 671.252696][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.256157][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc2/input234 [ 671.280819][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.289713][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.292753][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.313508][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.332631][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.339729][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.346958][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.362639][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.382623][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.390006][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.399602][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.414173][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.422757][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.432652][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.442527][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.452900][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.462640][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.482746][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.489990][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.492675][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 671.532800][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.534271][ T6] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 671.540130][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.557280][ T6] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 671.580467][ T6] usb 4-1: USB disconnect, device number 19 [ 671.600155][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.607518][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.644055][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 671.651256][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.676452][T15470] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 671.684850][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 671.692054][T15470] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 671.703677][T15470] usb 2-1: USB disconnect, device number 52 [ 671.733905][ T3675] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 671.751234][ T3675] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 671.781824][ T3675] usb 1-1: USB disconnect, device number 3 18:22:22 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:22 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000019cf0341d812010085de010203010948210001000000000904000000bed54c0009058502000400002836b73f5f8ffb002498eff0f20cf90c2fc583c48086d1814708a72d3fad057fbd7bf1013a6ce3b83e9c7dbd8e54f07fef758772ba9e8c917492a8c351163db8d0e65e3944231d12d1031cf2fb83301f1277ae05f4e0972006a2b7805ffa2882424d5b08814b64ac6e05581d"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/94, 0x5e) r2 = openat$zero(0xffffff9c, &(0x7f0000000740), 0x54300, 0x0) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f00000000c0)=""/152, 0x98}], 0x3, 0x8, 0x1f, 0x1) syz_usb_disconnect(r0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x40, 0x9, 0x4, {0x4, 0x30, "3796"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "d90098c1"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xd3e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000980)={0x20, 0xa, 0xdd, "6174dac93c79ae834f81e1fea7aaa44ce4d212128133174f89cd92ed1140a26e718c7b190c66f2daa2b113c58439bcb10b285b3bdbf65cdf97b286685ff78debe01e6f20b54ecf5f94293857a700a28d5fd7df6d55bfa12572a161f3fbe96db3823abce2ba4237c9307d1db9b3c07c2d09fe8e3cb095283ad7882f64c8f717d50f539534dcc7a61b7e08e64d8f0160c1c688e2d8fc90c69f7b7a4e3f4ba33e08266cfe647ebdb58a5813007d47dd5499ecb672cd408e3069db7e2d84819e39ca7792b056b2f3f357957af21bc688a09e67ea1939ff9fb357b8ad65c1db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)=ANY=[@ANYBLOB="20017a000000b9d923235ce814cc0c1cbaa98fecac163161caa6e075098fa61ca871e9c9356209df36a76e8d1f16de3fc6cd3a7f2467f2cae7b84bc02582ffe52b5a7f6af907335c327537074efd07a2b28c95a495daef60c9ad58dbb374b48f8ce5c9f8faeb8e710498cc7c25c1735c3c75d41816f17110d879c1d100000000"], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x9}}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x42, 0xea, &(0x7f0000000480)="44a86d977e1833580bdbfe81945394144c71fa246f8222c5adbbd71cb53294c4e39d30bb774b42694b1f436b67ed12bd8db1140af69d671a211c8f06c57ad2c1a60e", &(0x7f0000000500)=""/234, 0x101, 0x0, 0x70, 0x1d, &(0x7f0000000600)="71404acb177ca5c34dafb7f9e325f85b51b00b26464f9815b4fdeeebe3040dc1dea2d1a650aba78223b26cf1389803bfb74995bcc921e1830980f6a9f50642ea8fe7e85ac7b73571ddcafd8cadab767eec132be08723548d3f1bbe08f0624a0f76d091412905318a317e2f4dc2324576", &(0x7f0000000680)="bf0704fbdd7f722ea91d21b2d51ea6fbd319ba574d642341b3dc73403e", 0x1, 0x9}, 0x48) 18:22:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfe80, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x5}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:22 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:22 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x6}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfec0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 672.194083][T16069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x7}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xff00, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 672.312005][T16082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x34000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 672.369929][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 672.427067][T16088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.472578][ T3715] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 672.502902][T15470] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 672.512783][ T6] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 672.572521][ T3675] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 672.672663][ T3715] usb 6-1: device descriptor read/64, error 18 [ 672.762568][T15470] usb 2-1: Using ep0 maxpacket: 16 [ 672.772636][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 672.812531][ T3675] usb 1-1: Using ep0 maxpacket: 16 [ 672.882705][T15470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.893222][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.904203][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 672.912700][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.914104][T15470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 672.930748][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.934223][ T3675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.944827][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 672.956308][T15470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.964933][ T3715] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 672.978470][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.996046][ T6] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 672.997130][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 673.016805][ T3675] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 673.026845][ T3675] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.026865][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.072699][T15470] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.081911][T15470] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 673.090378][T15470] usb 2-1: Manufacturer: syz [ 673.102672][T15470] usb 2-1: config 0 descriptor?? [ 673.112747][ T3675] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.121785][ T3675] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 673.129897][ T3675] usb 1-1: Manufacturer: syz [ 673.137362][ T3675] usb 1-1: config 0 descriptor?? [ 673.143127][ T6] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.159725][ T6] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 673.167859][ T6] usb 4-1: Manufacturer: syz [ 673.178848][ T6] usb 4-1: config 0 descriptor?? [ 673.233925][ T3715] usb 6-1: device descriptor read/64, error 18 [ 673.352785][ T3715] usb usb6-port1: attempt power cycle [ 673.361646][T16074] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.369237][T16074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.379110][T16074] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.391930][T16074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.400994][T16080] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.409554][T16080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.416518][T16074] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.418642][T16080] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.432192][T16080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.433853][T16074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.442163][T16076] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.457832][T16074] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.458575][T16080] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.465270][T16074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.466069][T16074] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.473129][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.483473][T16074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.489852][T16080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.509670][T16076] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.514585][T16080] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.531480][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.531835][T16080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.540537][T16076] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.566662][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.569677][T16080] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.582212][T16080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.583718][T16076] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.599882][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.611538][T16076] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.612502][T15470] rc_core: IR keymap rc-hauppauge not found [ 673.626286][T16076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.632916][T15470] Registered IR keymap rc-empty [ 673.645541][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.682670][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.692564][ T3675] rc_core: IR keymap rc-hauppauge not found [ 673.698469][ T3675] Registered IR keymap rc-empty [ 673.703660][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.713061][T15470] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 673.726709][T15470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input235 [ 673.732520][ T6] rc_core: IR keymap rc-hauppauge not found [ 673.740388][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.756259][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.759839][ T6] Registered IR keymap rc-empty [ 673.773755][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 673.783162][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 673.792570][ T3715] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 673.797469][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.811060][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 673.813694][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input236 [ 673.843561][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.852708][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.853206][ T6] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 673.872684][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.881522][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input237 [ 673.883301][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.897620][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 673.902982][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.922861][ T3715] usb 6-1: Invalid ep0 maxpacket: 65 [ 673.936918][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 673.944384][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.951603][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 673.982646][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 673.982731][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 673.998050][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 674.013133][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.032664][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 674.039967][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 674.053082][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.072658][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 674.079935][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 674.092748][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.100396][ T3715] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 674.112805][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 674.120181][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 674.132785][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.152616][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 674.160011][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 674.172839][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.193522][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 674.201541][T15470] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 674.209755][T15470] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 674.212601][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.220887][T15470] usb 2-1: USB disconnect, device number 53 [ 674.230586][ T3715] usb 6-1: Invalid ep0 maxpacket: 65 [ 674.234229][ T3675] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 674.242611][ T3715] usb usb6-port1: unable to enumerate USB device [ 674.250755][ T3675] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 674.283024][ T3675] usb 1-1: USB disconnect, device number 4 [ 674.292576][ T6] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.323829][ T6] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 674.331834][ T6] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 674.355311][ T6] usb 4-1: USB disconnect, device number 20 18:22:24 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 674.952543][ T6] usb 2-1: new high-speed USB device number 54 using dummy_hcd 18:22:25 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000019cf0341d812010085de010203010948210001000000000904000000bed54c0009058502000400002836b73f5f8ffb002498eff0f20cf90c2fc583c48086d1814708a72d3fad057fbd7bf1013a6ce3b83e9c7dbd8e54f07fef758772ba9e8c917492a8c351163db8d0e65e3944231d12d1031cf2fb83301f1277ae05f4e0972006a2b7805ffa2882424d5b08814b64ac6e05581d"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/94, 0x5e) r2 = openat$zero(0xffffff9c, &(0x7f0000000740), 0x54300, 0x0) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f00000000c0)=""/152, 0x98}], 0x3, 0x8, 0x1f, 0x1) syz_usb_disconnect(r0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x40, 0x9, 0x4, {0x4, 0x30, "3796"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "d90098c1"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xd3e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000980)={0x20, 0xa, 0xdd, "6174dac93c79ae834f81e1fea7aaa44ce4d212128133174f89cd92ed1140a26e718c7b190c66f2daa2b113c58439bcb10b285b3bdbf65cdf97b286685ff78debe01e6f20b54ecf5f94293857a700a28d5fd7df6d55bfa12572a161f3fbe96db3823abce2ba4237c9307d1db9b3c07c2d09fe8e3cb095283ad7882f64c8f717d50f539534dcc7a61b7e08e64d8f0160c1c688e2d8fc90c69f7b7a4e3f4ba33e08266cfe647ebdb58a5813007d47dd5499ecb672cd408e3069db7e2d84819e39ca7792b056b2f3f357957af21bc688a09e67ea1939ff9fb357b8ad65c1db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)=ANY=[@ANYBLOB="20017a000000b9d923235ce814cc0c1cbaa98fecac163161caa6e075098fa61ca871e9c9356209df36a76e8d1f16de3fc6cd3a7f2467f2cae7b84bc02582ffe52b5a7f6af907335c327537074efd07a2b28c95a495daef60c9ad58dbb374b48f8ce5c9f8faeb8e710498cc7c25c1735c3c75d41816f17110d879c1d100000000"], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x9}}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x42, 0xea, &(0x7f0000000480)="44a86d977e1833580bdbfe81945394144c71fa246f8222c5adbbd71cb53294c4e39d30bb774b42694b1f436b67ed12bd8db1140af69d671a211c8f06c57ad2c1a60e", &(0x7f0000000500)=""/234, 0x101, 0x0, 0x70, 0x1d, &(0x7f0000000600)="71404acb177ca5c34dafb7f9e325f85b51b00b26464f9815b4fdeeebe3040dc1dea2d1a650aba78223b26cf1389803bfb74995bcc921e1830980f6a9f50642ea8fe7e85ac7b73571ddcafd8cadab767eec132be08723548d3f1bbe08f0624a0f76d091412905318a317e2f4dc2324576", &(0x7f0000000680)="bf0704fbdd7f722ea91d21b2d51ea6fbd319ba574d642341b3dc73403e", 0x1, 0x9}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000019cf0341d812010085de010203010948210001000000000904000000bed54c0009058502000400002836b73f5f8ffb002498eff0f20cf90c2fc583c48086d1814708a72d3fad057fbd7bf1013a6ce3b83e9c7dbd8e54f07fef758772ba9e8c917492a8c351163db8d0e65e3944231d12d1031cf2fb83301f1277ae05f4e0972006a2b7805ffa2882424d5b08814b64ac6e05581d"], 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) read$char_usb(r1, &(0x7f00000001c0)=""/94, 0x5e) (async) openat$zero(0xffffff9c, &(0x7f0000000740), 0x54300, 0x0) (async) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f00000000c0)=""/152, 0x98}], 0x3, 0x8, 0x1f, 0x1) (async) syz_usb_disconnect(r0) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x40, 0x9, 0x4, {0x4, 0x30, "3796"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "d90098c1"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xd3e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000980)={0x20, 0xa, 0xdd, "6174dac93c79ae834f81e1fea7aaa44ce4d212128133174f89cd92ed1140a26e718c7b190c66f2daa2b113c58439bcb10b285b3bdbf65cdf97b286685ff78debe01e6f20b54ecf5f94293857a700a28d5fd7df6d55bfa12572a161f3fbe96db3823abce2ba4237c9307d1db9b3c07c2d09fe8e3cb095283ad7882f64c8f717d50f539534dcc7a61b7e08e64d8f0160c1c688e2d8fc90c69f7b7a4e3f4ba33e08266cfe647ebdb58a5813007d47dd5499ecb672cd408e3069db7e2d84819e39ca7792b056b2f3f357957af21bc688a09e67ea1939ff9fb357b8ad65c1db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)=ANY=[@ANYBLOB="20017a000000b9d923235ce814cc0c1cbaa98fecac163161caa6e075098fa61ca871e9c9356209df36a76e8d1f16de3fc6cd3a7f2467f2cae7b84bc02582ffe52b5a7f6af907335c327537074efd07a2b28c95a495daef60c9ad58dbb374b48f8ce5c9f8faeb8e710498cc7c25c1735c3c75d41816f17110d879c1d100000000"], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x9}}) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x42, 0xea, &(0x7f0000000480)="44a86d977e1833580bdbfe81945394144c71fa246f8222c5adbbd71cb53294c4e39d30bb774b42694b1f436b67ed12bd8db1140af69d671a211c8f06c57ad2c1a60e", &(0x7f0000000500)=""/234, 0x101, 0x0, 0x70, 0x1d, &(0x7f0000000600)="71404acb177ca5c34dafb7f9e325f85b51b00b26464f9815b4fdeeebe3040dc1dea2d1a650aba78223b26cf1389803bfb74995bcc921e1830980f6a9f50642ea8fe7e85ac7b73571ddcafd8cadab767eec132be08723548d3f1bbe08f0624a0f76d091412905318a317e2f4dc2324576", &(0x7f0000000680)="bf0704fbdd7f722ea91d21b2d51ea6fbd319ba574d642341b3dc73403e", 0x1, 0x9}, 0x48) (async) 18:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x400300, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x9}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:25 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:25 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0xe}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xe0ffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 675.215949][T16106] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.222703][ T6] usb 2-1: Using ep0 maxpacket: 16 18:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0xf}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x60}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf0ffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 675.301893][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 675.363020][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.380147][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.396497][T16118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.406621][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 675.427289][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 675.445031][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.467300][ T3675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 675.482633][ T3715] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 675.562784][ T6] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 675.576670][ T6] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.585085][ T6] usb 2-1: Manufacturer: syz [ 675.592185][ T6] usb 2-1: config 0 descriptor?? [ 675.652585][T15470] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 675.712537][ T3675] usb 1-1: Using ep0 maxpacket: 16 [ 675.742562][ T3715] usb 4-1: Using ep0 maxpacket: 16 [ 675.832639][ T3675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.844258][T16098] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.851641][T16098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.859397][T15470] usb 6-1: device descriptor read/64, error 18 [ 675.862711][T16098] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.870727][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.881423][T16098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.883921][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 675.900545][T16098] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.901268][ T3675] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 675.918089][ T3715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.926221][ T3675] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.941505][ T3715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.952649][T16098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.961399][ T3715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 675.966083][T16098] UDC core: couldn't find an available UDC or it's busy: -16 [ 675.976138][ T3715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 675.978963][T16098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 675.991097][ T3715] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.000878][T16098] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.016354][T16098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.032756][ T3675] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 676.052518][ T3675] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 676.060528][ T3675] usb 1-1: Manufacturer: syz [ 676.067527][ T3675] usb 1-1: config 0 descriptor?? [ 676.122929][ T3715] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 676.132008][ T3715] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 676.140186][ T6] rc_core: IR keymap rc-hauppauge not found [ 676.142632][T15470] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 676.154114][ T6] Registered IR keymap rc-empty [ 676.159005][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.170221][ T3715] usb 4-1: Manufacturer: syz [ 676.178728][ T3715] usb 4-1: config 0 descriptor?? [ 676.202645][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.243283][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 676.257557][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input238 [ 676.273760][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.315105][T16104] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.322599][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.322644][T16104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.342014][T16104] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.342532][T15470] usb 6-1: device descriptor read/64, error 18 [ 676.350062][T16104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.364181][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.367217][T16104] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.379053][T16104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.388893][T16104] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.396723][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.404274][T16104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.413525][T16104] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.421118][T16104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.430968][T16105] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.438502][T16105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.446600][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.455829][T16105] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.463632][T16105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.472129][T16105] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.479784][T16105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.487588][T15470] usb usb6-port1: attempt power cycle [ 676.488531][T16105] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.500789][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.501791][T16105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.515821][ T3675] rc_core: IR keymap rc-hauppauge not found [ 676.521724][ T3675] Registered IR keymap rc-empty [ 676.526847][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.527283][T16105] UDC core: couldn't find an available UDC or it's busy: -16 [ 676.542537][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.551528][T16105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 676.562570][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.572928][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.602912][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 676.612632][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.617326][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input239 [ 676.638341][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.642651][ T3715] rc_core: IR keymap rc-hauppauge not found [ 676.652148][ T3715] Registered IR keymap rc-empty [ 676.658702][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 676.666150][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.672689][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.702623][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.712739][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.720589][ T6] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 676.728761][ T6] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 676.732779][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.740726][ T6] usb 2-1: USB disconnect, device number 54 [ 676.765691][ T3715] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2 [ 676.782803][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.784054][ T3715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc2/input240 [ 676.813681][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.825495][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.852709][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.862658][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.892632][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.903326][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.922681][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.929884][T15470] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 676.942716][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.952703][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 676.982909][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.992788][ T3675] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 677.000789][ T3675] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 677.012681][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 677.022734][T15470] usb 6-1: Invalid ep0 maxpacket: 65 [ 677.031510][ T3673] usb 1-1: USB disconnect, device number 5 [ 677.052657][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 677.092674][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 677.132664][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 677.162997][ T3715] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 677.172633][T15470] usb 6-1: new high-speed USB device number 52 using dummy_hcd 18:22:27 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 677.195260][ T3715] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 677.203644][ T3715] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 677.246400][ T3675] usb 4-1: USB disconnect, device number 21 [ 677.262808][T15470] usb 6-1: Invalid ep0 maxpacket: 65 [ 677.268870][T15470] usb usb6-port1: unable to enumerate USB device [ 677.532644][ T3715] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 677.773816][ T3715] usb 2-1: Using ep0 maxpacket: 16 [ 677.902949][ T3715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.913208][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.924963][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 677.935005][ T3715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 677.945236][ T3715] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.042746][ T3715] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.051988][ T3715] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.060274][ T3715] usb 2-1: Manufacturer: syz [ 678.069704][ T3715] usb 2-1: config 0 descriptor?? 18:22:28 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000019cf0341d812010085de010203010948210001000000000904000000bed54c0009058502000400002836b73f5f8ffb002498eff0f20cf90c2fc583c48086d1814708a72d3fad057fbd7bf1013a6ce3b83e9c7dbd8e54f07fef758772ba9e8c917492a8c351163db8d0e65e3944231d12d1031cf2fb83301f1277ae05f4e0972006a2b7805ffa2882424d5b08814b64ac6e05581d"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async, rerun: 32) read$char_usb(r1, &(0x7f00000001c0)=""/94, 0x5e) (async, rerun: 32) r2 = openat$zero(0xffffff9c, &(0x7f0000000740), 0x54300, 0x0) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f00000000c0)=""/152, 0x98}], 0x3, 0x8, 0x1f, 0x1) (async) syz_usb_disconnect(r0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x40, 0x9, 0x4, {0x4, 0x30, "3796"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "d90098c1"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xd3e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000980)={0x20, 0xa, 0xdd, "6174dac93c79ae834f81e1fea7aaa44ce4d212128133174f89cd92ed1140a26e718c7b190c66f2daa2b113c58439bcb10b285b3bdbf65cdf97b286685ff78debe01e6f20b54ecf5f94293857a700a28d5fd7df6d55bfa12572a161f3fbe96db3823abce2ba4237c9307d1db9b3c07c2d09fe8e3cb095283ad7882f64c8f717d50f539534dcc7a61b7e08e64d8f0160c1c688e2d8fc90c69f7b7a4e3f4ba33e08266cfe647ebdb58a5813007d47dd5499ecb672cd408e3069db7e2d84819e39ca7792b056b2f3f357957af21bc688a09e67ea1939ff9fb357b8ad65c1db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)=ANY=[@ANYBLOB="20017a000000b9d923235ce814cc0c1cbaa98fecac163161caa6e075098fa61ca871e9c9356209df36a76e8d1f16de3fc6cd3a7f2467f2cae7b84bc02582ffe52b5a7f6af907335c327537074efd07a2b28c95a495daef60c9ad58dbb374b48f8ce5c9f8faeb8e710498cc7c25c1735c3c75d41816f17110d879c1d100000000"], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x9}}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x42, 0xea, &(0x7f0000000480)="44a86d977e1833580bdbfe81945394144c71fa246f8222c5adbbd71cb53294c4e39d30bb774b42694b1f436b67ed12bd8db1140af69d671a211c8f06c57ad2c1a60e", &(0x7f0000000500)=""/234, 0x101, 0x0, 0x70, 0x1d, &(0x7f0000000600)="71404acb177ca5c34dafb7f9e325f85b51b00b26464f9815b4fdeeebe3040dc1dea2d1a650aba78223b26cf1389803bfb74995bcc921e1830980f6a9f50642ea8fe7e85ac7b73571ddcafd8cadab767eec132be08723548d3f1bbe08f0624a0f76d091412905318a317e2f4dc2324576", &(0x7f0000000680)="bf0704fbdd7f722ea91d21b2d51ea6fbd319ba574d642341b3dc73403e", 0x1, 0x9}, 0x48) 18:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x1000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x2}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:28 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:28 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x3}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x2000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 678.273150][T16135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.325385][T16128] UDC core: couldn't find an available UDC or it's busy: -16 [ 678.348916][T16128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.355915][T16140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.368270][T16128] UDC core: couldn't find an available UDC or it's busy: -16 18:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x3000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x4}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 678.382360][T16128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.403635][T16128] UDC core: couldn't find an available UDC or it's busy: -16 18:22:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x4000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x5}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 678.429806][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.445595][T16128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.457212][T16128] UDC core: couldn't find an available UDC or it's busy: -16 [ 678.474712][T16128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.503794][T16148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.513779][T16128] UDC core: couldn't find an available UDC or it's busy: -16 [ 678.522629][T16128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 678.532540][T14638] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 678.540640][ T3675] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 678.642668][ T3715] rc_core: IR keymap rc-hauppauge not found [ 678.648692][ T3715] Registered IR keymap rc-empty [ 678.654166][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.683052][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.723381][ T3715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 678.737111][ T3715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input241 [ 678.753753][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.762781][ T3673] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 678.782601][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.792695][ T3675] usb 1-1: Using ep0 maxpacket: 16 [ 678.798048][T14638] usb 4-1: Using ep0 maxpacket: 16 [ 678.813158][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.845121][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.883825][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.922640][T14638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.922838][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.933029][ T3675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.950477][T14638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.962274][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.973393][T14638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.982649][ T3673] usb 6-1: device descriptor read/64, error 18 [ 678.983880][ T3675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.992552][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 678.999247][T14638] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 679.016472][ T3675] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 679.026251][T14638] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.039678][ T3675] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.062911][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.102645][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.132798][T14638] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 679.141956][ T3675] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 679.142767][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 679.155879][T14638] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 679.166456][ T3675] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 679.174597][ T3675] usb 1-1: Manufacturer: syz [ 679.179825][T14638] usb 4-1: Manufacturer: syz [ 679.186328][ T3675] usb 1-1: config 0 descriptor?? [ 679.195079][ T3715] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 679.195233][T14638] usb 4-1: config 0 descriptor?? [ 679.207892][ T3715] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 679.242799][ T3715] usb 2-1: USB disconnect, device number 55 [ 679.262528][ T3673] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 679.428043][T16132] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.435677][T16132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.444302][T16132] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.453542][T16133] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.460944][T16133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.468991][T16132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.477498][T16132] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.482937][ T3673] usb 6-1: device descriptor read/64, error 18 [ 679.486074][T16133] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.498962][T16132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.502505][T16133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.507764][T16132] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.522392][T16132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.526117][T16133] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.534640][T16132] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.538774][T16133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.552898][T16132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.564544][T16133] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.572139][T16133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.580583][T16133] UDC core: couldn't find an available UDC or it's busy: -16 [ 679.596204][T16133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.609536][ T3673] usb usb6-port1: attempt power cycle [ 679.642597][ T3675] rc_core: IR keymap rc-hauppauge not found [ 679.648806][ T3675] Registered IR keymap rc-empty [ 679.654169][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 18:22:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x6}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 679.682902][T14638] rc_core: IR keymap rc-hauppauge not found [ 679.688857][T14638] Registered IR keymap rc-empty [ 679.694846][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.702218][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.742592][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.750222][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 679.763784][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input242 [ 679.781124][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.793154][T14638] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 679.806540][T14638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input243 [ 679.820179][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.832293][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.852649][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.862677][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.884034][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.892682][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.912680][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.922948][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.942731][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.952959][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 679.972564][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 679.982978][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 680.002649][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 680.013247][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 680.032635][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 680.032776][ T3673] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 680.048605][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 680.068016][ T3675] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 680.082698][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 680.113750][ T3675] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 680.121842][T14638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 680.129691][ T3675] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 680.146830][ T3673] usb 6-1: Invalid ep0 maxpacket: 65 [ 680.158141][ T3675] usb 1-1: USB disconnect, device number 6 [ 680.165466][T14638] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 680.175363][T14638] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 680.217601][T14638] usb 4-1: USB disconnect, device number 22 [ 680.302752][ T3673] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 680.404512][ T3673] usb 6-1: Invalid ep0 maxpacket: 65 [ 680.410164][ T3673] usb usb6-port1: unable to enumerate USB device 18:22:31 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x5000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x7}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:31 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:31 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:31 executing program 5: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x22, 0x70, {0x70, 0x24, "bdb164e2f0a687cf16673c57782a3d260bdb6828037eed194ab3449106a000692b2e743bf64e9efb7566ad3bab0ea4406ca3917049da3c269d7639d25397948abf986169d3ecadad0455bd2b046060047cb4c10c13f80f0874846f5be6605146f688866726e7c1ca1192d95e6529"}}, &(0x7f0000000080)={0x0, 0x3, 0x97, @string={0x97, 0x3, "53b17186683acff383383603d4ba368c701dd5bafcb0f8eda3f01bbab657257ca9fb52fbfff9ebe0e41d013a903c74ac8c764c80a4acfc8d47f7ba2181764effa4c9f52c37f88cf44ec9bef76f3cba6569597dc2d0a7ba5235c4cce28e2bff66698d5a2fd5505d848b65b492d862e09a1b18ca4f29d752d06f2a5c0e6821794c8439157bb94fd3ba2d97c8cf804b85cd7a335c04ea"}}, &(0x7f0000000140)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x74, 0x2, 0x6, 0xf0f, 0x3, [0xde, 0xf]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x0, 0x7, "51bf3cd2", "ded8dd59"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xff, 0x4, 0x80, 0x1, 0x62}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x48, "47cf212e4ee5192b6b1f7275df42e5c2c985f3264fcbdfc626d17444410433f43bd315ff74f338aeb1db569cbc7200e0f3da8301eac0b9baf0369c2fcf83a88825f76139b5fd133f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x800, 0x40, [0x11f0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b764"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "5ea2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0x23, 0x92, {0x92, 0x21, "1d7a53bc690402ffe943a93a777fc737993ca8c5be40a8e7cf7b2ba769ab779378fd2db40261a19ada685f3fdd09549c1e697ff5a1c64a534d6f05d04f887b97726f523721e2004506b8a30348651e89a764a7d318a102dadeb18dc054a7978166376e4d4fccdf1d38c49fc0d10a3d71c9ed37f75dcde29a30ba1846bec08fecfe5d597042f1dfe83539ef057cd8fad6"}}, &(0x7f0000000800)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "bb723769308e4698b3dfb905ee4e23cb41e2ce4ab46a6953ab0437ae56ad72cd853adcba926913a9d6daa0eadaa702f70b149b9369407876d186f1e0142813c881224153c265f00608e9964198f15d173b9b62f1eea7d61e932b89c5d0d0555c9d5345d503891826c622beee0e2e51580a723df7e18c459e9fe43129a3a8d6a1ef7cb98fd48011fb"}}, &(0x7f00000008c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x5, "e53672b6"}, @main=@item_4={0x3, 0x0, 0xc, "e8337e27"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000b80)={0x18, &(0x7f0000000980)={0x20, 0xa, 0x4a, "946627b339934ab8d5a57209bbfc61b4b1aa6cc00661b18368b313c3b48ac05fcf9148931739cad66249e4afee9d28235c925a487c02f410e3ce1974118c9c763f775ca27e343d79e43b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xac, "6d2917674376ae96db13a85206ad0b220b940061dd0fbe0777be2987c075ca7a357fc2a20513b38bc863d215e79ec5e9e7effc2a2fb92cc4515e3bbf39be82229fcd4d5305650aef4bf350ba871c4b4dff6e64e9089c852a342ccc3a9902d8019431d7982cc9fddc4e78c525d3f19ed12223b96c17356c532de4229043130159388b30b177e04bed504bf077a1bd39cb70af47154a62dcdd3bcfa60c441f76790e44c26bf3a6975d9b411995"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x1}}) 18:22:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 681.328043][T16167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x9}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x7000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 681.405612][T16174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xe}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x8000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 681.463794][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.521980][T16182] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.612539][ T3673] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 681.612606][T14638] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 681.627819][ T3675] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 681.792529][ T4313] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 681.862534][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 681.902575][T14638] usb 1-1: Using ep0 maxpacket: 16 [ 681.907819][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 681.982584][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.997745][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.008792][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.026034][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.036015][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.042569][ T4313] usb 6-1: Invalid ep0 maxpacket: 64 [ 682.054617][T14638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.064965][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.075465][T14638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.087324][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.098545][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.108855][T14638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.118942][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.122625][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.128959][T14638] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.146671][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.147691][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.158326][ T3673] usb 2-1: Manufacturer: syz [ 682.168904][T14638] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.190459][ T3673] usb 2-1: config 0 descriptor?? [ 682.242716][ T4313] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 682.262847][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.271907][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.280205][T14638] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.290113][T14638] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.298413][ T3675] usb 4-1: Manufacturer: syz [ 682.303223][T14638] usb 1-1: Manufacturer: syz [ 682.317359][ T3675] usb 4-1: config 0 descriptor?? [ 682.331077][T14638] usb 1-1: config 0 descriptor?? [ 682.444436][T16166] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.451840][T16166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.460373][T16166] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.467803][T16166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.476690][T16166] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.484118][T16166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.492680][ T4313] usb 6-1: Invalid ep0 maxpacket: 64 [ 682.493168][T16166] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.498537][ T4313] usb usb6-port1: attempt power cycle [ 682.511732][T16166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.522223][T16166] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.529917][T16166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.574640][T16168] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.574639][T16162] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.574667][T16162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.582039][T16168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.594244][T16162] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.604534][ T3673] rc_core: IR keymap rc-hauppauge not found [ 682.604552][ T3673] Registered IR keymap rc-empty [ 682.604628][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.629671][T16168] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.631420][T16162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.642503][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.646545][T16168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.663290][T16162] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.665599][T16168] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.670770][T16162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.678922][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 682.686464][T16168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.710646][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input244 [ 682.711005][T16162] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.736390][T16168] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.744709][T16162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.755037][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.755108][T16168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.774345][T16162] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.781737][T16162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.782216][T16168] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.798281][T16168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 682.805920][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.842582][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.872595][T14638] rc_core: IR keymap rc-hauppauge not found [ 682.872659][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.878726][T14638] Registered IR keymap rc-empty [ 682.891483][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 682.912726][ T4313] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 682.922751][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.932620][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 682.952626][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.962992][T14638] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 682.983040][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 682.988215][T14638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input245 [ 683.008191][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.022553][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.022749][ T4313] usb 6-1: Invalid ep0 maxpacket: 64 [ 683.042716][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.053225][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.072563][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.082754][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 683.102544][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.115502][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 683.123630][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 683.133226][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.152692][ T3673] usb 2-1: USB disconnect, device number 56 [ 683.162992][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.192636][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.199844][ T4313] usb 6-1: new low-speed USB device number 60 using dummy_hcd 18:22:33 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x9000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 683.241967][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.289237][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.311590][T16190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 683.337511][ T4313] usb 6-1: Invalid ep0 maxpacket: 64 [ 683.344128][ T4313] usb usb6-port1: unable to enumerate USB device [ 683.368554][T14638] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 683.413613][T14638] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 683.421722][T14638] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 683.440954][T14638] usb 1-1: USB disconnect, device number 7 [ 683.682552][ T3673] usb 2-1: new high-speed USB device number 57 using dummy_hcd 18:22:34 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 683.942754][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 684.122590][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.133374][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.144497][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.154381][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 684.164329][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:22:34 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 684.262778][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 684.270563][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 684.279915][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.291585][ T3673] usb 2-1: Manufacturer: syz [ 684.305625][ T3673] usb 2-1: config 0 descriptor?? 18:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x60}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:34 executing program 5: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x22, 0x70, {0x70, 0x24, "bdb164e2f0a687cf16673c57782a3d260bdb6828037eed194ab3449106a000692b2e743bf64e9efb7566ad3bab0ea4406ca3917049da3c269d7639d25397948abf986169d3ecadad0455bd2b046060047cb4c10c13f80f0874846f5be6605146f688866726e7c1ca1192d95e6529"}}, &(0x7f0000000080)={0x0, 0x3, 0x97, @string={0x97, 0x3, "53b17186683acff383383603d4ba368c701dd5bafcb0f8eda3f01bbab657257ca9fb52fbfff9ebe0e41d013a903c74ac8c764c80a4acfc8d47f7ba2181764effa4c9f52c37f88cf44ec9bef76f3cba6569597dc2d0a7ba5235c4cce28e2bff66698d5a2fd5505d848b65b492d862e09a1b18ca4f29d752d06f2a5c0e6821794c8439157bb94fd3ba2d97c8cf804b85cd7a335c04ea"}}, &(0x7f0000000140)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x74, 0x2, 0x6, 0xf0f, 0x3, [0xde, 0xf]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x0, 0x7, "51bf3cd2", "ded8dd59"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xff, 0x4, 0x80, 0x1, 0x62}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x48, "47cf212e4ee5192b6b1f7275df42e5c2c985f3264fcbdfc626d17444410433f43bd315ff74f338aeb1db569cbc7200e0f3da8301eac0b9baf0369c2fcf83a88825f76139b5fd133f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x800, 0x40, [0x11f0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b764"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "5ea2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0x23, 0x92, {0x92, 0x21, "1d7a53bc690402ffe943a93a777fc737993ca8c5be40a8e7cf7b2ba769ab779378fd2db40261a19ada685f3fdd09549c1e697ff5a1c64a534d6f05d04f887b97726f523721e2004506b8a30348651e89a764a7d318a102dadeb18dc054a7978166376e4d4fccdf1d38c49fc0d10a3d71c9ed37f75dcde29a30ba1846bec08fecfe5d597042f1dfe83539ef057cd8fad6"}}, &(0x7f0000000800)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "bb723769308e4698b3dfb905ee4e23cb41e2ce4ab46a6953ab0437ae56ad72cd853adcba926913a9d6daa0eadaa702f70b149b9369407876d186f1e0142813c881224153c265f00608e9964198f15d173b9b62f1eea7d61e932b89c5d0d0555c9d5345d503891826c622beee0e2e51580a723df7e18c459e9fe43129a3a8d6a1ef7cb98fd48011fb"}}, &(0x7f00000008c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x5, "e53672b6"}, @main=@item_4={0x3, 0x0, 0xc, "e8337e27"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000b80)={0x18, &(0x7f0000000980)={0x20, 0xa, 0x4a, "946627b339934ab8d5a57209bbfc61b4b1aa6cc00661b18368b313c3b48ac05fcf9148931739cad66249e4afee9d28235c925a487c02f410e3ce1974118c9c763f775ca27e343d79e43b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xac, "6d2917674376ae96db13a85206ad0b220b940061dd0fbe0777be2987c075ca7a357fc2a20513b38bc863d215e79ec5e9e7effc2a2fb92cc4515e3bbf39be82229fcd4d5305650aef4bf350ba871c4b4dff6e64e9089c852a342ccc3a9902d8019431d7982cc9fddc4e78c525d3f19ed12223b96c17356c532de4229043130159388b30b177e04bed504bf077a1bd39cb70af47154a62dcdd3bcfa60c441f76790e44c26bf3a6975d9b411995"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x1}}) 18:22:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xa000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf0}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xc000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 684.394642][T16202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.442627][ T3675] rc_core: IR keymap rc-hauppauge not found [ 684.448798][ T3675] Registered IR keymap rc-empty [ 684.460109][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.470624][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xe000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x300}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 684.492972][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.532695][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 684.533239][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 684.557649][T16192] UDC core: couldn't find an available UDC or it's busy: -16 [ 684.559974][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 684.570841][T16192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.603803][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input246 [ 684.611338][T16192] UDC core: couldn't find an available UDC or it's busy: -16 [ 684.630897][T16192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.634222][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.644259][T16192] UDC core: couldn't find an available UDC or it's busy: -16 [ 684.662380][T16192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.674191][T16192] UDC core: couldn't find an available UDC or it's busy: -16 [ 684.679920][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.681576][T16192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.683285][T16192] UDC core: couldn't find an available UDC or it's busy: -16 [ 684.692364][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.699316][T16192] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 684.706866][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.725124][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.741136][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 684.753451][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.787687][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.822744][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.832819][ T3673] rc_core: IR keymap rc-hauppauge not found [ 684.838735][ T3673] Registered IR keymap rc-empty [ 684.843672][ T3715] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 684.852390][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.852645][ T6] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 684.853279][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.859786][ T6] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.859814][ T6] usb 1-1: Manufacturer: syz [ 684.890101][ T6] usb 1-1: config 0 descriptor?? [ 684.912681][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.923169][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 684.942720][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.952987][ T3673] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 684.971037][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input247 [ 684.987326][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.997037][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.023479][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.042675][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.052598][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.072771][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.084386][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 685.092395][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 685.102687][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.109966][ T3715] usb 6-1: Invalid ep0 maxpacket: 64 [ 685.120643][ T3675] usb 4-1: USB disconnect, device number 23 [ 685.142630][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.153007][T16194] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.164198][T16194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.174031][T16194] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.181462][T16194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.190569][T16194] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.198152][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.198804][T16194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.215274][T16194] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.223250][T16194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.231421][T16194] UDC core: couldn't find an available UDC or it's busy: -16 [ 685.232722][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.241014][T16194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 685.262833][ T3715] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 685.284298][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.322612][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.342600][ T6] rc_core: IR keymap rc-hauppauge not found [ 685.348587][ T6] Registered IR keymap rc-empty [ 685.353672][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 685.361758][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.393634][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 685.401642][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 685.410098][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.425147][ T3673] usb 2-1: USB disconnect, device number 57 [ 685.453047][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 685.467110][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.467162][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.482590][ T3675] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 685.489407][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input248 18:22:35 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x500}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 685.531024][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.538354][ T3715] usb 6-1: Invalid ep0 maxpacket: 64 [ 685.552851][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 685.558655][ T3715] usb usb6-port1: attempt power cycle [ 685.592612][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.652599][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.692714][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.732566][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.732564][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 685.772534][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.812543][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.846604][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.872609][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.888596][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.892534][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.909296][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 685.932088][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 685.942683][ T6] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.965745][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.983709][ T6] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 685.991872][ T6] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 686.000499][ T3715] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 686.011012][ T6] usb 1-1: USB disconnect, device number 8 [ 686.017225][ T3673] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 686.062875][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.071942][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.102793][ T3715] usb 6-1: Invalid ep0 maxpacket: 64 [ 686.110587][ T3675] usb 4-1: Manufacturer: syz [ 686.136999][ T3675] usb 4-1: config 0 descriptor?? [ 686.262650][ T3715] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 686.292667][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 686.376359][T16196] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.382876][ T3715] usb 6-1: Invalid ep0 maxpacket: 64 [ 686.389486][ T3715] usb usb6-port1: unable to enumerate USB device [ 686.391489][T16196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.410159][T16196] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.417793][T16196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.426986][T16196] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.434556][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.445023][T16196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.453367][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.465728][T16196] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.473237][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.477393][T16196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.484703][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.500306][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.504910][T16196] UDC core: couldn't find an available UDC or it's busy: -16 18:22:36 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 686.523011][T16196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.602768][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.611958][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.620372][ T3673] usb 2-1: Manufacturer: syz [ 686.629399][ T3673] usb 2-1: config 0 descriptor?? [ 686.822545][ T4313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 686.884768][T16222] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.892167][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.901585][T16222] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.909098][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.917813][T16222] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.925315][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.934335][T16222] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.941713][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 686.950667][T16222] UDC core: couldn't find an available UDC or it's busy: -16 [ 686.959088][T16222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.062709][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 687.063290][ T3673] rc_core: IR keymap rc-hauppauge not found [ 687.074595][ T3673] Registered IR keymap rc-empty [ 687.079697][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.112536][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.153670][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 687.167491][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input249 [ 687.183014][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.193418][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.195296][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.212317][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 687.222275][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 687.232202][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.232996][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.292848][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.332676][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.332832][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.349038][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.357180][ T4313] usb 1-1: Manufacturer: syz [ 687.365695][ T4313] usb 1-1: config 0 descriptor?? [ 687.372680][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.412725][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.444144][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.472607][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.502541][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x10000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x600}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:37 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:37 executing program 5: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x22, 0x70, {0x70, 0x24, "bdb164e2f0a687cf16673c57782a3d260bdb6828037eed194ab3449106a000692b2e743bf64e9efb7566ad3bab0ea4406ca3917049da3c269d7639d25397948abf986169d3ecadad0455bd2b046060047cb4c10c13f80f0874846f5be6605146f688866726e7c1ca1192d95e6529"}}, &(0x7f0000000080)={0x0, 0x3, 0x97, @string={0x97, 0x3, "53b17186683acff383383603d4ba368c701dd5bafcb0f8eda3f01bbab657257ca9fb52fbfff9ebe0e41d013a903c74ac8c764c80a4acfc8d47f7ba2181764effa4c9f52c37f88cf44ec9bef76f3cba6569597dc2d0a7ba5235c4cce28e2bff66698d5a2fd5505d848b65b492d862e09a1b18ca4f29d752d06f2a5c0e6821794c8439157bb94fd3ba2d97c8cf804b85cd7a335c04ea"}}, &(0x7f0000000140)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x74, 0x2, 0x6, 0xf0f, 0x3, [0xde, 0xf]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x0, 0x7, "51bf3cd2", "ded8dd59"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xff, 0x4, 0x80, 0x1, 0x62}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x48, "47cf212e4ee5192b6b1f7275df42e5c2c985f3264fcbdfc626d17444410433f43bd315ff74f338aeb1db569cbc7200e0f3da8301eac0b9baf0369c2fcf83a88825f76139b5fd133f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x800, 0x40, [0x11f0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b764"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "5ea2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0x23, 0x92, {0x92, 0x21, "1d7a53bc690402ffe943a93a777fc737993ca8c5be40a8e7cf7b2ba769ab779378fd2db40261a19ada685f3fdd09549c1e697ff5a1c64a534d6f05d04f887b97726f523721e2004506b8a30348651e89a764a7d318a102dadeb18dc054a7978166376e4d4fccdf1d38c49fc0d10a3d71c9ed37f75dcde29a30ba1846bec08fecfe5d597042f1dfe83539ef057cd8fad6"}}, &(0x7f0000000800)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "bb723769308e4698b3dfb905ee4e23cb41e2ce4ab46a6953ab0437ae56ad72cd853adcba926913a9d6daa0eadaa702f70b149b9369407876d186f1e0142813c881224153c265f00608e9964198f15d173b9b62f1eea7d61e932b89c5d0d0555c9d5345d503891826c622beee0e2e51580a723df7e18c459e9fe43129a3a8d6a1ef7cb98fd48011fb"}}, &(0x7f00000008c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x5, "e53672b6"}, @main=@item_4={0x3, 0x0, 0xc, "e8337e27"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000b80)={0x18, &(0x7f0000000980)={0x20, 0xa, 0x4a, "946627b339934ab8d5a57209bbfc61b4b1aa6cc00661b18368b313c3b48ac05fcf9148931739cad66249e4afee9d28235c925a487c02f410e3ce1974118c9c763f775ca27e343d79e43b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xac, "6d2917674376ae96db13a85206ad0b220b940061dd0fbe0777be2987c075ca7a357fc2a20513b38bc863d215e79ec5e9e7effc2a2fb92cc4515e3bbf39be82229fcd4d5305650aef4bf350ba871c4b4dff6e64e9089c852a342ccc3a9902d8019431d7982cc9fddc4e78c525d3f19ed12223b96c17356c532de4229043130159388b30b177e04bed504bf077a1bd39cb70af47154a62dcdd3bcfa60c441f76790e44c26bf3a6975d9b411995"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x1}}) syz_usb_connect(0x1, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000000)={0x0, 0x22, 0x70, {0x70, 0x24, "bdb164e2f0a687cf16673c57782a3d260bdb6828037eed194ab3449106a000692b2e743bf64e9efb7566ad3bab0ea4406ca3917049da3c269d7639d25397948abf986169d3ecadad0455bd2b046060047cb4c10c13f80f0874846f5be6605146f688866726e7c1ca1192d95e6529"}}, &(0x7f0000000080)={0x0, 0x3, 0x97, @string={0x97, 0x3, "53b17186683acff383383603d4ba368c701dd5bafcb0f8eda3f01bbab657257ca9fb52fbfff9ebe0e41d013a903c74ac8c764c80a4acfc8d47f7ba2181764effa4c9f52c37f88cf44ec9bef76f3cba6569597dc2d0a7ba5235c4cce28e2bff66698d5a2fd5505d848b65b492d862e09a1b18ca4f29d752d06f2a5c0e6821794c8439157bb94fd3ba2d97c8cf804b85cd7a335c04ea"}}, &(0x7f0000000140)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x74, 0x2, 0x6, 0xf0f, 0x3, [0xde, 0xf]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x0, 0x7, "51bf3cd2", "ded8dd59"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xff, 0x4, 0x80, 0x1, 0x62}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x48, "47cf212e4ee5192b6b1f7275df42e5c2c985f3264fcbdfc626d17444410433f43bd315ff74f338aeb1db569cbc7200e0f3da8301eac0b9baf0369c2fcf83a88825f76139b5fd133f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x800, 0x40, [0x11f0]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b764"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "5ea2"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x20, 0x23, 0x92, {0x92, 0x21, "1d7a53bc690402ffe943a93a777fc737993ca8c5be40a8e7cf7b2ba769ab779378fd2db40261a19ada685f3fdd09549c1e697ff5a1c64a534d6f05d04f887b97726f523721e2004506b8a30348651e89a764a7d318a102dadeb18dc054a7978166376e4d4fccdf1d38c49fc0d10a3d71c9ed37f75dcde29a30ba1846bec08fecfe5d597042f1dfe83539ef057cd8fad6"}}, &(0x7f0000000800)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "bb723769308e4698b3dfb905ee4e23cb41e2ce4ab46a6953ab0437ae56ad72cd853adcba926913a9d6daa0eadaa702f70b149b9369407876d186f1e0142813c881224153c265f00608e9964198f15d173b9b62f1eea7d61e932b89c5d0d0555c9d5345d503891826c622beee0e2e51580a723df7e18c459e9fe43129a3a8d6a1ef7cb98fd48011fb"}}, &(0x7f00000008c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x5, "e53672b6"}, @main=@item_4={0x3, 0x0, 0xc, "e8337e27"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0xda0}}}}, &(0x7f0000000b80)={0x18, &(0x7f0000000980)={0x20, 0xa, 0x4a, "946627b339934ab8d5a57209bbfc61b4b1aa6cc00661b18368b313c3b48ac05fcf9148931739cad66249e4afee9d28235c925a487c02f410e3ce1974118c9c763f775ca27e343d79e43b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xac, "6d2917674376ae96db13a85206ad0b220b940061dd0fbe0777be2987c075ca7a357fc2a20513b38bc863d215e79ec5e9e7effc2a2fb92cc4515e3bbf39be82229fcd4d5305650aef4bf350ba871c4b4dff6e64e9089c852a342ccc3a9902d8019431d7982cc9fddc4e78c525d3f19ed12223b96c17356c532de4229043130159388b30b177e04bed504bf077a1bd39cb70af47154a62dcdd3bcfa60c441f76790e44c26bf3a6975d9b411995"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x1}}) (async) [ 687.535787][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x676}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 687.577550][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.584763][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 687.608439][T16224] UDC core: couldn't find an available UDC or it's busy: -16 [ 687.613668][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 18:22:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x1f000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x700}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 687.641069][T16224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.654330][ T3673] usb 2-1: USB disconnect, device number 58 [ 687.709513][T16224] UDC core: couldn't find an available UDC or it's busy: -16 [ 687.740127][T16224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.752624][ T3675] rc_core: IR keymap rc-hauppauge not found 18:22:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x900}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:37 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) [ 687.758629][ T3675] Registered IR keymap rc-empty [ 687.767699][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.784740][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 687.797694][T16224] UDC core: couldn't find an available UDC or it's busy: -16 18:22:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x20000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 687.815477][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 687.832660][ T3259] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 687.834162][T16224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.873113][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 687.894864][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input250 [ 687.899502][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xe00}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 687.932186][T16224] UDC core: couldn't find an available UDC or it's busy: -16 [ 687.953711][T16224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 687.981490][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 687.993872][T16224] UDC core: couldn't find an available UDC or it's busy: -16 [ 688.001258][T16224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 688.022660][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.053295][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.086306][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.102750][ T3259] usb 6-1: Invalid ep0 maxpacket: 64 [ 688.127917][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.167200][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.202845][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.232665][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.262659][ T3259] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 688.262700][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.282608][ T3673] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 688.303190][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 688.333433][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 688.341543][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.364151][ T3675] usb 4-1: USB disconnect, device number 24 [ 688.542650][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 688.547918][ T3259] usb 6-1: Invalid ep0 maxpacket: 64 [ 688.553503][ T3259] usb usb6-port1: attempt power cycle [ 688.692924][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.703476][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 688.714793][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 688.724747][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 688.732720][ T3675] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 688.734768][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.852749][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 688.861835][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 688.870830][ T3673] usb 2-1: Manufacturer: syz [ 688.884593][ T3673] usb 2-1: config 0 descriptor?? [ 688.972588][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 688.994157][ T3259] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 689.092593][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.092730][ T3259] usb 6-1: Invalid ep0 maxpacket: 64 [ 689.103271][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.124917][T16245] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.132306][T16245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.139930][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 689.143854][T16245] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.158714][T16245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.161518][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 689.170129][T16245] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.183635][T16245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.184276][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.195041][T16245] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.212317][T16245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.222903][T16245] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.230288][T16245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.282819][ T3259] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 689.282876][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 689.299413][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 689.302917][ T3673] rc_core: IR keymap rc-hauppauge not found [ 689.307733][ T3675] usb 4-1: Manufacturer: syz [ 689.319546][ T3673] Registered IR keymap rc-empty [ 689.327749][ T3675] usb 4-1: config 0 descriptor?? [ 689.331407][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.364198][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.382824][ T3259] usb 6-1: Invalid ep0 maxpacket: 64 [ 689.391815][ T3259] usb usb6-port1: unable to enumerate USB device [ 689.398821][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 689.422543][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input251 [ 689.437285][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.472709][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.512627][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:39 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x23060000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf00}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 689.554392][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.592571][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.596250][T16235] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.614554][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 689.621723][T16235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.633696][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.646622][T16235] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.654605][T16235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.664245][T16235] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.671884][T16235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.682280][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.682763][T16235] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.702846][T16235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.716931][ T4313] rc_core: IR keymap rc-hauppauge not found [ 689.722759][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.731528][T16235] UDC core: couldn't find an available UDC or it's busy: -16 [ 689.737946][ T4313] Registered IR keymap rc-empty [ 689.741037][T16235] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 689.748054][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.762680][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.783097][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.804272][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 689.813215][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 689.826683][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input252 [ 689.843730][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 689.849618][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.851739][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 689.866902][ T3673] usb 2-1: USB disconnect, device number 59 [ 689.902666][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.932701][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.962610][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 689.994107][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.023486][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.056270][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.092764][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.122586][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.152645][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 690.184814][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 690.193047][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 690.205082][ T4313] usb 1-1: USB disconnect, device number 9 [ 690.562548][ T4313] usb 1-1: new high-speed USB device number 10 using dummy_hcd 18:22:40 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x3f00}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x48000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:40 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) 18:22:40 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) clock_gettime(0x0, &(0x7f0000008000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)}], 0x3}, 0x10001}, {{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f00000016c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f0000001840)=""/199, 0xc7}], 0x3, &(0x7f0000001980)=""/125, 0x7d}, 0xffff8001}, {{&(0x7f0000001a00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/118, 0x76}], 0x2, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002bc0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/137, 0x89}, {&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/211, 0xd3}, {&(0x7f0000004e80)=""/41, 0x29}], 0x6, &(0x7f0000004f00)=""/26, 0x1a}}, {{&(0x7f0000004f40)=@x25, 0x80, &(0x7f0000005680)=[{&(0x7f0000004fc0)=""/11, 0xb}, {&(0x7f0000005000)=""/230, 0xe6}, {&(0x7f0000005100)=""/172, 0xac}, {&(0x7f00000051c0)=""/219, 0xdb}, {&(0x7f00000052c0)=""/177, 0xb1}, {&(0x7f0000005380)=""/192, 0xc0}, {&(0x7f0000005440)=""/233, 0xe9}, {&(0x7f0000005540)=""/101, 0x65}, {&(0x7f00000055c0)=""/111, 0x6f}, {&(0x7f0000005640)=""/4, 0x4}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005700)=""/51, 0x33}, {&(0x7f0000005740)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000006780)=@ax25={{0x3, @netrom}, [@bcast, @null, @rose, @netrom, @remote, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006800)=""/121, 0x79}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f00000078c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007940)=""/56, 0x38}, {&(0x7f0000007980)=""/70, 0x46}, {&(0x7f0000007a00)=""/213, 0xd5}, {&(0x7f0000007b00)=""/216, 0xd8}, {&(0x7f0000007c00)=""/119, 0x77}, {&(0x7f0000007c80)=""/56, 0x38}, {&(0x7f0000007cc0)=""/235, 0xeb}, {&(0x7f0000007dc0)=""/39, 0x27}], 0x8, &(0x7f0000007e40)=""/105, 0x69}, 0x7fff}], 0x9, 0x2, &(0x7f0000008040)={r1, r2+60000000}) 18:22:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x4c000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x6000}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 690.786638][T16266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.812669][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:41 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async) clock_gettime(0x0, &(0x7f0000008000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)}], 0x3}, 0x10001}, {{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f00000016c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f0000001840)=""/199, 0xc7}], 0x3, &(0x7f0000001980)=""/125, 0x7d}, 0xffff8001}, {{&(0x7f0000001a00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/118, 0x76}], 0x2, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002bc0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/137, 0x89}, {&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/211, 0xd3}, {&(0x7f0000004e80)=""/41, 0x29}], 0x6, &(0x7f0000004f00)=""/26, 0x1a}}, {{&(0x7f0000004f40)=@x25, 0x80, &(0x7f0000005680)=[{&(0x7f0000004fc0)=""/11, 0xb}, {&(0x7f0000005000)=""/230, 0xe6}, {&(0x7f0000005100)=""/172, 0xac}, {&(0x7f00000051c0)=""/219, 0xdb}, {&(0x7f00000052c0)=""/177, 0xb1}, {&(0x7f0000005380)=""/192, 0xc0}, {&(0x7f0000005440)=""/233, 0xe9}, {&(0x7f0000005540)=""/101, 0x65}, {&(0x7f00000055c0)=""/111, 0x6f}, {&(0x7f0000005640)=""/4, 0x4}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005700)=""/51, 0x33}, {&(0x7f0000005740)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000006780)=@ax25={{0x3, @netrom}, [@bcast, @null, @rose, @netrom, @remote, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006800)=""/121, 0x79}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f00000078c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007940)=""/56, 0x38}, {&(0x7f0000007980)=""/70, 0x46}, {&(0x7f0000007a00)=""/213, 0xd5}, {&(0x7f0000007b00)=""/216, 0xd8}, {&(0x7f0000007c00)=""/119, 0x77}, {&(0x7f0000007c80)=""/56, 0x38}, {&(0x7f0000007cc0)=""/235, 0xeb}, {&(0x7f0000007dc0)=""/39, 0x27}], 0x8, &(0x7f0000007e40)=""/105, 0x69}, 0x7fff}], 0x9, 0x2, &(0x7f0000008040)={r1, r2+60000000}) 18:22:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x60000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 690.875217][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.932855][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.950332][T16277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.962509][ T3675] rc_core: IR keymap rc-hauppauge not found [ 690.968601][ T3675] Registered IR keymap rc-empty [ 690.974935][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.986377][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 690.994644][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.011561][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.025943][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.039161][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.077313][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 691.082633][ T3673] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 691.108307][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input253 [ 691.123026][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.132088][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.140905][ T4313] usb 1-1: Manufacturer: syz [ 691.145749][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.163364][ T4313] usb 1-1: config 0 descriptor?? [ 691.182995][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.217607][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.252720][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.283024][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.312715][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.342997][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.372530][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 691.372699][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.407082][T16259] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.412525][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.414911][T16259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.431989][T16259] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.439507][T16259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.442643][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 691.449672][T16259] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.461492][T16259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.471494][T16259] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.478911][T16259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.483447][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 691.487637][T16259] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.503140][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.503834][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 691.522025][T16259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.529646][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.545201][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.555256][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.558584][ T3675] usb 4-1: USB disconnect, device number 25 [ 691.564967][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.652660][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.661795][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.670012][ T3673] usb 2-1: Manufacturer: syz [ 691.679590][ T3673] usb 2-1: config 0 descriptor?? [ 691.923999][T16265] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.931542][T16265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.944961][T16265] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.952574][ T3675] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 691.956030][T16265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.970308][T16265] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.977836][T16265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 691.987425][T16265] UDC core: couldn't find an available UDC or it's busy: -16 [ 691.995197][T16265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.003823][T16265] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.011273][T16265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.082574][ T3673] rc_core: IR keymap rc-hauppauge not found [ 692.088508][ T3673] Registered IR keymap rc-empty [ 692.098382][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.143797][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.183406][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 692.192607][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 692.204950][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input254 [ 692.222222][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.253200][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.292668][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.312744][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.324852][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.335836][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.336334][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.353171][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 692.363252][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.382715][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.423239][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.452607][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.452759][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 692.468967][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 692.477044][ T3675] usb 4-1: Manufacturer: syz [ 692.483178][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.483213][ T3675] usb 4-1: config 0 descriptor?? [ 692.522611][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 692.562692][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x7606}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:42 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async) clock_gettime(0x0, &(0x7f0000008000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000280)}], 0x3}, 0x10001}, {{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f00000016c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f0000001840)=""/199, 0xc7}], 0x3, &(0x7f0000001980)=""/125, 0x7d}, 0xffff8001}, {{&(0x7f0000001a00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/118, 0x76}], 0x2, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002bc0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/137, 0x89}, {&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/211, 0xd3}, {&(0x7f0000004e80)=""/41, 0x29}], 0x6, &(0x7f0000004f00)=""/26, 0x1a}}, {{&(0x7f0000004f40)=@x25, 0x80, &(0x7f0000005680)=[{&(0x7f0000004fc0)=""/11, 0xb}, {&(0x7f0000005000)=""/230, 0xe6}, {&(0x7f0000005100)=""/172, 0xac}, {&(0x7f00000051c0)=""/219, 0xdb}, {&(0x7f00000052c0)=""/177, 0xb1}, {&(0x7f0000005380)=""/192, 0xc0}, {&(0x7f0000005440)=""/233, 0xe9}, {&(0x7f0000005540)=""/101, 0x65}, {&(0x7f00000055c0)=""/111, 0x6f}, {&(0x7f0000005640)=""/4, 0x4}], 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005700)=""/51, 0x33}, {&(0x7f0000005740)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000006780)=@ax25={{0x3, @netrom}, [@bcast, @null, @rose, @netrom, @remote, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006800)=""/121, 0x79}], 0x1, &(0x7f00000068c0)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f00000078c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007940)=""/56, 0x38}, {&(0x7f0000007980)=""/70, 0x46}, {&(0x7f0000007a00)=""/213, 0xd5}, {&(0x7f0000007b00)=""/216, 0xd8}, {&(0x7f0000007c00)=""/119, 0x77}, {&(0x7f0000007c80)=""/56, 0x38}, {&(0x7f0000007cc0)=""/235, 0xeb}, {&(0x7f0000007dc0)=""/39, 0x27}], 0x8, &(0x7f0000007e40)=""/105, 0x69}, 0x7fff}], 0x9, 0x2, &(0x7f0000008040)={r1, r2+60000000}) 18:22:42 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 692.604586][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 692.619080][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 692.632745][ T3673] usb 2-1: USB disconnect, device number 60 [ 692.742339][T16271] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.779518][T16271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.791949][T16271] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.800520][T16271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.809532][T16271] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.817046][T16271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.826489][T16271] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.834461][ T4313] rc_core: IR keymap rc-hauppauge not found [ 692.836731][T16271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.840577][ T4313] Registered IR keymap rc-empty [ 692.854151][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 692.864512][T16271] UDC core: couldn't find an available UDC or it's busy: -16 [ 692.871973][T16271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 692.882547][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 692.913121][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 692.930813][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input255 [ 692.947623][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 692.983974][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.012548][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.042553][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.073387][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.102621][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.132536][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.163573][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.192620][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.223271][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 693.253738][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 693.261942][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.274011][ T4313] usb 1-1: USB disconnect, device number 10 [ 693.652573][ T4313] usb 1-1: new high-speed USB device number 11 using dummy_hcd 18:22:44 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:44 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b663a3a5d3a365bd0661821b53aa9643a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000009c4415ad7000000000000000000000000000003b329efba4fe6227713739f1ab0424215e9039e80743c487a5c3cc2a97716a612ef768a50abf0e85490d8421f0e01863d04c33746107df17e674f344a264cf3434ef1ce46ebe76c607f174c9fab2426c144675ee00fc03f71fd8a66a904b80aeda1d0b93933f18c6cbdb7ebc5093fe3df4e1b88c549b0836b3bfbc0401ad5de248da381954ef90cf2ff078a55193d2d9eb7619297892a0aeb77e00"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pread64(r2, &(0x7f0000000200)=""/244, 0xf4, 0x5) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x1000, 0x7f, 0x2, 0x8}) 18:22:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x65580000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf000}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:44 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, 0x0) [ 693.892592][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xffff}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x68000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 693.916603][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.928844][T16300] libceph: Failed to parse monitor IPs: -22 18:22:44 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b663a3a5d3a365bd0661821b53aa9643a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000009c4415ad7000000000000000000000000000003b329efba4fe6227713739f1ab0424215e9039e80743c487a5c3cc2a97716a612ef768a50abf0e85490d8421f0e01863d04c33746107df17e674f344a264cf3434ef1ce46ebe76c607f174c9fab2426c144675ee00fc03f71fd8a66a904b80aeda1d0b93933f18c6cbdb7ebc5093fe3df4e1b88c549b0836b3bfbc0401ad5de248da381954ef90cf2ff078a55193d2d9eb7619297892a0aeb77e00"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pread64(r2, &(0x7f0000000200)=""/244, 0xf4, 0x5) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x1000, 0x7f, 0x2, 0x8}) 18:22:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x3, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 694.022786][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.032848][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.048886][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:22:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x6c000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 694.065294][T16311] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 694.075679][T16312] libceph: Failed to parse monitor IPs: -22 [ 694.082607][ T3675] rc_core: IR keymap rc-hauppauge not found [ 694.088692][ T3675] Registered IR keymap rc-empty [ 694.095097][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 694.108354][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:22:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x5, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 694.119158][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 694.131610][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.155608][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.168203][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.177892][T16318] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 694.193257][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 694.215677][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input256 [ 694.232511][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 694.241575][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 694.251725][ T4313] usb 1-1: Manufacturer: syz [ 694.251843][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.273201][ T4313] usb 1-1: config 0 descriptor?? [ 694.302626][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.314681][ T4314] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 694.332772][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.362546][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.392671][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.422648][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.452770][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.482730][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.512608][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.525728][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 694.533377][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 694.541676][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 694.549283][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 694.556890][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 694.558708][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 694.562743][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.576309][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 694.586925][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 694.594436][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 694.602867][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 694.603810][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 694.610964][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 694.627730][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 694.640589][ T3675] usb 4-1: USB disconnect, device number 26 [ 694.672730][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.684595][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.696016][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 694.706136][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 694.716305][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.802640][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 694.811850][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 694.820132][ T4314] usb 2-1: Manufacturer: syz [ 694.827179][ T4314] usb 2-1: config 0 descriptor?? [ 695.075670][T16296] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.083201][ T3675] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 695.084008][T16296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.104611][T16296] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.112143][T16296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.120562][T16296] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.128239][T16296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.137205][T16296] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.144878][T16296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.153847][T16296] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.161507][T16296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.232521][ T4314] rc_core: IR keymap rc-hauppauge not found [ 695.238621][ T4314] Registered IR keymap rc-empty [ 695.243958][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.272806][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.303095][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 695.317371][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input257 [ 695.331097][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 695.338624][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.373023][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.402708][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.432612][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.452626][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.462943][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.470207][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.481643][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 695.491590][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 695.501808][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.514891][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.542720][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.572587][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.592879][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.602313][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.610680][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.617989][ T3675] usb 4-1: Manufacturer: syz [ 695.626527][ T3675] usb 4-1: config 0 descriptor?? 18:22:45 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 695.652594][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 695.714024][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 695.722051][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 695.750859][ T4314] usb 2-1: USB disconnect, device number 61 [ 695.812618][ T4313] rc_core: IR keymap rc-hauppauge not found [ 695.818695][ T4313] Registered IR keymap rc-empty [ 695.824639][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 695.852665][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 695.868192][T16304] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.877279][T16304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.883176][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 695.896685][T16304] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.915195][T16304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.926838][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input258 [ 695.931892][T16304] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.951549][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 695.959566][T16304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.970702][T16304] UDC core: couldn't find an available UDC or it's busy: -16 [ 695.978425][T16304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 695.982635][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.000133][T16304] UDC core: couldn't find an available UDC or it's busy: -16 [ 696.007918][T16304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 696.023647][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.052587][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.082598][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.112514][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.142649][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.172639][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.202597][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.232561][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 696.264416][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 696.272549][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 696.283667][ T4313] usb 1-1: USB disconnect, device number 11 [ 696.662641][ T4313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 696.902772][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:47 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:47 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b663a3a5d3a365bd0661821b53aa9643a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000009c4415ad7000000000000000000000000000003b329efba4fe6227713739f1ab0424215e9039e80743c487a5c3cc2a97716a612ef768a50abf0e85490d8421f0e01863d04c33746107df17e674f344a264cf3434ef1ce46ebe76c607f174c9fab2426c144675ee00fc03f71fd8a66a904b80aeda1d0b93933f18c6cbdb7ebc5093fe3df4e1b88c549b0836b3bfbc0401ad5de248da381954ef90cf2ff078a55193d2d9eb7619297892a0aeb77e00"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) (async) pread64(r2, &(0x7f0000000200)=""/244, 0xf4, 0x5) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x1000, 0x7f, 0x2, 0x8}) 18:22:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x6, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x74000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:47 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f"]) [ 697.022909][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.033502][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.044832][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.054801][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:22:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x9, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x7a000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 697.082085][T16328] libceph: Failed to parse monitor IPs: -22 [ 697.089420][T16332] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 697.098407][T16331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.107793][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:22:47 executing program 5: r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @mcast1, 0xfff}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "09d0a64f54d84816d7aef5b6"}], 0x18}, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000007cede66f64657a67684b6a6b6c6d6e76df2d213e05fd76b03847b6a479493f30945d1fa7f11a0ec5e0b3f476ee231ea558a62b1c9693c8381c6fff89bfdf142181907c314ae05b37ba70dbe9cff486250a841b567c14aed593cd8d697ee246e6e8d5e914e47b619c1fcbb6875c260249dce5864d76e217ab0c68d4135659e381a5"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x0, @loopback}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) [ 697.210936][T16341] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 697.219472][ T3675] rc_core: IR keymap rc-hauppauge not found [ 697.226786][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 697.230345][T16343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.236481][ T3675] Registered IR keymap rc-empty [ 697.236569][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:22:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x81000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0xa, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 697.238764][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 697.268487][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:22:47 executing program 5: r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @mcast1, 0xfff}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "09d0a64f54d84816d7aef5b6"}], 0x18}, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000007cede66f64657a67684b6a6b6c6d6e76df2d213e05fd76b03847b6a479493f30945d1fa7f11a0ec5e0b3f476ee231ea558a62b1c9693c8381c6fff89bfdf142181907c314ae05b37ba70dbe9cff486250a841b567c14aed593cd8d697ee246e6e8d5e914e47b619c1fcbb6875c260249dce5864d76e217ab0c68d4135659e381a5"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x0, @loopback}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) socket$kcm(0x21, 0x2, 0x2) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @mcast1, 0xfff}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "09d0a64f54d84816d7aef5b6"}], 0x18}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000007cede66f64657a67684b6a6b6c6d6e76df2d213e05fd76b03847b6a479493f30945d1fa7f11a0ec5e0b3f476ee231ea558a62b1c9693c8381c6fff89bfdf142181907c314ae05b37ba70dbe9cff486250a841b567c14aed593cd8d697ee246e6e8d5e914e47b619c1fcbb6875c260249dce5864d76e217ab0c68d4135659e381a5"], 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x0, @loopback}}) (async) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) (async) [ 697.307712][ T4313] usb 1-1: Manufacturer: syz [ 697.313825][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 697.328741][ T4313] usb 1-1: config 0 descriptor?? [ 697.334719][T16347] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 697.347829][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input259 [ 697.362886][ T6] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 697.374567][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.389566][T16351] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 697.412799][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.442569][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.474560][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.502594][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.532682][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.562613][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.592686][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.605587][T16323] UDC core: couldn't find an available UDC or it's busy: -16 [ 697.613151][T16323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.621497][T16323] UDC core: couldn't find an available UDC or it's busy: -16 [ 697.622616][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.629335][T16323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.643976][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 697.651350][T16323] UDC core: couldn't find an available UDC or it's busy: -16 [ 697.659125][T16323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.667712][T16323] UDC core: couldn't find an available UDC or it's busy: -16 [ 697.675208][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.676279][T16323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.694202][T16323] UDC core: couldn't find an available UDC or it's busy: -16 [ 697.701583][T16323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.703989][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 697.717412][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 697.728442][ T3675] usb 4-1: USB disconnect, device number 27 [ 697.762723][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.773870][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.785811][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.795911][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 697.806190][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.922702][ T6] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 697.931887][ T6] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 697.940473][ T6] usb 2-1: Manufacturer: syz [ 697.949477][ T6] usb 2-1: config 0 descriptor?? [ 698.102520][ T3675] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 698.214250][T16333] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.221636][T16333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.230730][T16333] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.238331][T16333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.247218][T16333] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.254658][T16333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.264436][T16333] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.271826][T16333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.280330][T16333] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.288713][T16333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.352785][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 698.372699][ T6] rc_core: IR keymap rc-hauppauge not found [ 698.378626][ T6] Registered IR keymap rc-empty [ 698.384093][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.412706][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.443561][ T6] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 698.457280][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input260 [ 698.475592][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.492790][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.503397][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.514534][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 698.515970][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.524516][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 698.541527][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.582600][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.613622][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.642638][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.652678][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 698.661837][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 698.670700][ T3675] usb 4-1: Manufacturer: syz [ 698.677647][ T3675] usb 4-1: config 0 descriptor?? [ 698.682629][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:48 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 698.712711][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.742614][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.772589][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.802537][ T6] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 698.831949][ T4313] rc_core: IR keymap rc-hauppauge not found [ 698.833741][ T6] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 698.838766][ T4313] Registered IR keymap rc-empty [ 698.850954][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.854848][ T6] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 698.892595][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 698.907263][ T4314] usb 2-1: USB disconnect, device number 62 [ 698.923712][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 698.942790][T16337] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.946909][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input261 [ 698.959935][T16337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.974342][T16337] UDC core: couldn't find an available UDC or it's busy: -16 [ 698.984459][T16337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 698.992998][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.001558][T16337] UDC core: couldn't find an available UDC or it's busy: -16 [ 699.010491][T16337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 699.019602][T16337] UDC core: couldn't find an available UDC or it's busy: -16 [ 699.027316][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.028307][T16337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 699.045998][T16337] UDC core: couldn't find an available UDC or it's busy: -16 [ 699.053517][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.054320][T16337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 699.092909][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.135073][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.172564][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.203246][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.243654][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.272588][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.302580][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 699.345365][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 699.353532][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 699.373275][ T4313] usb 1-1: USB disconnect, device number 12 [ 699.752570][ T4313] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 699.992586][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:50 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:50 executing program 5: r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @mcast1, 0xfff}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "09d0a64f54d84816d7aef5b6"}], 0x18}, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000007cede66f64657a67684b6a6b6c6d6e76df2d213e05fd76b03847b6a479493f30945d1fa7f11a0ec5e0b3f476ee231ea558a62b1c9693c8381c6fff89bfdf142181907c314ae05b37ba70dbe9cff486250a841b567c14aed593cd8d697ee246e6e8d5e914e47b619c1fcbb6875c260249dce5864d76e217ab0c68d4135659e381a5"], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x0, @loopback}}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) socket$kcm(0x21, 0x2, 0x2) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffff, @mcast1, 0xfff}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "09d0a64f54d84816d7aef5b6"}], 0x18}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000007cede66f64657a67684b6a6b6c6d6e76df2d213e05fd76b03847b6a479493f30945d1fa7f11a0ec5e0b3f476ee231ea558a62b1c9693c8381c6fff89bfdf142181907c314ae05b37ba70dbe9cff486250a841b567c14aed593cd8d697ee246e6e8d5e914e47b619c1fcbb6875c260249dce5864d76e217ab0c68d4135659e381a5"], 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'vlan0\x00', {0x2, 0x0, @loopback}}) (async) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)) (async) 18:22:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x88a8ffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0xb, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:50 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f"]) [ 700.122875][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.147878][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.155705][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x9effffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 700.176501][T16366] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 700.187964][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 18:22:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x10, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x81000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 700.220115][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.236219][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:22:50 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x7, 0x0) getpid() getpid() syz_clone3(&(0x7f0000000b80)={0x40000000, 0x0, 0x0, &(0x7f0000000900), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 700.280727][ T3675] rc_core: IR keymap rc-hauppauge not found [ 700.285938][T16381] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 700.288065][ T3675] Registered IR keymap rc-empty [ 700.313821][T16383] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf0ffffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 700.326921][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.340454][T16385] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 700.351969][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:22:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x11, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 700.372695][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.381929][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.395279][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.422689][ T3673] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 700.423935][ T4313] usb 1-1: Manufacturer: syz [ 700.443012][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 700.449102][T16391] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 700.460764][ T4313] usb 1-1: config 0 descriptor?? [ 700.469791][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 700.475488][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input262 [ 700.505832][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.562539][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.602568][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.632697][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.672538][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 700.679081][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.712610][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.743472][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.747784][T16362] UDC core: couldn't find an available UDC or it's busy: -16 [ 700.759101][T16362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 700.768961][T16362] UDC core: couldn't find an available UDC or it's busy: -16 [ 700.776619][T16362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 700.782587][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.785173][T16362] UDC core: couldn't find an available UDC or it's busy: -16 [ 700.798997][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.799070][T16362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 700.809293][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.817283][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.842385][T16362] UDC core: couldn't find an available UDC or it's busy: -16 [ 700.850019][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.850845][T16362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 700.860361][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.878550][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 700.883404][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.916053][T16362] UDC core: couldn't find an available UDC or it's busy: -16 [ 700.923499][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 700.923528][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 700.929269][ T3675] usb 4-1: USB disconnect, device number 28 [ 700.940238][T16362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.012707][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.021744][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.031728][ T3673] usb 2-1: Manufacturer: syz [ 701.041006][ T3673] usb 2-1: config 0 descriptor?? [ 701.285000][T16368] UDC core: couldn't find an available UDC or it's busy: -16 [ 701.292384][T16368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.301914][T16368] UDC core: couldn't find an available UDC or it's busy: -16 [ 701.309504][T16368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.318067][T16368] UDC core: couldn't find an available UDC or it's busy: -16 [ 701.325596][T16368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.332561][ T3675] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 701.334631][T16368] UDC core: couldn't find an available UDC or it's busy: -16 [ 701.348207][T16368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.359202][T16368] UDC core: couldn't find an available UDC or it's busy: -16 [ 701.366664][T16368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 701.442590][ T3673] rc_core: IR keymap rc-hauppauge not found [ 701.448518][ T3673] Registered IR keymap rc-empty [ 701.453741][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.482714][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.512972][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 701.526831][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input263 [ 701.542642][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.582616][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.602606][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 701.612841][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.642804][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.672664][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.704389][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.732637][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.732676][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.743513][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.761398][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 701.771061][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 701.780864][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.782623][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.832542][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.869481][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.882725][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.891888][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.899980][ T3675] usb 4-1: Manufacturer: syz [ 701.906587][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 701.909380][ T3675] usb 4-1: config 0 descriptor?? [ 701.922215][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) 18:22:52 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 701.969059][ T3673] usb 2-1: USB disconnect, device number 63 [ 702.092528][ T4313] rc_core: IR keymap rc-hauppauge not found [ 702.098661][ T4313] Registered IR keymap rc-empty [ 702.104167][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.144154][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.159924][T16374] UDC core: couldn't find an available UDC or it's busy: -16 [ 702.167361][T16374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.175613][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 702.181448][T16374] UDC core: couldn't find an available UDC or it's busy: -16 [ 702.189773][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input264 [ 702.203642][T16374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.216886][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.226971][T16374] UDC core: couldn't find an available UDC or it's busy: -16 [ 702.237331][T16374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.246125][T16374] UDC core: couldn't find an available UDC or it's busy: -16 [ 702.254051][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.259471][T16374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.272346][T16374] UDC core: couldn't find an available UDC or it's busy: -16 [ 702.282649][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.284468][T16374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 702.312607][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.352953][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.382565][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.422685][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.452576][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.484783][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.532718][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.573761][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 702.581854][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 702.594214][ T4313] usb 1-1: USB disconnect, device number 13 [ 702.992533][ T4313] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 703.242581][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:53 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xf8190000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:53 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x7, 0x0) getpid() getpid() syz_clone3(&(0x7f0000000b80)={0x40000000, 0x0, 0x0, &(0x7f0000000900), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SPECULATION_CTRL(0x7, 0x0) (async) getpid() (async) getpid() (async) syz_clone3(&(0x7f0000000b80)={0x40000000, 0x0, 0x0, &(0x7f0000000900), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 18:22:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x14, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:53 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f"]) [ 703.336389][T16405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.352735][T16404] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 703.362842][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 18:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfc000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x44, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 703.389069][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 703.431439][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 703.458843][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:22:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x6b, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfe800000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 703.474999][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.485993][T16418] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.492495][ T3675] rc_core: IR keymap rc-hauppauge not found [ 703.501350][ T3675] Registered IR keymap rc-empty [ 703.509062][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.523449][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.562605][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.571131][T16421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.575389][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.593239][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 18:22:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfec00000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 703.612853][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 703.621905][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 703.633699][ T3673] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 703.645206][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input265 [ 703.677895][ T4313] usb 1-1: Manufacturer: syz [ 703.690243][ T4313] usb 1-1: config 0 descriptor?? [ 703.702833][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.713385][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.742767][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.772682][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.807238][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.845100][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.872824][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.902576][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.932579][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 703.932743][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.960738][T16398] UDC core: couldn't find an available UDC or it's busy: -16 [ 703.969721][T16398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 703.977544][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 703.991218][T16398] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.000057][T16398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.008740][T16398] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.016564][T16398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.032100][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 704.032805][T16398] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.046959][T16398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.058048][T16398] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.066626][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 704.067666][T16398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.074826][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 704.082647][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.109210][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.117286][ T3675] usb 4-1: USB disconnect, device number 29 [ 704.122045][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.135881][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.145831][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.252658][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 704.261950][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 704.270333][ T3673] usb 2-1: Manufacturer: syz [ 704.280451][ T3673] usb 2-1: config 0 descriptor?? [ 704.512527][ T3675] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 704.524784][T16406] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.532199][T16406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.540852][T16406] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.551823][T16406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.560454][T16406] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.568298][T16406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.576823][T16406] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.587755][T16406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.597294][T16406] UDC core: couldn't find an available UDC or it's busy: -16 [ 704.605077][T16406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 704.692592][ T3673] rc_core: IR keymap rc-hauppauge not found [ 704.698498][ T3673] Registered IR keymap rc-empty [ 704.708383][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.744937][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.752551][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 704.773664][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 704.788282][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input266 [ 704.804398][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.842820][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.872569][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.872642][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.890146][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.901130][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.910865][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.912882][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 704.920982][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.962697][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 705.012619][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.012974][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 705.022154][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.037547][ T3675] usb 4-1: Manufacturer: syz [ 705.044523][ T3675] usb 4-1: config 0 descriptor?? [ 705.062835][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 705.092747][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:22:55 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 705.132634][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 705.172853][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 705.219820][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 705.222617][ T4313] rc_core: IR keymap rc-hauppauge not found [ 705.228541][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 705.242520][ T4313] Registered IR keymap rc-empty [ 705.247485][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.256850][ T3673] usb 2-1: USB disconnect, device number 64 [ 705.282595][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.288495][T16410] UDC core: couldn't find an available UDC or it's busy: -16 [ 705.309874][T16410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 705.318520][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 705.335981][T16410] UDC core: couldn't find an available UDC or it's busy: -16 [ 705.339994][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input267 [ 705.343989][T16410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 705.366376][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.370648][T16410] UDC core: couldn't find an available UDC or it's busy: -16 [ 705.381228][T16410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 705.390453][T16410] UDC core: couldn't find an available UDC or it's busy: -16 [ 705.397900][T16410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 705.402654][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.406403][T16410] UDC core: couldn't find an available UDC or it's busy: -16 [ 705.419997][T16410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 705.452683][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.483485][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.513488][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.543091][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.572557][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.603472][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.632622][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.662678][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 705.693555][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 705.701579][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 705.714294][ T4313] usb 1-1: USB disconnect, device number 14 [ 706.082558][ T4313] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 706.322766][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:56 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xff000000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:56 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x7, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) getpid() syz_clone3(&(0x7f0000000b80)={0x40000000, 0x0, 0x0, &(0x7f0000000900), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:22:56 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) [ 706.442747][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.453324][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 18:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 706.489628][T16438] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 706.500891][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 18:22:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xffffa888, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 706.537960][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 706.592983][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.606053][ T3675] rc_core: IR keymap rc-hauppauge not found [ 706.611956][ T3675] Registered IR keymap rc-empty [ 706.618515][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:22:56 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 706.662242][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 706.673239][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.692267][T16452] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xffffe000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 706.703284][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 706.717089][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.730383][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.757919][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input268 [ 706.779671][ T4313] usb 1-1: Manufacturer: syz [ 706.782699][ T3715] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 706.790558][ T4313] usb 1-1: config 0 descriptor?? [ 706.800250][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 706.814264][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.844782][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.882619][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.912776][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.942643][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 706.972587][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.002823][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.034873][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.047706][T16432] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.052708][ T3715] usb 2-1: Using ep0 maxpacket: 16 [ 707.055396][T16432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.068552][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.072772][ T14] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 707.080485][T16432] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.090895][T16432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.101015][T16432] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.108729][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 707.116103][T16432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.124892][T16432] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.132364][T16432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.144873][T16432] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.152263][T16432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.153561][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 707.169939][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.181453][ T3675] usb 4-1: USB disconnect, device number 30 [ 707.192934][ T3715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.203938][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.215693][ T3715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.230359][ T3715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 707.248050][ T3715] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.342547][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 707.352720][ T3715] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.361774][ T3715] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 707.370052][ T3715] usb 2-1: Manufacturer: syz [ 707.378416][ T3715] usb 2-1: config 0 descriptor?? [ 707.472984][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.485896][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.497065][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 707.506876][ T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 707.516774][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.562765][ T3675] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 707.612730][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 707.621801][ T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 707.632013][T16439] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.639607][T16439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.647497][ T14] usb 6-1: Manufacturer: syz [ 707.661320][ T14] usb 6-1: config 0 descriptor?? [ 707.667218][T16439] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.676294][T16439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.685529][T16439] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.693204][T16439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.701681][T16439] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.709781][T16439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.722724][T16439] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.730105][T16439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.822597][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 707.822654][ T3715] rc_core: IR keymap rc-hauppauge not found [ 707.834161][ T3715] Registered IR keymap rc-empty [ 707.839066][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.882587][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.923612][ T3715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 707.929971][T16454] UDC core: couldn't find an available UDC or it's busy: -16 [ 707.937677][ T3715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input269 [ 707.944253][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.969301][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.974419][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.984278][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.996332][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 708.006255][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 708.016293][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.016804][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.032249][T16454] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.044260][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.061615][T16454] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.069232][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.076479][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.087790][T16454] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.095631][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.106828][T16454] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.114362][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.114436][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 708.123776][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.131291][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.146556][ T3675] usb 4-1: Manufacturer: syz [ 708.152695][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.155186][ T3675] usb 4-1: config 0 descriptor?? 18:22:58 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 708.187779][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.257745][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.302649][ T4313] rc_core: IR keymap rc-hauppauge not found [ 708.302655][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.315808][ T4313] Registered IR keymap rc-empty [ 708.320709][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.332680][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.352746][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.362843][ T3715] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 708.383937][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 708.400672][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input270 [ 708.415013][ T3715] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 708.429658][ T3715] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 708.429690][T16444] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.442889][ T3715] usb 2-1: USB disconnect, device number 65 [ 708.458263][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.467168][T16444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.487059][T16444] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.498700][T16444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.498877][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.508030][T16444] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.522967][T16444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.534500][T16444] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.542037][T16444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.551291][T16444] UDC core: couldn't find an available UDC or it's busy: -16 [ 708.559892][T16444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 708.562585][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.607503][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.642529][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.672570][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.704749][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.732579][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.762584][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.792548][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 708.825012][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 708.833332][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 708.845784][ T4313] usb 1-1: USB disconnect, device number 15 [ 709.231872][ T4313] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 709.472693][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:22:59 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:22:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:22:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfffff000, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:59 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 18:22:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 709.602802][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.623730][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.643223][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xffffff7f, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:22:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 709.661731][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.679654][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:22:59 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 709.716074][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.753205][T16479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 709.763108][ T3675] rc_core: IR keymap rc-hauppauge not found [ 709.764303][T16480] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 709.769019][ T3675] Registered IR keymap rc-empty [ 709.769099][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:23:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xffffff9e, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 709.842946][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 709.873440][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 709.878736][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xfffffff0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 709.900362][ T4314] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 709.902725][ T14] rc_core: IR keymap rc-hauppauge not found [ 709.908406][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 709.917921][ T14] Registered IR keymap rc-empty [ 709.928417][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 709.940623][ T4313] usb 1-1: Manufacturer: syz [ 709.962775][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 709.964768][ T4313] usb 1-1: config 0 descriptor?? [ 709.980007][T16489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.993547][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 710.003184][ T14] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 710.007695][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input271 [ 710.044353][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.057807][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input272 [ 710.074217][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.083629][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.112822][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.113929][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.142778][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.152546][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.172764][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.185072][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.202806][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.222623][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 710.222662][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.238593][T16464] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.246610][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.249933][T16464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.262861][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.272578][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.280777][T16464] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.288457][T16464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.292720][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.297011][T16464] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.310488][T16464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.318468][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.330179][T16464] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.337786][T16464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.348239][T16464] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.355929][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.358101][T16464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.370940][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.381219][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 710.388552][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.392596][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.399972][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.417073][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 710.428938][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.439591][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 710.442581][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 710.448829][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.471196][ T3675] usb 4-1: USB disconnect, device number 31 [ 710.499583][ T14] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 710.508237][ T14] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 710.519996][ T14] usb 6-1: USB disconnect, device number 69 [ 710.563436][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 710.573385][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.581568][ T4314] usb 2-1: Manufacturer: syz [ 710.597954][ T4314] usb 2-1: config 0 descriptor?? [ 710.844759][T16469] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.852270][T16469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.862177][T16469] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.869667][T16469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.881098][T16469] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.888624][T16469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.892588][ T3675] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 710.897560][T16469] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.911381][ T14] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 710.918091][T16469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 710.932429][T16469] UDC core: couldn't find an available UDC or it's busy: -16 [ 710.939941][T16469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.032795][ T4314] rc_core: IR keymap rc-hauppauge not found [ 711.039291][ T4314] Registered IR keymap rc-empty [ 711.044731][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.083103][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.123482][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 711.138182][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input273 [ 711.152611][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 711.152886][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 711.159279][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.202857][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.242854][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.282806][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.284055][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.298718][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.303890][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.322018][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.326057][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.333618][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.352802][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.360184][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 711.360242][ T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:23:01 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 711.370491][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.393245][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.400747][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.423302][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.473470][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.482908][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.492046][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.492733][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.500313][ T3675] usb 4-1: Manufacturer: syz [ 711.514062][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.518337][ T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.521262][ T4313] rc_core: IR keymap rc-hauppauge not found [ 711.531452][ T14] usb 6-1: Manufacturer: syz [ 711.536124][ T4313] Registered IR keymap rc-empty [ 711.546357][ T3675] usb 4-1: config 0 descriptor?? [ 711.553310][ T14] usb 6-1: config 0 descriptor?? [ 711.557052][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.566806][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 711.613707][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 711.621734][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 711.630758][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.640371][ T4314] usb 2-1: USB disconnect, device number 66 [ 711.673087][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 711.698240][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input274 [ 711.717872][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.752652][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.782630][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.789395][T16473] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.798146][T16473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.807953][T16473] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.815659][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.823403][T16473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.834642][T16473] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.842303][T16473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.851987][T16473] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.855000][T16483] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.859697][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.874804][T16473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.875007][T16483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.884733][T16473] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.897923][T16473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.920657][T16483] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.928280][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.928416][T16483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.954632][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.964325][T16483] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.971711][T16483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.983154][T16483] UDC core: couldn't find an available UDC or it's busy: -16 [ 711.990620][T16483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 711.992501][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.006309][T16483] UDC core: couldn't find an available UDC or it's busy: -16 [ 712.013924][T16483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 712.032630][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.064454][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.093859][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 712.102106][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 712.129706][ T4313] usb 1-1: USB disconnect, device number 16 [ 712.542669][ T4313] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 712.782538][ T4313] usb 1-1: Using ep0 maxpacket: 16 18:23:03 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6b, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:23:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0xffffffff, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:03 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64]) 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 712.935966][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.952373][T16499] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 712.976268][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.004057][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 18:23:03 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x7, 0x0) getpid() getpid() syz_clone3(&(0x7f0000000b80)={0x40000000, 0x0, 0x0, &(0x7f0000000900), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 713.041691][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 713.056699][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.082673][ T3675] rc_core: IR keymap rc-hauppauge not found 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x136, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:23:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x2, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 713.092110][ T3675] Registered IR keymap rc-empty [ 713.104223][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.113214][T16511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x801, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 713.162668][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.170146][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 713.189991][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 713.212962][ T14] rc_core: IR keymap rc-hauppauge not found [ 713.213085][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 713.219016][ T3259] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 713.236094][ T4313] usb 1-1: Manufacturer: syz [ 713.239835][ T14] Registered IR keymap rc-empty [ 713.254949][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.270677][ T4313] usb 1-1: config 0 descriptor?? [ 713.277727][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input275 [ 713.295421][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.300201][T16518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 713.313331][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3001, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 713.332562][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.348535][ T14] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 713.379334][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input276 [ 713.382500][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.432680][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.447442][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.472067][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.487359][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.512515][ T3259] usb 2-1: Using ep0 maxpacket: 16 [ 713.512707][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.523278][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.536257][T16496] UDC core: couldn't find an available UDC or it's busy: -16 [ 713.544099][T16496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.553061][T16496] UDC core: couldn't find an available UDC or it's busy: -16 [ 713.560568][T16496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.562526][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.568265][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.584087][T16496] UDC core: couldn't find an available UDC or it's busy: -16 [ 713.591603][T16496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.602192][T16496] UDC core: couldn't find an available UDC or it's busy: -16 [ 713.609760][T16496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.618549][T16496] UDC core: couldn't find an available UDC or it's busy: -16 [ 713.622621][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.626633][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.640528][T16496] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 713.662626][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.662821][ T3259] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.680176][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.687787][ T3259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.698760][ T3259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.702821][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.708464][ T3259] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 713.725685][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.733690][ T3259] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.755757][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 713.762839][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.764013][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 713.792649][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.803856][ T3675] usb 4-1: USB disconnect, device number 32 [ 713.822845][ T3259] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 713.832319][ T14] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 713.843549][ T3259] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 713.851993][ T3259] usb 2-1: Manufacturer: syz [ 713.860354][ T3259] usb 2-1: config 0 descriptor?? [ 713.873739][ T14] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 713.881828][ T14] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 713.895114][ T14] usb 6-1: USB disconnect, device number 70 [ 714.107420][T16503] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.114905][T16503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.123932][T16503] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.131798][T16503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.140550][T16503] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.148139][T16503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.157700][T16503] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.165384][T16503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.174457][T16503] UDC core: couldn't find an available UDC or it's busy: -16 [ 714.181958][T16503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 714.202584][ T3675] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 714.272578][ T3259] rc_core: IR keymap rc-hauppauge not found [ 714.278689][ T3259] Registered IR keymap rc-empty [ 714.284240][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.312558][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.345491][ T3259] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 714.359162][ T3259] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input277 [ 714.374253][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.402665][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.432720][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.462603][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.472748][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 714.493018][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.522536][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.555753][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.592588][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.622722][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.622756][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:04 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 714.637712][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.651544][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.661585][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.664280][ T3259] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 714.678552][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.723723][ T3259] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 714.731800][ T3259] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.781299][ T3259] usb 2-1: USB disconnect, device number 67 [ 714.792866][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.801966][ T4313] rc_core: IR keymap rc-hauppauge not found [ 714.814717][ T4313] Registered IR keymap rc-empty [ 714.819703][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.828133][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 714.842154][ T3675] usb 4-1: Manufacturer: syz [ 714.853012][ T3675] usb 4-1: config 0 descriptor?? [ 714.872974][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 714.913437][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 714.926894][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input278 [ 714.941860][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 714.972558][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.003622][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.032584][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.062611][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.096383][T16506] UDC core: couldn't find an available UDC or it's busy: -16 [ 715.102632][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.105217][T16506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.121957][T16506] UDC core: couldn't find an available UDC or it's busy: -16 [ 715.129422][T16506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.138307][T16506] UDC core: couldn't find an available UDC or it's busy: -16 [ 715.146169][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.153419][T16506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.164009][T16506] UDC core: couldn't find an available UDC or it's busy: -16 [ 715.171523][T16506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.180342][T16506] UDC core: couldn't find an available UDC or it's busy: -16 [ 715.187794][T16506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 715.202657][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.242649][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.272664][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.304706][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 715.312909][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 715.333297][ T4313] usb 1-1: USB disconnect, device number 17 [ 715.752658][ T4313] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 715.992503][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 716.112594][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.123213][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.134334][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 716.144172][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 716.153997][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:23:06 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:06 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) 18:23:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x3, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x35, 0xca, 0x40, 0x5f9, 0xffff, 0x6627, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x21}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x38, 0x5, {0x5, 0x24, "6b6dd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "a93e9e5495a6347489cc968d72a890409b51c3358c898fe6bca1ffc4a89a680105994caffcb7141765a9b45264b233419e910c5d56e36fa40cc1a9279f4f5cdb7ceb04377aabee026a6a1291199a739eb2ce196a47554dcf04c7095fb9be03ed6b0c1a798791696a69d9651f664e89aa1261fb7c0ec99dff"}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x9, "75681439"}, @main=@item_4={0x3, 0x0, 0xb, "12e2848b"}, @local=@item_4={0x3, 0x2, 0x1, "f691b70c"}, @main=@item_012={0x2, 0x0, 0xc, "aebb"}, @global=@item_4={0x3, 0x1, 0x8, "940bb8cf"}, @main=@item_4={0x3, 0x0, 0xc, "b8980beb"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x51b}}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x20, 0x5, 0xb7, "b35906328048342cd50ddacf25f9a0f461f4a60849e419e991b70b857b9e5e10e5566ccd5d43ac3bd2510b1d94cfa9e2a71a007b65e5b61c05c1319cfcb67e187552d0fa1f72ba81d26a937a588ae6323f9dbf80d8f3462ccc8389872245466a05e338a3ee4d145f313c794d82be9e816f87f50bb29a0f1f108be8ca9d47ae27a59412b85869bc77081fa893dedb9b9fe6773f62419ab67438179c7e7176915d664106a344e60952155652a6d831ad048c1532f627068d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x1, 0x41, "3b7b9ccf5958e69c47283879c1ff6294f53eba511f90b4313aaa800eaf1d5cee4f1503f409b1c4030797246200afe399ebeb507962e4d39eaaf2a429f31bcc6eff"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3f}}) 18:23:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x3, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 716.241940][T16536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.244936][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.261680][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:23:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x4, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x28, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 716.284546][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.320138][ T4313] usb 1-1: Manufacturer: syz [ 716.329471][ T4313] usb 1-1: config 0 descriptor?? [ 716.353158][ T3675] rc_core: IR keymap rc-hauppauge not found [ 716.355324][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:23:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 716.359718][ T3675] Registered IR keymap rc-empty [ 716.381801][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.393140][T16545] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.408980][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:23:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x6b, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:23:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x5, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 716.413834][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.460448][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.473112][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 716.494386][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input279 18:23:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x6b, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 716.502885][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 716.510314][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.517582][ T3259] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 716.533300][ T4314] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 716.558247][T16554] netlink: 'syz-executor.2': attribute type 107 has an invalid length. [ 716.580542][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.588296][T16529] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.607371][T16529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.616260][T16529] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.623869][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.631156][T16529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.639815][T16529] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.647305][T16529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.655042][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.665394][T16529] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.673248][T16529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.681422][T16529] UDC core: couldn't find an available UDC or it's busy: -16 [ 716.688954][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.696741][T16529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 716.732633][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.762751][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.792602][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 716.798950][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.832959][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.862707][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 716.893952][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 716.902328][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 716.912708][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.924380][ T3675] usb 4-1: USB disconnect, device number 33 [ 716.933018][ T3259] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=66.27 [ 716.939675][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 716.942085][ T3259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.954451][ T3259] usb 6-1: config 0 descriptor?? [ 716.982021][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 716.991925][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 717.002303][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.028096][ T3259] usbserial_generic 6-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 717.047966][ T3259] usbserial_generic 6-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 717.060694][ T3259] usbserial_generic 6-1:0.0: device has no bulk endpoints [ 717.068606][ T3259] safe_serial 6-1:0.0: safe_serial converter detected [ 717.075570][ T3259] safe_serial: probe of 6-1:0.0 failed with error -22 [ 717.092797][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 717.102509][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 717.110659][ T4314] usb 2-1: Manufacturer: syz [ 717.117687][ T4314] usb 2-1: config 0 descriptor?? [ 717.366272][T16537] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.372540][ T3675] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 717.373765][T16537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.393027][T16537] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.400588][T16537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.411763][T16537] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.419466][T16537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.429041][T16537] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.436840][T16537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.446526][T16537] UDC core: couldn't find an available UDC or it's busy: -16 [ 717.454926][T16537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 717.542694][ T4314] rc_core: IR keymap rc-hauppauge not found [ 717.548901][ T4314] Registered IR keymap rc-empty [ 717.554281][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.582661][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.612522][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 717.618967][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 717.634055][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input280 [ 717.657641][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:07 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 717.693210][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.722669][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.732919][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.749112][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.761190][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 717.772154][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 717.790294][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.797761][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.822562][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.837592][ T4313] rc_core: IR keymap rc-hauppauge not found [ 717.843891][ T4313] Registered IR keymap rc-empty [ 717.848805][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 717.861160][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.882646][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 717.891728][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 717.905037][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.912343][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 717.920445][ T3675] usb 4-1: Manufacturer: syz [ 717.927801][ T3675] usb 4-1: config 0 descriptor?? [ 717.933117][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.953369][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 717.966298][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 717.975787][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input281 [ 717.991072][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.002603][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 718.022919][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.033699][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 718.041788][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.052769][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.068330][ T4314] usb 2-1: USB disconnect, device number 68 [ 718.082649][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.112907][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.154185][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.179708][T16541] UDC core: couldn't find an available UDC or it's busy: -16 [ 718.182555][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.187381][T16541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 718.205008][T16541] UDC core: couldn't find an available UDC or it's busy: -16 [ 718.212381][T16541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 718.220951][T16541] UDC core: couldn't find an available UDC or it's busy: -16 [ 718.228791][T16541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 718.232678][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.237849][T16541] UDC core: couldn't find an available UDC or it's busy: -16 [ 718.250909][T16541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 718.262357][T16541] UDC core: couldn't find an available UDC or it's busy: -16 [ 718.270047][T16541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 718.292753][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.322573][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 718.353869][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 718.361965][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.373978][ T4313] usb 1-1: USB disconnect, device number 18 [ 718.762544][ T4313] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 719.022679][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 719.152713][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.163113][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 719.174395][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 719.184286][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 719.194207][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.223496][ T14] usb 6-1: USB disconnect, device number 71 18:23:09 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x117, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:23:09 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) 18:23:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x35, 0xca, 0x40, 0x5f9, 0xffff, 0x6627, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x21}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x38, 0x5, {0x5, 0x24, "6b6dd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "a93e9e5495a6347489cc968d72a890409b51c3358c898fe6bca1ffc4a89a680105994caffcb7141765a9b45264b233419e910c5d56e36fa40cc1a9279f4f5cdb7ceb04377aabee026a6a1291199a739eb2ce196a47554dcf04c7095fb9be03ed6b0c1a798791696a69d9651f664e89aa1261fb7c0ec99dff"}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x9, "75681439"}, @main=@item_4={0x3, 0x0, 0xb, "12e2848b"}, @local=@item_4={0x3, 0x2, 0x1, "f691b70c"}, @main=@item_012={0x2, 0x0, 0xc, "aebb"}, @global=@item_4={0x3, 0x1, 0x8, "940bb8cf"}, @main=@item_4={0x3, 0x0, 0xc, "b8980beb"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x51b}}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x20, 0x5, 0xb7, "b35906328048342cd50ddacf25f9a0f461f4a60849e419e991b70b857b9e5e10e5566ccd5d43ac3bd2510b1d94cfa9e2a71a007b65e5b61c05c1319cfcb67e187552d0fa1f72ba81d26a937a588ae6323f9dbf80d8f3462ccc8389872245466a05e338a3ee4d145f313c794d82be9e816f87f50bb29a0f1f108be8ca9d47ae27a59412b85869bc77081fa893dedb9b9fe6773f62419ab67438179c7e7176915d664106a344e60952155652a6d831ad048c1532f627068d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x1, 0x41, "3b7b9ccf5958e69c47283879c1ff6294f53eba511f90b4313aaa800eaf1d5cee4f1503f409b1c4030797246200afe399ebeb507962e4d39eaaf2a429f31bcc6eff"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3f}}) [ 719.298881][T16563] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.313259][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 719.322334][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 719.335743][ T4313] usb 1-1: Manufacturer: syz 18:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x7, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x136, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 719.360147][ T4313] usb 1-1: config 0 descriptor?? 18:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x8, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 719.411615][T16573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x9, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x3}]}]}, 0x28}}, 0x0) [ 719.465966][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 719.473296][ T3675] rc_core: IR keymap rc-hauppauge not found [ 719.481476][ T3675] Registered IR keymap rc-empty [ 719.488955][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.532811][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.574559][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 719.601334][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input282 [ 719.620125][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.632219][T16558] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.640016][T16558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.649186][T16558] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.656789][T16558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.667977][T16558] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.670969][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.675692][T16558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.682597][ T4314] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 719.695244][T16558] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.705252][T16558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.713010][ T14] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 719.722879][T16558] UDC core: couldn't find an available UDC or it's busy: -16 [ 719.730285][T16558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 719.737890][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.782942][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.824543][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.852669][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.884963][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.922956][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 719.952569][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 719.958200][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.002796][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.043837][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 720.051862][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 720.064981][ T3675] usb 4-1: USB disconnect, device number 34 [ 720.072646][ T14] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=66.27 [ 720.086521][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.102870][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.113908][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.117057][ T14] usb 6-1: config 0 descriptor?? [ 720.126153][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.140683][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.150519][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.183886][ T14] usbserial_generic 6-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 720.195606][ T14] usbserial_generic 6-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 720.207213][ T14] usbserial_generic 6-1:0.0: device has no bulk endpoints [ 720.215913][ T14] safe_serial 6-1:0.0: safe_serial converter detected [ 720.223294][ T14] safe_serial: probe of 6-1:0.0 failed with error -22 [ 720.262783][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 720.272065][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 720.280945][ T4314] usb 2-1: Manufacturer: syz [ 720.288270][ T4314] usb 2-1: config 0 descriptor?? [ 720.472548][ T3675] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 720.544706][T16566] UDC core: couldn't find an available UDC or it's busy: -16 [ 720.552175][T16566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.561688][T16566] UDC core: couldn't find an available UDC or it's busy: -16 [ 720.569168][T16566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.577774][T16566] UDC core: couldn't find an available UDC or it's busy: -16 [ 720.585876][T16566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.594917][T16566] UDC core: couldn't find an available UDC or it's busy: -16 [ 720.602357][T16566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.611034][T16566] UDC core: couldn't find an available UDC or it's busy: -16 [ 720.620143][T16566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 720.692567][ T4314] rc_core: IR keymap rc-hauppauge not found [ 720.698529][ T4314] Registered IR keymap rc-empty [ 720.708441][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 720.715702][ T3675] usb 4-1: Using ep0 maxpacket: 16 18:23:10 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 720.749772][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 720.803214][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 720.818060][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input283 [ 720.848041][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 720.872911][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.883459][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.894961][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 720.902367][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.902699][ T4313] rc_core: IR keymap rc-hauppauge not found [ 720.918490][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.928525][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 720.935837][ T4313] Registered IR keymap rc-empty [ 720.940735][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 720.948247][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.992772][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.000041][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.022589][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.033221][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 721.046035][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 721.055269][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.063737][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input284 [ 721.078061][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 721.086473][ T3675] usb 4-1: Manufacturer: syz [ 721.094957][ T3675] usb 4-1: config 0 descriptor?? [ 721.100030][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.107430][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.143160][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.150482][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.175044][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.192776][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.202596][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 721.224599][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.233895][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 721.241980][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.258329][ T4314] usb 2-1: USB disconnect, device number 69 [ 721.265040][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.303295][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.332755][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.362572][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.376976][T16571] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.386056][T16571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.394723][T16571] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.402660][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.410162][T16571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.418523][T16571] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.426139][T16571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.436001][T16571] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.442623][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 721.443492][T16571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.461969][T16571] UDC core: couldn't find an available UDC or it's busy: -16 [ 721.469482][T16571] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 721.483815][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 721.491824][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 721.513192][ T4313] usb 1-1: USB disconnect, device number 19 [ 721.912516][ T4313] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 722.202699][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 722.321990][ T14] usb 6-1: USB disconnect, device number 72 [ 722.354247][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.364421][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 722.375610][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 722.385332][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 722.395164][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:23:12 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xa, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x8}]}]}, 0x28}}, 0x0) 18:23:12 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) 18:23:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x35, 0xca, 0x40, 0x5f9, 0xffff, 0x6627, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x21}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x38, 0x5, {0x5, 0x24, "6b6dd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "a93e9e5495a6347489cc968d72a890409b51c3358c898fe6bca1ffc4a89a680105994caffcb7141765a9b45264b233419e910c5d56e36fa40cc1a9279f4f5cdb7ceb04377aabee026a6a1291199a739eb2ce196a47554dcf04c7095fb9be03ed6b0c1a798791696a69d9651f664e89aa1261fb7c0ec99dff"}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x9, "75681439"}, @main=@item_4={0x3, 0x0, 0xb, "12e2848b"}, @local=@item_4={0x3, 0x2, 0x1, "f691b70c"}, @main=@item_012={0x2, 0x0, 0xc, "aebb"}, @global=@item_4={0x3, 0x1, 0x8, "940bb8cf"}, @main=@item_4={0x3, 0x0, 0xc, "b8980beb"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x51b}}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x20, 0x5, 0xb7, "b35906328048342cd50ddacf25f9a0f461f4a60849e419e991b70b857b9e5e10e5566ccd5d43ac3bd2510b1d94cfa9e2a71a007b65e5b61c05c1319cfcb67e187552d0fa1f72ba81d26a937a588ae6323f9dbf80d8f3462ccc8389872245466a05e338a3ee4d145f313c794d82be9e816f87f50bb29a0f1f108be8ca9d47ae27a59412b85869bc77081fa893dedb9b9fe6773f62419ab67438179c7e7176915d664106a344e60952155652a6d831ad048c1532f627068d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x1, 0x41, "3b7b9ccf5958e69c47283879c1ff6294f53eba511f90b4313aaa800eaf1d5cee4f1503f409b1c4030797246200afe399ebeb507962e4d39eaaf2a429f31bcc6eff"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3f}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x35, 0xca, 0x40, 0x5f9, 0xffff, 0x6627, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x21}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x38, 0x5, {0x5, 0x24, "6b6dd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "a93e9e5495a6347489cc968d72a890409b51c3358c898fe6bca1ffc4a89a680105994caffcb7141765a9b45264b233419e910c5d56e36fa40cc1a9279f4f5cdb7ceb04377aabee026a6a1291199a739eb2ce196a47554dcf04c7095fb9be03ed6b0c1a798791696a69d9651f664e89aa1261fb7c0ec99dff"}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x9, "75681439"}, @main=@item_4={0x3, 0x0, 0xb, "12e2848b"}, @local=@item_4={0x3, 0x2, 0x1, "f691b70c"}, @main=@item_012={0x2, 0x0, 0xc, "aebb"}, @global=@item_4={0x3, 0x1, 0x8, "940bb8cf"}, @main=@item_4={0x3, 0x0, 0xc, "b8980beb"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x51b}}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x20, 0x5, 0xb7, "b35906328048342cd50ddacf25f9a0f461f4a60849e419e991b70b857b9e5e10e5566ccd5d43ac3bd2510b1d94cfa9e2a71a007b65e5b61c05c1319cfcb67e187552d0fa1f72ba81d26a937a588ae6323f9dbf80d8f3462ccc8389872245466a05e338a3ee4d145f313c794d82be9e816f87f50bb29a0f1f108be8ca9d47ae27a59412b85869bc77081fa893dedb9b9fe6773f62419ab67438179c7e7176915d664106a344e60952155652a6d831ad048c1532f627068d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x1, 0x41, "3b7b9ccf5958e69c47283879c1ff6294f53eba511f90b4313aaa800eaf1d5cee4f1503f409b1c4030797246200afe399ebeb507962e4d39eaaf2a429f31bcc6eff"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3f}}) (async) 18:23:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x44}]}]}, 0x28}}, 0x0) [ 722.502734][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 722.522958][T16598] __nla_validate_parse: 1 callbacks suppressed [ 722.522979][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.539996][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 18:23:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xc, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 722.571960][ T4313] usb 1-1: Manufacturer: syz 18:23:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6b}]}]}, 0x28}}, 0x0) 18:23:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x44}]}]}, 0x28}}, 0x0) [ 722.610930][ T4313] usb 1-1: config 0 descriptor?? [ 722.622679][ T3675] rc_core: IR keymap rc-hauppauge not found [ 722.626120][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.638076][ T3675] Registered IR keymap rc-empty [ 722.646507][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.692688][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.716328][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.726878][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 18:23:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x6b}]}]}, 0x28}}, 0x0) [ 722.750525][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input285 [ 722.782829][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.812705][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.863124][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.890154][T16587] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.892513][ T14] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 722.897793][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.912496][T16587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.920848][T16587] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.930007][T16587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.941348][T16587] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.942515][ T4314] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 722.948867][T16587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.956647][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 722.968002][T16587] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.978556][T16587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.988244][T16587] UDC core: couldn't find an available UDC or it's busy: -16 [ 722.995695][T16587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.002644][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.032594][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.062816][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.093050][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.124002][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 723.163769][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 723.171781][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 723.183112][ T3675] usb 4-1: USB disconnect, device number 35 [ 723.212531][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 723.282741][ T14] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=66.27 [ 723.291817][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.310317][ T14] usb 6-1: config 0 descriptor?? [ 723.342759][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.357506][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.358005][ T14] usbserial_generic 6-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 723.368525][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 723.380618][ T14] usbserial_generic 6-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 723.397344][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 723.401203][ T14] usbserial_generic 6-1:0.0: device has no bulk endpoints [ 723.419077][ T14] safe_serial 6-1:0.0: safe_serial converter detected [ 723.426062][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.426523][ T14] safe_serial: probe of 6-1:0.0 failed with error -22 [ 723.542687][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 723.552770][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 723.560932][ T4314] usb 2-1: Manufacturer: syz [ 723.568052][ T4314] usb 2-1: config 0 descriptor?? [ 723.592600][ T3675] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 723.814955][T16595] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.822360][T16595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.831094][T16595] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.838500][T16595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.848353][T16595] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.852500][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 723.855823][T16595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.872182][T16595] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.879652][T16595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.888773][T16595] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.897102][T16595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.906366][T16615] UDC core: couldn't find an available UDC or it's busy: -16 [ 723.916158][T16615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 723.972978][ T4314] rc_core: IR keymap rc-hauppauge not found [ 723.978915][ T4314] Registered IR keymap rc-empty [ 723.984199][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 723.992904][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.003136][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 724.014193][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:14 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) [ 724.021501][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 724.031402][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 724.041134][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.055561][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 724.086188][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input286 [ 724.104288][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.133202][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.172849][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 724.181926][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 724.190111][ T4313] rc_core: IR keymap rc-hauppauge not found [ 724.196241][ T4313] Registered IR keymap rc-empty [ 724.201146][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.208451][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.215860][ T3675] usb 4-1: Manufacturer: syz [ 724.222329][ T3675] usb 4-1: config 0 descriptor?? [ 724.252818][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.260505][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.285005][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 724.297891][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.305910][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input287 [ 724.321284][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.342721][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.354542][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.372547][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.382993][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.402677][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.422626][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.442587][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.454851][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.472944][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 724.487869][T16601] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.495519][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.503883][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 724.511885][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 724.520228][T16601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.521311][T16601] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.535711][T16601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.545944][ T4314] usb 2-1: USB disconnect, device number 70 [ 724.556759][T16601] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.560427][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.564602][T16601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.590280][T16601] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.598207][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.607399][T16601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.622179][T16601] UDC core: couldn't find an available UDC or it's busy: -16 [ 724.632758][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.638227][T16601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 724.675133][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 724.724431][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 724.732581][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 724.755307][ T4313] usb 1-1: USB disconnect, device number 20 [ 725.142739][ T4313] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 725.422606][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 725.510466][ T14] usb 6-1: USB disconnect, device number 73 [ 725.572866][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.583359][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.594550][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 725.604754][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 725.614505][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:23:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) 18:23:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xf, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:15 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r1]) 18:23:15 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/31) syz_clone(0x100, &(0x7f0000000040)="6a9883be68950584218ee67fa24d4a2a48857b74c504ffb6a5cd4c2f6f91d991eb5e5fd8ae1d268956a41adce10532365ffea773056465564637f162057f3726e8af22d6f784f448d4bb0810daf4662ec20ad9b8413e239f05cc2de88e45e21628ab2d5e685520d18e6ec95ce5438dcee084094cc0977d251945d845a510c5ed39e32d0adbbe92f8557fc16538f2cc21a33ee44b606f5cdba76e", 0x9a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e0f99b810b603ccce5073832be050296b1e28c23fadea3bedbbae9eb578660855ddd5fd170b74ad62afc46f3fee47870ab5d16b2b951117490728d75c6582ad90a8f8c5f321387bae8f7ae87d0ad7814a7ee24bae8f7d9980737d71eed494537042ad59e65dee630558ca06cea6566c45f33768379edd86065f37a72580799d027c4078aca8e7acd96d221c775e240b98debf191e020") 18:23:15 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}]}]}, 0x28}}, 0x0) 18:23:15 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/31) syz_clone(0x100, &(0x7f0000000040)="6a9883be68950584218ee67fa24d4a2a48857b74c504ffb6a5cd4c2f6f91d991eb5e5fd8ae1d268956a41adce10532365ffea773056465564637f162057f3726e8af22d6f784f448d4bb0810daf4662ec20ad9b8413e239f05cc2de88e45e21628ab2d5e685520d18e6ec95ce5438dcee084094cc0977d251945d845a510c5ed39e32d0adbbe92f8557fc16538f2cc21a33ee44b606f5cdba76e", 0x9a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e0f99b810b603ccce5073832be050296b1e28c23fadea3bedbbae9eb578660855ddd5fd170b74ad62afc46f3fee47870ab5d16b2b951117490728d75c6582ad90a8f8c5f321387bae8f7ae87d0ad7814a7ee24bae8f7d9980737d71eed494537042ad59e65dee630558ca06cea6566c45f33768379edd86065f37a72580799d027c4078aca8e7acd96d221c775e240b98debf191e020") 18:23:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x10, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 725.686292][T16624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.712893][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 725.721977][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 725.766612][ T4313] usb 1-1: Manufacturer: syz 18:23:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}]}]}, 0x28}}, 0x0) [ 725.802512][ T3675] rc_core: IR keymap rc-hauppauge not found [ 725.808946][ T3675] Registered IR keymap rc-empty [ 725.814984][ T4313] usb 1-1: config 0 descriptor?? [ 725.832538][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 18:23:16 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/31) (async) syz_clone(0x100, &(0x7f0000000040)="6a9883be68950584218ee67fa24d4a2a48857b74c504ffb6a5cd4c2f6f91d991eb5e5fd8ae1d268956a41adce10532365ffea773056465564637f162057f3726e8af22d6f784f448d4bb0810daf4662ec20ad9b8413e239f05cc2de88e45e21628ab2d5e685520d18e6ec95ce5438dcee084094cc0977d251945d845a510c5ed39e32d0adbbe92f8557fc16538f2cc21a33ee44b606f5cdba76e", 0x9a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e0f99b810b603ccce5073832be050296b1e28c23fadea3bedbbae9eb578660855ddd5fd170b74ad62afc46f3fee47870ab5d16b2b951117490728d75c6582ad90a8f8c5f321387bae8f7ae87d0ad7814a7ee24bae8f7d9980737d71eed494537042ad59e65dee630558ca06cea6566c45f33768379edd86065f37a72580799d027c4078aca8e7acd96d221c775e240b98debf191e020") 18:23:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x48, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 725.850123][T16641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.874650][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 725.903161][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 725.939304][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input288 [ 725.953745][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.986011][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 725.994864][ T4314] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 726.052662][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.077491][T16619] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.085279][T16619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.092724][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.102092][T16619] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.109895][T16619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.117949][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.119267][T16619] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.132975][T16619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.142336][T16619] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.149957][T16619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.158265][T16619] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.162667][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.165692][T16619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.205382][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.252602][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.272535][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 726.292723][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.324171][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.352662][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 726.394434][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 726.402527][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 726.412861][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.425285][ T3675] usb 4-1: USB disconnect, device number 36 [ 726.442584][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.467068][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 726.477284][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 726.487342][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.572876][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 726.581956][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 726.590196][ T4314] usb 2-1: Manufacturer: syz [ 726.603036][ T4314] usb 2-1: config 0 descriptor?? [ 726.855574][T16630] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.864007][T16630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.873324][T16630] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.880817][T16630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.882584][ T3675] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 726.890002][T16630] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.903776][T16630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.914859][T16630] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.922378][T16630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.932073][T16630] UDC core: couldn't find an available UDC or it's busy: -16 [ 726.939524][T16630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.012555][ T4314] rc_core: IR keymap rc-hauppauge not found [ 727.018639][ T4314] Registered IR keymap rc-empty [ 727.024240][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.053839][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.083023][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 727.096884][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input289 [ 727.112068][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.142704][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 727.148682][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:17 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x4c, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}]}]}, 0x28}}, 0x0) [ 727.182834][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.212591][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.222253][T16655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.262881][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.272781][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.296335][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.312850][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.326964][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 727.337705][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 727.348317][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.361577][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.368732][ T4313] rc_core: IR keymap rc-hauppauge not found [ 727.374783][ T4313] Registered IR keymap rc-empty [ 727.379673][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.412709][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.419911][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.442637][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.453104][ T4313] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 727.466060][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 727.475251][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.482769][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 727.490773][ T3675] usb 4-1: Manufacturer: syz [ 727.496395][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input290 [ 727.510793][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 727.521305][ T3675] usb 4-1: config 0 descriptor?? [ 727.527916][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 727.536674][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.560056][ T4314] usb 2-1: USB disconnect, device number 71 [ 727.572801][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.602761][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.632761][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.667716][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.702941][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.732538][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.764476][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.786871][T16634] UDC core: couldn't find an available UDC or it's busy: -16 [ 727.794364][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.795351][T16634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.813399][T16634] UDC core: couldn't find an available UDC or it's busy: -16 [ 727.820864][T16634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.822554][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 727.829420][T16634] UDC core: couldn't find an available UDC or it's busy: -16 [ 727.843004][T16634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.852310][T16634] UDC core: couldn't find an available UDC or it's busy: -16 [ 727.860585][T16634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.869059][T16634] UDC core: couldn't find an available UDC or it's busy: -16 [ 727.877706][T16634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 727.879393][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 727.893937][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 727.915348][ T4313] usb 1-1: USB disconnect, device number 21 18:23:18 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r1]) 18:23:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) [ 728.282518][ T4313] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 728.372654][ T4314] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 728.522716][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 728.612640][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 728.643995][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.654395][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.665961][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.676907][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.686872][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.732669][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.743112][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.754575][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.764566][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.775443][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.788652][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 728.797802][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 728.806098][ T4313] usb 1-1: Manufacturer: syz [ 728.812781][ T4313] usb 1-1: config 0 descriptor?? 18:23:19 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}]}]}, 0x28}}, 0x0) 18:23:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x60, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 728.872647][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 728.882169][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 728.890804][ T4314] usb 2-1: Manufacturer: syz [ 728.901999][ T4314] usb 2-1: config 0 descriptor?? 18:23:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async, rerun: 32) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) (rerun: 32) 18:23:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}]}]}, 0x28}}, 0x0) 18:23:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x68, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 728.935607][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}]}]}, 0x28}}, 0x0) [ 729.060765][T16659] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.070855][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 729.080654][T16659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.082876][ T3675] rc_core: IR keymap rc-hauppauge not found [ 729.092201][T16659] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.104013][T16659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.107029][ T3675] Registered IR keymap rc-empty [ 729.126070][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.131325][T16659] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.147581][T16665] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.164962][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.174463][T16665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.174846][T16659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.193867][T16665] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.201530][T16665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.202697][T16659] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.210851][T16665] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.216390][T16659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.219316][T16659] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.224735][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 729.233321][T16659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.239820][T16665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.267724][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input291 [ 729.284792][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.286490][T16665] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.299936][T16665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.311929][T16665] UDC core: couldn't find an available UDC or it's busy: -16 [ 729.319719][T16665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 729.322655][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.362553][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.394206][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.402785][ T4314] rc_core: IR keymap rc-hauppauge not found [ 729.408724][ T4314] Registered IR keymap rc-empty [ 729.413993][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.422732][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.442580][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.452677][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.474464][ T4314] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 729.487419][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.495996][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input292 [ 729.513446][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.532598][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.542966][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.562751][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.582550][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.592819][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 729.613530][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.625000][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 729.633271][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 729.642570][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.652838][ T3675] usb 4-1: USB disconnect, device number 37 [ 729.672589][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.702772][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.734347][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.762620][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.792634][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 729.824773][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 729.832971][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 729.916688][ T14] usb 2-1: USB disconnect, device number 72 [ 730.022585][ T3675] usb 4-1: new high-speed USB device number 38 using dummy_hcd 18:23:20 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6c, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}]}]}, 0x28}}, 0x0) [ 730.262649][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 730.303770][T16692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 730.392584][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.403142][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.414768][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 730.424689][ T4313] rc_core: IR keymap rc-hauppauge not found [ 730.430769][ T4313] Registered IR keymap rc-empty 18:23:20 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r1]) 18:23:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) (async) [ 730.442978][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 730.464836][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.474519][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.512706][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.543257][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 730.557232][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input293 [ 730.570843][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.581921][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.582054][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.598483][ T3675] usb 4-1: Manufacturer: syz [ 730.606298][ T3675] usb 4-1: config 0 descriptor?? [ 730.632587][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.663228][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.692957][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.722998][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.752534][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.762841][ T4314] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 730.782702][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.812528][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.846058][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.848191][T16674] UDC core: couldn't find an available UDC or it's busy: -16 [ 730.860661][T16674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.871551][T16674] UDC core: couldn't find an available UDC or it's busy: -16 [ 730.879126][T16674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.888486][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 730.893532][T16674] UDC core: couldn't find an available UDC or it's busy: -16 [ 730.903505][T16674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.912329][T16674] UDC core: couldn't find an available UDC or it's busy: -16 [ 730.919926][T16674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.929162][T16674] UDC core: couldn't find an available UDC or it's busy: -16 [ 730.937117][T16674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 730.937784][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 730.954081][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 730.970359][ T4313] usb 1-1: USB disconnect, device number 22 [ 731.010167][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 731.132545][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.143194][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.154186][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.163921][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.173896][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.262753][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.271794][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.284901][ T4314] usb 2-1: Manufacturer: syz [ 731.295277][ T4314] usb 2-1: config 0 descriptor?? [ 731.352560][ T4313] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 731.536985][T16699] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.546176][T16699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.555013][T16699] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.562668][T16699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.570855][T16699] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.578547][T16699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.587133][T16699] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.594642][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 731.597116][T16699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.610029][T16699] UDC core: couldn't find an available UDC or it's busy: -16 [ 731.617659][T16699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 731.692579][ T4314] rc_core: IR keymap rc-hauppauge not found [ 731.698625][ T4314] Registered IR keymap rc-empty [ 731.704298][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.712754][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.722906][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.734248][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.741416][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.751617][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.761794][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.775313][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 731.789250][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input294 [ 731.805467][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.842756][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.862915][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 731.872120][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 731.880544][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.888206][ T4313] usb 1-1: Manufacturer: syz [ 731.894796][ T4313] usb 1-1: config 0 descriptor?? [ 731.922719][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.952543][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 731.985151][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 732.024288][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 732.057261][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 732.094999][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 732.122646][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 732.138962][T16695] UDC core: couldn't find an available UDC or it's busy: -16 [ 732.146424][T16695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.155990][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 732.162064][T16695] UDC core: couldn't find an available UDC or it's busy: -16 18:23:22 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}]}]}, 0x28}}, 0x0) 18:23:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x74, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:22 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r1]) [ 732.167663][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.178718][T16695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.190813][T16695] UDC core: couldn't find an available UDC or it's busy: -16 [ 732.209589][T16695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.220714][ T3259] usb 2-1: USB disconnect, device number 73 [ 732.261438][T16695] UDC core: couldn't find an available UDC or it's busy: -16 [ 732.274163][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.288097][T16695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:23:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xe}]}]}, 0x28}}, 0x0) 18:23:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x7a, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 732.308293][T16695] UDC core: couldn't find an available UDC or it's busy: -16 [ 732.341495][T16695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 732.372902][ T3675] rc_core: IR keymap rc-hauppauge not found [ 732.378829][ T3675] Registered IR keymap rc-empty 18:23:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf}]}]}, 0x28}}, 0x0) [ 732.396580][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.398446][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.452685][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.493202][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 732.507428][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input295 [ 732.522675][ T6] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 732.522781][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.562666][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.592631][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.622773][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.652619][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.684747][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.712728][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.742918][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.782536][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 732.782669][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.822696][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 732.858406][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 732.866508][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.886989][ T3675] usb 4-1: USB disconnect, device number 38 [ 732.932910][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.948075][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.959504][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 732.970019][ T6] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 732.980528][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.072921][ T6] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.082346][ T6] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.090477][ T6] usb 6-1: Manufacturer: syz [ 733.097661][ T6] usb 6-1: config 0 descriptor?? [ 733.252575][ T3675] usb 4-1: new high-speed USB device number 39 using dummy_hcd 18:23:23 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xf0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x60}]}]}, 0x28}}, 0x0) 18:23:23 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653f", @ANYRES64=r1]) [ 733.356845][T16713] UDC core: couldn't find an available UDC or it's busy: -16 [ 733.364879][T16713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 733.376908][T16713] UDC core: couldn't find an available UDC or it's busy: -16 [ 733.384864][T16713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:23:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf0}]}]}, 0x28}}, 0x0) [ 733.418464][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.430496][T16713] UDC core: couldn't find an available UDC or it's busy: -16 [ 733.457328][T16713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 733.493050][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 733.511664][T16713] UDC core: couldn't find an available UDC or it's busy: -16 [ 733.540928][T16713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 733.554508][T16713] UDC core: couldn't find an available UDC or it's busy: -16 [ 733.562004][T16713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 733.582525][ T4313] rc_core: IR keymap rc-hauppauge not found [ 733.588777][ T4313] Registered IR keymap rc-empty [ 733.594304][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.612621][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.623011][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.630333][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.641865][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.651966][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.661851][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.675633][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 733.682773][ T6] rc_core: IR keymap rc-hauppauge not found [ 733.690101][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input296 [ 733.694661][ T14] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 733.715710][ T6] Registered IR keymap rc-empty [ 733.715798][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.720714][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 733.762708][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.772046][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.772559][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 733.779546][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.795571][ T3675] usb 4-1: Manufacturer: syz [ 733.802365][ T3675] usb 4-1: config 0 descriptor?? [ 733.822666][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.824283][ T6] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 733.843690][ T6] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input297 [ 733.852621][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.865296][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 733.892616][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.912625][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 733.924550][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.952593][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.952807][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 733.982691][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 733.992669][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.012582][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 734.023022][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 734.033095][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.047732][T16717] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.052754][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 734.055740][T16717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.069938][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.073777][T16717] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.085276][T16717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.092258][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 734.097006][T16717] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.101780][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 734.109239][T16717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.125375][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.137573][T16717] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.145471][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.154048][ T4313] usb 1-1: USB disconnect, device number 23 [ 734.155901][T16717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.169397][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.176807][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.188414][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.203105][T16717] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.210735][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.220775][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.228366][T16717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.237358][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.263038][ T6] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 734.294677][ T6] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 734.302978][ T6] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 734.317988][ T6] usb 6-1: USB disconnect, device number 74 [ 734.352599][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.361667][ T14] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.377785][ T14] usb 2-1: Manufacturer: syz [ 734.390777][ T14] usb 2-1: config 0 descriptor?? [ 734.562613][ T4313] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 734.644358][T16730] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.652066][T16730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.660709][T16730] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.668140][T16730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.676541][T16730] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.684030][T16730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.692161][T16730] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.700056][T16730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.708500][T16730] UDC core: couldn't find an available UDC or it's busy: -16 [ 734.717660][T16730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 734.792904][ T14] rc_core: IR keymap rc-hauppauge not found [ 734.798833][ T14] Registered IR keymap rc-empty [ 734.804104][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.812659][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 734.834713][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.873362][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 734.887775][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input298 [ 734.904334][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.932772][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.943107][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.944299][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.966202][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.976807][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.982509][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 734.993820][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.042816][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.073170][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 735.082222][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 735.082586][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.090410][ T4313] usb 1-1: Manufacturer: syz [ 735.109549][ T4313] usb 1-1: config 0 descriptor?? [ 735.132861][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.167338][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.202872][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.233028][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.262525][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 735.295244][ T14] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 735.303411][ T14] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 735.347454][ T14] usb 2-1: USB disconnect, device number 74 [ 735.360960][T16736] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.368860][T16736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 735.382270][T16736] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.408349][T16736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 735.417765][T16736] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.425582][T16736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 735.435019][T16736] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.444289][T16736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:23:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xfc, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x300}]}]}, 0x28}}, 0x0) 18:23:25 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, '\x00'}) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1000, 0x3}) [ 735.453501][T16736] UDC core: couldn't find an available UDC or it's busy: -16 [ 735.460945][T16736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 735.496526][T16747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x500}]}]}, 0x28}}, 0x0) 18:23:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, '\x00'}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1000, 0x3}) 18:23:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x300, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 735.521111][T16749] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 735.622612][ T3675] rc_core: IR keymap rc-hauppauge not found [ 735.627965][T16758] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 735.628637][ T3675] Registered IR keymap rc-empty [ 735.652086][T16760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 735.663677][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.692688][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.723405][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 735.738894][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input299 [ 735.755845][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.793460][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.822470][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.852662][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.885491][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.923488][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.952528][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 735.982596][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.012802][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.042942][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 736.074217][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 736.082299][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 736.095462][ T3675] usb 4-1: USB disconnect, device number 39 [ 736.472535][ T3675] usb 4-1: new high-speed USB device number 40 using dummy_hcd 18:23:26 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, '\x00'}) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x1000, 0x3}) 18:23:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x600}]}]}, 0x28}}, 0x0) 18:23:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x500, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:26 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653f", @ANYRES64=r1]) 18:23:26 executing program 5: r0 = syz_clone3(&(0x7f0000000b00)={0x40000000, 0x0, 0x0, &(0x7f0000000940)=0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgrp(r1) pidfd_open(r0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000440)={0x3ff, 0x2, {r0}, {0xffffffffffffffff}, 0x3, 0x2}) syz_clone3(&(0x7f00000004c0)={0x20000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xa}, &(0x7f0000000340)=""/180, 0xb4, &(0x7f0000000400)=""/56, &(0x7f0000000480)=[r0, r4, r0, r2], 0x4, {r3}}, 0x58) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)={0x142c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff4c0}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x18, 0x5, "917ae4bab950cf462975a64b4bc86c159054a225"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x158, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x98\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]^,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@*\xb2!(\'R)\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+-#,*@-:\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'n\xc2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@$)]/$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@!(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&]\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1a36}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "0a5bc3c9764a322e61e3f9636d917031cc29e32a258411d841d8b523fca0d448ff7df1799eb9db5e41681d0b05d7f8989791caccb6ffdcbc3ff2c85028813cb993c31f7a2a1a77fcc585206a6e170e29ee5cc361b79b5beec4d5e9ccd060745763ef823bdb5a7a381adb8450c3973bcaa9df003f5f75d3f502b3d31aedfcfbe54b5385907769e5c6b1823b847d9e343ad0911bb26e7233e0d5e4b91c614c6f29e2efbb9b142dcd9ab8ae2235e68d53bb112f4eae9831842d6a56d8dc7149da8975bca03d28af7ce569f370ac0ce63bcb1e"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "385e295a1ea719fc0a07cfb8bcb3b0c988bb13d5627fdc868fcad0b39d1622e4229b92b3a9c296d52a826963f087a45f3e4c4572dbadc30e3badfd7d434231e9084f7412352f8a176168c7ca451a27d0108368f54fa549596654b681fa1ae071abe46bbb355e342a0d5fdf92228df5fc6783d36e2e88b737f6f78651ff1774e19f316819efec4cdf577605f93426f28d1cbb4277c086ffba18c97f7a03850de22c3b0a5e256ba2ec8c230519522a58c4ce0cc4a4d8f5dfd5d5c5f8180d0681095fe94a08d8cf7d44d62921a6df1c4792a7eed1bc9ddacc82d860e9b6849a688defcd392b91fb0beae7f2e579332deb0e289c2ca99bacff99697c983c3667e539f3b71644d29cb1f70e5777e63db932e4d15aaf771190a3d3555292717d23188421e41980bed8879a76c901e919b23d26dceb8a4e3c0b1c08be6e99aef1619db0a3d411e41c208fa45658f931084f70493fa3a05e88af98163c4505fd6c80bcfefeb6b52b2540860816442ebd18a337bced9be91fbfc8e20d60f26c24ce9719ffb8d466483cb551884151bb50c84a49a243832bcb87805c7dac805a2f1fb938cbcef5716674605b47ba96baf918bd606c2395591563fd633a841eeed2d052061503c1d415cd5a31986999e47343277e7ecee50ab576efdda63333ed835e7b7736577cd79e8dfe4e24e6c8e32492df15a1a8ca5189ee2837d593c6f224d8a801e110db70479697a7e5e4bc0128b4a04dacea75f39bc270d1ebc8a0732a54b0ed12bab513cbd95d00cdb5450d2d85abf0b33cd0074f674b2c42aba617b0824a366b9033c467bf85e5a67d7a0ed6d6a1de83199645bdf1035c5bc3871d08b26374a8a869febe06a2aca21e0bfdc2b01d4a44ba128b17ab02c616d3e7f7ccd43b885a587f4e92e1559e0d90ca565dac73f7584bfd4641f5ffc48c353eceff92f93352f2b89661fa1298bee5734b9f4a4689484e37eac10bbdbac29c7118b513f92e0c508f508e739827719963b11160c54f6d99d72f039d8491288ff0ebe38ab7091eb037fff9a1c3ce341d382c21aa500893f299f498258cb867ed6642e7aa9fc142ddb22877f59015c3f999e0454f306cd0edd480483c766c7caaddd50f2f36a9ad96357dcc6a3fb5a715ea4652469c4394018b72b1a5a5e0d92e9ffb92c8ee38df8176fb984a72361335901f4bdd6e585e07bddc5f13bf1e4e2316b7443ebcdad23b30db175aa3fb6bb33b6e5bc1e548450257e00f4fa97601f5b17c7ae5c9a16b29d39249f0329c3cdfd5d0117e11616546e2cd8b9dfe5e5c7b297848be4a239a2c5ce2626185a41be52f70d74e024373f593161f109328d403eb70b820064588fe0363100192c6d007cb2f30594bb61ba73aae0f5756a5876306887fa97ac40841ff1f6cb9ee0dd3794b40b32dd35a4ca2db02867afd407bb577684bdbe21bd78963ff68f880d473fda75f5aa40a0be5d736c88c7459cb9ae2e86cb09855467092c1ea4da36e0ed6158e501836aeb47892a0eaf4bb48e6e9da026ea5cdbdd29a11d92900aff4cac6a111c48d72de8fe1a9d200eac18248cada27b5f7f3df4f683a770572f6baa4030b253e6ce58c68c4472fcb9d882b8fc40b2665c30baef702fb1623ba6d50762c4603df0125d57dde3c3023f9951c7548e3f785535bb57cf1980a4a8c1083a5dcd789004fe99ccd3c31721ad466bee068a30338223ac2abebdcf3521cc1bd3647e000ae21d56b4bff9b891b0e13c7a89ab7ff97036be1a50e9bf5cc9065f5633652ba6334f2a0d210068840156b7d7b4312474ad2ac61254c04383cfd9812bb26ef0017b291642a6a0f74240b25b24370e5155d7354d3175c7428c53b249bca65fe93facc75e7c3df47c1c487d135979ec60172dbd03fcc64af919a8bb78a7c0421062418f5d651c43405714e8c685bb72ce3f86e2d34206d94d24af57bd6454263ba6d042860af3c3dbac041e963374ee1e1346ea28f39fef9c5fb36dd3ed2a4ae5279ab5f4e43f98d6ec7c8604d29a4cb4296a7f05eb5fe5437c96d6ccb30aad9024263c2b41384af746a5d4b2fd2c8f28fce3f0bc36f096c0d897577612994a3115ef9078208ad42bd03a1c537be2bf95c7b93eb76d774d32ed30b41b004886f88101615cc47ecf169806a8ec451de5fcb02227e163bfe6de9eaa29a10986173821f98d5f0d41bdf1a574d91c1e7bf1260b838b9d6ed296d7285259eec834a3b1445b6be0aefbe9623381c92c9232e6b8612a3463af005de672e7d76df0910e906b4a0af2a8b6f40b2181489f805317c8a52fffa11aeda28346d69cf61dc585f8c3e9d79391af8a45c5ebe4e4670282ad06b055a6fd041fe270864b0f8394ddd32fa6a1d5707cb9fe4bab67fc427ada71df7476932e955d2b66e77bd2a14cbb690d008867f405fd155228af0b4950bd28efa3542111d4efcb4e76017f032ddee31fbb3cb7488b63838aa12a0072634ba08d469a8ff8503c3657770f23c63052fd85ea169695413a5f6276828b7f8e77ff5dc6bcb91bedff63bf591ed33a02968601bebbf4c526d7187bd51607b783b64aba5595b80dbb00f3137180ac808c7bfc0828da304d688b3898198ed46863a49d318b09864188ab463b39d12f5ff76e8cfbb0544184af68d1f7d99fbf1221b5833d96101d5778fa77db0b027451ef532933ce363257bbd4f4d40931c12d1c16ebcff927091968f206998825a19ab6ebb249ce1ed1d4e1803c2afda994796004e500dcaaaeabbb75d396f7240fbc849b4cb35ec1ebaf71e5b4305fbdf18e240afaefffe3da6edd4311b4a9e6135f6f9c63f932396f24e5b08bcf6d0c44e3e13be22a09e420473827c336f885073abd58633b434b8ecf912728b2ed8bd1ce12f48c57f4e001f67a84b6f6494335961d1eac1589e1fdf166d54619841c0bffc93b8379f26af2e55be7afafc35b389101c4dc2a5addc642e1d6d12d3fd50c9f401243b546e047a79a9b68694c248f1cff5c359e92d7ddf5009f335cd416264d45f41eaf13a1b7f17b7df78c117aa9352959d77ccaf51d6f057aaffca41710f043055eaccf6ba504ee930d473de7f9f5d0dd6b373be9c5f4f2db258852a4c7e4717f5cec8e31bdd222d80314025b9a258800602f0bcf43559fc6a754ef96a462d44d306ca30fecc951f53c8add45cbc7141cded4b7937579e91318fda99e4d25d21c93144ed9266344c831020a7c8fe9b1c45b88dbdf54ad0126637e9ee4c772052f27e7a1d67a242cbc9e003eb03d1e797c018ce05ce407e38fe6dfa5448c9643460e5f79bb03d2d12223cc2b032f39deac4b4eb6b9b37e58df7250c9d3dd9beca25222c4dac6268f283e583c539b4ce23d982dcbdd7588e1e9fdeeebd7941d94eeb9fc5b5bf3bbe4745e9c6bb75038d3dc05cd6b0876eec883f9dc9219323cfb74143d128302c86ff88e218d4097ad6c3f1d77870fa90d90172b16d602505daa7e0ee640b22b5ea049065f698204cf42fe6b0d40cfb66d4b04cfdcb3b17dbbeb0b4e063f2926bc500791a26753e893b5fd810ea2e567a8ae46d935cc9e72e7ddffecd80bc0acde6bffac91235b3904119466612310be07f380f32eabaef5ffee96c538337a7b0022e4bd6a92aea14c0d51e286a98d85ec09d0ecedbe304e5129646bf160bacbb14b054490b5c8a3fc32a73f3088d8dfe9836cf180d86ff71075c0d65522d700eb961c166ad5d10e8ae45fed956e53aa574da7db2be40e21ae416e859d1dcdc3e01d98e04722216db12c310433ee595d5a913a9dd2b877b71964674608386dedc2d67833cd37daba33f1d7ae6f0ae8c5e4af4125cdf689efd7cfaff45457ceb73398f880773b651f4fb9d01ca1ce1ea73bfdd395ea758fcf4ab361ad7ebef8b131eb4280d1576cf69715c27818fb4c882c270ff435c978442ba904aa506a47fa464bab9e071db69453b5492718b1c1c5afa981880f35eb3faa837e70f492e0f2e0d00694f58a45d47e005ec5d10776d00ad6ca499cf1470175994dce95869656d7e1465bba2379f7527e08491384e624b4d46402ee2f02ee8618d5cb8e19af4c24b1b47efc0d6849b8d4d159a22477840211f98aa54f9d5313ba0c379f7bd877c713eba819ec212c9b2a42fb65f9f1c5b76ff478858bbec7a0f72a808deee22c2e7cb4f6b8e5d7b195c5bfa5fcb1fbdc36a248c90d91056696e653fa6339d10f450ced99522181d6c21567ddb031cd57992d96d76c4edf72a43e63dc77fdb1da9bb04c7001a1c5b89326b93f188725e789b5e51f22fa8999f21b29ff9a9bfe14f824b52181866125b06ab68c315013458a6d76c274097e143ec1c42f77caed2065e8bfe0e1814aaa82a8ee8bb1b4595e3de5afd358b6f801bf895e55050a2e332012686ca0f0d9dac7732a4c617aee4f052eba7c28589661d5526ad044e431c490b470f526395817001a8f36ee9ed7b74fa5b4d32aaaf358384faa198d2c9f87a6f6cf642d53e0e96065ac82e12cf1c48197f0c9664a2a7255ff86346c10c5b310bca4853e4e2fbafa48266b1956cedbaf9b6e45cf18dce837569c04c8d3b2d77252b8a39edeaf904ae6d3e968b6e4385cece8098d60433018309b04eb8e05bd65320dddf99dac80aee532a7bac14b0c6bc65e1f288958ef2d0a6cb1777664f8bdf1f9a256fda4cd9bc9b988fa7351e2b4394a83180b6648e5605f1ad3f00756ee82ededfdd918cdde1eee65ed8662291e498eaa567150856de4566d3aba758b398076713ab5ad9f177201675041925a6a30169e362944f573cc1d7aa6a975348aa0ccb199deecea171e89738216a9d17e223c803b1179029a7e9b73d9df91b897463aba6d607f716887158b1103fc9a5e61306c5564556672ae3432197773c9a5c7f3bafce0318cf05e38a9c942458a8774cf92b4413ca5c3d003a484b8a2e38d641a6a53276285cd08a04e294057c4e97bed6df33c21b35a572e6365313eab4c3894f1e5ae8cde6a5b3bf0feed43bd2d69aa9369b8554d87d975c086acfd798920cd06f5003aeeb4dca069736352abaaf6caf7435c643ba3efb41cc2db82a6ef91d2aca4a9d2385e4d4e1f4ca1579074855a5a3cdd5bccfc41eb5663af510de95ac9904c2c39f3ac17136ee45091ff411eafa96bc45f9faa41619bf34e668a8f1f519824974f05603a485ecab9ff0fa1f16330bb17f31bbbdb3df14e7f371fca2e031e0175bbfbab88fa5d28232ddfae3729936155722efab6dc1a954f372cacb6ddd16d2f3f1cd9acea95bd07b688f860441c03934206ef5b2e8d8e0b06d63f0879e5dc1c583cc05316f2435c7fe28942373515468f9ad577123d6ac8c80ebbb8d00ab1d4158228f6ea0f805705c0434cf20b3c1020d2dde09f9811c4a06479d1eed8d189635f95ae348f175578ad14f7768c2fd1f8624540e1794d263ad4fe53aa59d5f2fcbf2277d91cd3a703df83c7ab500cf7e9fa78e952399d426ebcc2826353e7d96e0ab23ee9a627beabccc43779e219a51b56fe18d88ae559494ff13ac0f6a70081eb5953da6c1f55211ac3c9a279939ad03465bf452c5ed200ed829fdf6119d3d5c12aaa412b87b098455948d8699f520b29dff1f62507adae675024b854490ee499a0fc2e2c6c2799915cc355040aa224b2e8f717814f323c4129b511ddfae07d691568deb09437dc84f86b88b4f7451ef2ab5bc6e0d1e5150738c3fca4a584c7e811eaf233315753267fec25256f173a98305d3903870420ab8836f7feeb7dad2131168a58ea674f27e93964931a1e3f372fa952c937ca3906012f5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!%&\x10\'{&!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$\'!$}@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')^*)\\+{%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\)][\\.\'\\&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "bed75e26327ff147b8e1d44326d94b44c1bc46e120e1fb0cbbf26d3858ee1ddc810a0ff8b6518fc35dd10bc71cab09cb26714e7f6b6a05cdea154becd1a61bf1c19d0c33251d83479611d0b5cac3218377eb6de2daa5dec0f9699f55b102850307635e9b9182685ce74f"}]}]}, 0x142c}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_clone3(&(0x7f0000000200)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/152, &(0x7f00000001c0)=[r2], 0x1, {r3}}, 0x58) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003740)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @remote}, 0x0, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="e08598e3b9972d5cd843ece644f00248046a6b1c4792e8d9e7b80951ec1209b9327fa022da068bcbcf20bf061af636948c8a3e761020b43c4d2a1468244e963bd7575fae2e69cc66564d070b57703de61f8174b62ab5ed8a5ba3f76e88b69ec04f68db8a6135639d18a8f9fd55c4c67c4dcad387b554d95eec496242fbe6b0011f3e9e8b975d10489cb5fb626d", 0x8d}, {&(0x7f0000000740)="a80a3b000c2de030b299d5fa21b70b06d760f279e4d8a0f45be3a01e3429594daae76162ba9dbed47dde2aae2884569f94482c9649514680a966cf7a52c1de9bc5cf00ed8b4d2be0ee407072da27b7e2863d3b34dc46349b7fca475f86f775ab9494793f14fafe7dbebbcc5edb3ab01d527589eb5ef3e9b9ad7b2f9a2e2fd25b92b6c28432fc2d7c7ee55154d1813ae81e99ac029f22927ea516edf9e0d7799101cc46f4bba19057ab815edd62", 0xad}, {&(0x7f0000000800)="230ec47adee14d59f7bc1780a4b1a15916347bb942e7e72ef68ee73a7f60ccc7e2e7927f3ba043bdb3c5437217b12cf30e6e7723395b3859c99aa38a41aa8812299301d4fa856b535890cbff1a92591294ddd7029a0821a6c859b56bcd8f07c3f9e7a42a8ddf65935165ebf0e2c7006b029113d61bc1b1843b9045fdadfd2acebee4e0", 0x83}, {&(0x7f00000008c0)="0765f00edcc6e521bdf0fd", 0xb}, {&(0x7f0000000980)="67fc53c5d45f7ae42b8e243cb92589cfe1fd1d838ae6db3bcadc134b3c1fcaaa2f9b286cd68f7f88317b55a5d3491334c662e2ed0cb42b85d49b6adbd43d83f5e9252b9b151a7bc303800122f2de4d3f83a0ab0c8cca8058a7e36a72b406bb4764cb781874d6b072540b", 0x6a}, {&(0x7f0000000a00)="ab62e7cae79a5f60fda2cff9e5533cefbb7b29b233effb37810d1f99633f81dfae1734506f44bf71e2742c2b82a9d0314d03da11237a2a76bc163084206b5e73ae90522ac527077988a1be80773e149d670a12f5afc2b87e6cf9f04eb1cd3169f38c056b676f78f4cf650ddc0b7526456e9dcee07a6ac03749d474", 0x7b}], 0x6}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002040)="747a7899926c95556169f3af5351d7ac9522dc2f9bf7dbc77745ef7bcfc1e898263bcd46f42696fdc12ecf1d60e0fdf3d6e3ebac2e99af82cf8f835077aeb3b28ac8ff8d34abced1843760cb3662540a2b3afe2300d4cc462fa6d502e594cd85e11cc7f1f3ccd98cae809a4dfc3c5a805fc5f0b0ef3b988e9866f8e2bc363769c9b6f117f5eb76e2c965591b2c5b7e09a903a6b279a6da1c9bec9c76671b3c4f6bbfd138a2334a317eebc3a5c33746ad656ac769dd50a3fda3a2204064b6f707fdb2", 0xc2}, {&(0x7f0000002140)="a24bf4ba1dd288d866043991fb622361e1e8f34208b97596ed9da2ef0ae465e4adceed53956506db0ae56ea8d2580dd7edd86f23371d867abbeb25d37496be4b0256d144d92764d0bfcf444a87a30b9b66661bc0b5c2847a526b6906a7b7ba069d92e4e91e0d49313b8f779fea35b4eb1fb37662557f350850c2c4f441e57dbf05b5703354ca1495745cb1dc5987e46d3533d9d8ea286fa7fc4875c71c386a686b3bc899f57a357cc9c05ca91ed6ec7ac2add7a9310b802837", 0xb9}], 0x2, &(0x7f0000002240)=[{0x4c, 0x11, 0x4, "87624567b2be6e893b2a29b1d9c4b6720e47b22f197484d7e3356e9000483602b6f22b1fbd518eb2af86e1b6eadd8a788d251cde2917d81fce2425b46e"}, {0x90, 0x10e, 0x5, "2d188da16c338f1a7ed02ba75fe98dceeb1d9f8a931ce23e403b82b68701e170ea927d19fe3e311307487b073567177804a511b2fefce94eadda9dab400c9132e7454f9e2c1bf84b53b0058f4047835f240a15ad5c16de79342e7e6aa11c373711ab460c09f9546113ddae3f179aedc52fa452b9ff2de0238cc9097df7434c4415"}, {0xb0, 0x104, 0x3, "3037d12b55f31950038b9543cc997bc07fa9de98a44bd4624433b30e897049f66561e6987765ca1211c06f05794e6b61252bdd1a7f5631a9291c3ac33a55b43615f7f17bbefbbee6f9fa36112482a8709bbc5b5472a8d8b701b5bfa61d38e74bbfb001da197fa57c5f6d646b77d874ca809c3def08890f09bdb34dd56e9dd32d2840d3b95599220404833698e836aa2ba9b109ed338065c479a62e097fb5a856bf06"}, {0xc4, 0x10f, 0x7fff, "ca80c1b59bd2dee2e2f5b4b0a19e0a8f119094b23ebefe5da0e79a92e739cbd42b170ac8d143e68285ecfea19f1f97eeca1c1b0c90271b9df65814fa5d8fba67eee793adbf6d45d307912b282365fea90784f5a3cbb7e30361c6f006550ef66350be72758158ce608e80b71f4b4b055114ce2ce9af864f5e5272f4281cd11bd2a28586dc01d1ce2b50eac68722c585ae57bc24ea1f1e00fd16365f99508e8e4feb2992c7d44b02a269f41ad2d32139942aa5b91183778cdd"}, {0x28, 0x10c, 0xff, "5a1fb005fa682937179677f800acd1b830e8f21803a973f06a5312f6"}, {0x54, 0x103, 0x3, "ed0af67d5c5bc2258ec416b5d35479ef650b36a7d3767c578172632f6d7cb22807a282dee65febcd74f1ad0707aa23265db50180e89a9717bfec17eb4154ce2102b79bffd376f3"}, {0xe0, 0x118, 0xfff, "7180a31cee0111ae1a0f56532c709602e3f61cfbc43871ebe4ba9027127213d946b3c50134fd9e2852fff20cffa161a768dfffb9f8e07cd9763cdccdfdc57f34cf7e704920e797faa45e7bed7d7ee5f881e19c20cac700727d09eaf46746514eb8d5b467376434c4974b4794684e0e8df21b6063f2293e1bf26d80af16a0bab555aa4e97a927c2603f5577a5d8d8256b491a12f2b4d1847a180b28983c91e5e25a26d7aed2af3f23c22dc5adb3a4a9c72c15108656bd3d0277bd46ecef6c6fb3671919b61697369dceb788141f0c9df28167"}, {0xf0, 0x112, 0x4, "1d9fdf164c5e839ddbd5fd00b6c4baf8f995fb892ea8286d516d580f1befc58a67093862c7a88480e0892093c89ab7af2303920829308696dda1aa9d74e15ad37d21296183a4acb8cda31a53e1986a31c61c022569db6503c0325b3f0fed92da46cb758dbe72a8d0fddf6302c674dd7bec95b44a50eb8b00713c848d53b959d97c37e6d3df148e5b8e0f9a0703a9320d5966f059d3ae787f1e1a67968a88529da25fb15f4c6490e1bbc18acc9ca98ccbfb1cf2ce848193fe1df88615d2337e9477f4abc8f0cff714c383fdd465df924b5ec2403d9f7e10f7cdd3ad555a22c7163c"}, {0x1c, 0x113, 0x68f, "29019a59202b9c2da37547e1c182"}, {0x100c, 0xff, 0x800, "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"}], 0x14c4}}], 0x2, 0x20041041) [ 736.743118][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 736.746746][T16768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x676}]}]}, 0x28}}, 0x0) [ 736.894166][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.904643][ T4313] rc_core: IR keymap rc-hauppauge not found [ 736.910550][ T4313] Registered IR keymap rc-empty [ 736.917970][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.930194][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 736.945393][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 736.955465][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 736.965476][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.979015][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.012583][ T3673] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 737.018865][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 737.045841][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input300 [ 737.061860][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.082779][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 737.091927][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 737.100457][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.107978][ T3675] usb 4-1: Manufacturer: syz [ 737.118733][ T3675] usb 4-1: config 0 descriptor?? [ 737.133178][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.179476][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.212573][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.252651][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.272569][ T3673] usb 2-1: Using ep0 maxpacket: 16 [ 737.282714][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.322556][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.354082][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.380540][T16752] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.388205][T16752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.392598][ T3673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.396077][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 737.406485][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.417609][T16752] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.424598][ T3673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 737.439242][T16752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.441601][ T3673] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 737.458562][ T3673] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.460391][T16752] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.482589][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 737.490986][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 737.499437][T16752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.519939][T16752] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.523565][ T4313] usb 1-1: USB disconnect, device number 24 [ 737.531723][T16752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.551277][ T3673] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 737.573349][T16752] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.582502][T16752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.582900][ T3673] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 737.605268][ T3673] usb 2-1: Manufacturer: syz [ 737.617002][ T3673] usb 2-1: config 0 descriptor?? [ 737.854881][T16769] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.862286][T16769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.871623][T16769] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.879078][T16769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.887977][T16769] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.895731][T16769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.904650][T16769] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.912035][T16769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.920530][T16769] UDC core: couldn't find an available UDC or it's busy: -16 [ 737.927939][T16769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 737.942650][ T4313] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 738.012539][ T3673] rc_core: IR keymap rc-hauppauge not found [ 738.018480][ T3673] Registered IR keymap rc-empty [ 738.028107][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.063078][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.094478][ T3673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 738.108765][ T3673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input301 [ 738.128178][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.168207][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.202735][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 738.209244][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.242605][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.274727][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.302580][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.333709][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.342586][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.352896][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.362580][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.363934][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 738.380525][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 738.390314][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.392594][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.432556][ T3673] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 738.464554][ T3673] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 738.473341][ T3673] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 738.493288][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 738.505537][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 738.514107][ T4313] usb 1-1: Manufacturer: syz [ 738.528877][ T4313] usb 1-1: config 0 descriptor?? [ 738.532329][ T3673] usb 2-1: USB disconnect, device number 75 [ 738.778898][T16773] UDC core: couldn't find an available UDC or it's busy: -16 [ 738.786540][T16773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.795339][T16773] UDC core: couldn't find an available UDC or it's busy: -16 [ 738.803010][T16773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.812749][T16773] UDC core: couldn't find an available UDC or it's busy: -16 [ 738.820220][T16773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:23:29 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x600, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x700}]}]}, 0x28}}, 0x0) 18:23:29 executing program 5: r0 = syz_clone3(&(0x7f0000000b00)={0x40000000, 0x0, 0x0, &(0x7f0000000940)=0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgrp(r1) pidfd_open(r0, 0x0) (async) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000440)={0x3ff, 0x2, {r0}, {0xffffffffffffffff}, 0x3, 0x2}) syz_clone3(&(0x7f00000004c0)={0x20000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xa}, &(0x7f0000000340)=""/180, 0xb4, &(0x7f0000000400)=""/56, &(0x7f0000000480)=[r0, r4, r0, r2], 0x4, {r3}}, 0x58) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)={0x142c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff4c0}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x18, 0x5, "917ae4bab950cf462975a64b4bc86c159054a225"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x158, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x98\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]^,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@*\xb2!(\'R)\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+-#,*@-:\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'n\xc2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@$)]/$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@!(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&]\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1a36}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "0a5bc3c9764a322e61e3f9636d917031cc29e32a258411d841d8b523fca0d448ff7df1799eb9db5e41681d0b05d7f8989791caccb6ffdcbc3ff2c85028813cb993c31f7a2a1a77fcc585206a6e170e29ee5cc361b79b5beec4d5e9ccd060745763ef823bdb5a7a381adb8450c3973bcaa9df003f5f75d3f502b3d31aedfcfbe54b5385907769e5c6b1823b847d9e343ad0911bb26e7233e0d5e4b91c614c6f29e2efbb9b142dcd9ab8ae2235e68d53bb112f4eae9831842d6a56d8dc7149da8975bca03d28af7ce569f370ac0ce63bcb1e"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!%&\x10\'{&!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$\'!$}@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')^*)\\+{%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\)][\\.\'\\&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "bed75e26327ff147b8e1d44326d94b44c1bc46e120e1fb0cbbf26d3858ee1ddc810a0ff8b6518fc35dd10bc71cab09cb26714e7f6b6a05cdea154becd1a61bf1c19d0c33251d83479611d0b5cac3218377eb6de2daa5dec0f9699f55b102850307635e9b9182685ce74f"}]}]}, 0x142c}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_clone3(&(0x7f0000000200)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/152, &(0x7f00000001c0)=[r2], 0x1, {r3}}, 0x58) (async) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), 0x0) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r8 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000003740)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @remote}, 0x0, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="e08598e3b9972d5cd843ece644f00248046a6b1c4792e8d9e7b80951ec1209b9327fa022da068bcbcf20bf061af636948c8a3e761020b43c4d2a1468244e963bd7575fae2e69cc66564d070b57703de61f8174b62ab5ed8a5ba3f76e88b69ec04f68db8a6135639d18a8f9fd55c4c67c4dcad387b554d95eec496242fbe6b0011f3e9e8b975d10489cb5fb626d", 0x8d}, {&(0x7f0000000740)="a80a3b000c2de030b299d5fa21b70b06d760f279e4d8a0f45be3a01e3429594daae76162ba9dbed47dde2aae2884569f94482c9649514680a966cf7a52c1de9bc5cf00ed8b4d2be0ee407072da27b7e2863d3b34dc46349b7fca475f86f775ab9494793f14fafe7dbebbcc5edb3ab01d527589eb5ef3e9b9ad7b2f9a2e2fd25b92b6c28432fc2d7c7ee55154d1813ae81e99ac029f22927ea516edf9e0d7799101cc46f4bba19057ab815edd62", 0xad}, {&(0x7f0000000800)="230ec47adee14d59f7bc1780a4b1a15916347bb942e7e72ef68ee73a7f60ccc7e2e7927f3ba043bdb3c5437217b12cf30e6e7723395b3859c99aa38a41aa8812299301d4fa856b535890cbff1a92591294ddd7029a0821a6c859b56bcd8f07c3f9e7a42a8ddf65935165ebf0e2c7006b029113d61bc1b1843b9045fdadfd2acebee4e0", 0x83}, {&(0x7f00000008c0)="0765f00edcc6e521bdf0fd", 0xb}, {&(0x7f0000000980)="67fc53c5d45f7ae42b8e243cb92589cfe1fd1d838ae6db3bcadc134b3c1fcaaa2f9b286cd68f7f88317b55a5d3491334c662e2ed0cb42b85d49b6adbd43d83f5e9252b9b151a7bc303800122f2de4d3f83a0ab0c8cca8058a7e36a72b406bb4764cb781874d6b072540b", 0x6a}, {&(0x7f0000000a00)="ab62e7cae79a5f60fda2cff9e5533cefbb7b29b233effb37810d1f99633f81dfae1734506f44bf71e2742c2b82a9d0314d03da11237a2a76bc163084206b5e73ae90522ac527077988a1be80773e149d670a12f5afc2b87e6cf9f04eb1cd3169f38c056b676f78f4cf650ddc0b7526456e9dcee07a6ac03749d474", 0x7b}], 0x6}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002040)="747a7899926c95556169f3af5351d7ac9522dc2f9bf7dbc77745ef7bcfc1e898263bcd46f42696fdc12ecf1d60e0fdf3d6e3ebac2e99af82cf8f835077aeb3b28ac8ff8d34abced1843760cb3662540a2b3afe2300d4cc462fa6d502e594cd85e11cc7f1f3ccd98cae809a4dfc3c5a805fc5f0b0ef3b988e9866f8e2bc363769c9b6f117f5eb76e2c965591b2c5b7e09a903a6b279a6da1c9bec9c76671b3c4f6bbfd138a2334a317eebc3a5c33746ad656ac769dd50a3fda3a2204064b6f707fdb2", 0xc2}, {&(0x7f0000002140)="a24bf4ba1dd288d866043991fb622361e1e8f34208b97596ed9da2ef0ae465e4adceed53956506db0ae56ea8d2580dd7edd86f23371d867abbeb25d37496be4b0256d144d92764d0bfcf444a87a30b9b66661bc0b5c2847a526b6906a7b7ba069d92e4e91e0d49313b8f779fea35b4eb1fb37662557f350850c2c4f441e57dbf05b5703354ca1495745cb1dc5987e46d3533d9d8ea286fa7fc4875c71c386a686b3bc899f57a357cc9c05ca91ed6ec7ac2add7a9310b802837", 0xb9}], 0x2, &(0x7f0000002240)=[{0x4c, 0x11, 0x4, "87624567b2be6e893b2a29b1d9c4b6720e47b22f197484d7e3356e9000483602b6f22b1fbd518eb2af86e1b6eadd8a788d251cde2917d81fce2425b46e"}, {0x90, 0x10e, 0x5, "2d188da16c338f1a7ed02ba75fe98dceeb1d9f8a931ce23e403b82b68701e170ea927d19fe3e311307487b073567177804a511b2fefce94eadda9dab400c9132e7454f9e2c1bf84b53b0058f4047835f240a15ad5c16de79342e7e6aa11c373711ab460c09f9546113ddae3f179aedc52fa452b9ff2de0238cc9097df7434c4415"}, {0xb0, 0x104, 0x3, "3037d12b55f31950038b9543cc997bc07fa9de98a44bd4624433b30e897049f66561e6987765ca1211c06f05794e6b61252bdd1a7f5631a9291c3ac33a55b43615f7f17bbefbbee6f9fa36112482a8709bbc5b5472a8d8b701b5bfa61d38e74bbfb001da197fa57c5f6d646b77d874ca809c3def08890f09bdb34dd56e9dd32d2840d3b95599220404833698e836aa2ba9b109ed338065c479a62e097fb5a856bf06"}, {0xc4, 0x10f, 0x7fff, "ca80c1b59bd2dee2e2f5b4b0a19e0a8f119094b23ebefe5da0e79a92e739cbd42b170ac8d143e68285ecfea19f1f97eeca1c1b0c90271b9df65814fa5d8fba67eee793adbf6d45d307912b282365fea90784f5a3cbb7e30361c6f006550ef66350be72758158ce608e80b71f4b4b055114ce2ce9af864f5e5272f4281cd11bd2a28586dc01d1ce2b50eac68722c585ae57bc24ea1f1e00fd16365f99508e8e4feb2992c7d44b02a269f41ad2d32139942aa5b91183778cdd"}, {0x28, 0x10c, 0xff, "5a1fb005fa682937179677f800acd1b830e8f21803a973f06a5312f6"}, {0x54, 0x103, 0x3, "ed0af67d5c5bc2258ec416b5d35479ef650b36a7d3767c578172632f6d7cb22807a282dee65febcd74f1ad0707aa23265db50180e89a9717bfec17eb4154ce2102b79bffd376f3"}, {0xe0, 0x118, 0xfff, "7180a31cee0111ae1a0f56532c709602e3f61cfbc43871ebe4ba9027127213d946b3c50134fd9e2852fff20cffa161a768dfffb9f8e07cd9763cdccdfdc57f34cf7e704920e797faa45e7bed7d7ee5f881e19c20cac700727d09eaf46746514eb8d5b467376434c4974b4794684e0e8df21b6063f2293e1bf26d80af16a0bab555aa4e97a927c2603f5577a5d8d8256b491a12f2b4d1847a180b28983c91e5e25a26d7aed2af3f23c22dc5adb3a4a9c72c15108656bd3d0277bd46ecef6c6fb3671919b61697369dceb788141f0c9df28167"}, {0xf0, 0x112, 0x4, "1d9fdf164c5e839ddbd5fd00b6c4baf8f995fb892ea8286d516d580f1befc58a67093862c7a88480e0892093c89ab7af2303920829308696dda1aa9d74e15ad37d21296183a4acb8cda31a53e1986a31c61c022569db6503c0325b3f0fed92da46cb758dbe72a8d0fddf6302c674dd7bec95b44a50eb8b00713c848d53b959d97c37e6d3df148e5b8e0f9a0703a9320d5966f059d3ae787f1e1a67968a88529da25fb15f4c6490e1bbc18acc9ca98ccbfb1cf2ce848193fe1df88615d2337e9477f4abc8f0cff714c383fdd465df924b5ec2403d9f7e10f7cdd3ad555a22c7163c"}, {0x1c, 0x113, 0x68f, "29019a59202b9c2da37547e1c182"}, {0x100c, 0xff, 0x800, "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"}], 0x14c4}}], 0x2, 0x20041041) [ 738.828866][T16773] UDC core: couldn't find an available UDC or it's busy: -16 [ 738.836418][T16773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.860411][T16785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x623, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 738.877415][T16773] UDC core: couldn't find an available UDC or it's busy: -16 [ 738.904238][T16773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 738.987460][T16796] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 739.032532][ T3675] rc_core: IR keymap rc-hauppauge not found [ 739.038562][ T3675] Registered IR keymap rc-empty [ 739.045371][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.082685][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.123068][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 739.137361][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input302 [ 739.160808][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.193353][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.237450][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.273479][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.303618][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.342567][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.393293][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.423286][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.452552][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.482557][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 739.524532][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 739.533212][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 739.546877][ T3675] usb 4-1: USB disconnect, device number 40 [ 739.972575][ T3675] usb 4-1: new high-speed USB device number 41 using dummy_hcd 18:23:30 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x700, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x900}]}]}, 0x28}}, 0x0) 18:23:30 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653f", @ANYRES64=r1]) 18:23:30 executing program 5: r0 = syz_clone3(&(0x7f0000000b00)={0x40000000, 0x0, 0x0, &(0x7f0000000940)=0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgrp(r1) (async) pidfd_open(r0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000440)={0x3ff, 0x2, {r0}, {0xffffffffffffffff}, 0x3, 0x2}) syz_clone3(&(0x7f00000004c0)={0x20000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xa}, &(0x7f0000000340)=""/180, 0xb4, &(0x7f0000000400)=""/56, &(0x7f0000000480)=[r0, r4, r0, r2], 0x4, {r3}}, 0x58) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c00)={0x142c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff4c0}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x18, 0x5, "917ae4bab950cf462975a64b4bc86c159054a225"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x158, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x98\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]^,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@*\xb2!(\'R)\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+-#,*@-:\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'n\xc2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@$)]/$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@!(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&]\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1a36}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "0a5bc3c9764a322e61e3f9636d917031cc29e32a258411d841d8b523fca0d448ff7df1799eb9db5e41681d0b05d7f8989791caccb6ffdcbc3ff2c85028813cb993c31f7a2a1a77fcc585206a6e170e29ee5cc361b79b5beec4d5e9ccd060745763ef823bdb5a7a381adb8450c3973bcaa9df003f5f75d3f502b3d31aedfcfbe54b5385907769e5c6b1823b847d9e343ad0911bb26e7233e0d5e4b91c614c6f29e2efbb9b142dcd9ab8ae2235e68d53bb112f4eae9831842d6a56d8dc7149da8975bca03d28af7ce569f370ac0ce63bcb1e"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!%&\x10\'{&!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$\'!$}@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ')^*)\\+{%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\)][\\.\'\\&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "bed75e26327ff147b8e1d44326d94b44c1bc46e120e1fb0cbbf26d3858ee1ddc810a0ff8b6518fc35dd10bc71cab09cb26714e7f6b6a05cdea154becd1a61bf1c19d0c33251d83479611d0b5cac3218377eb6de2daa5dec0f9699f55b102850307635e9b9182685ce74f"}]}]}, 0x142c}, 0x1, 0x0, 0x0, 0x40890}, 0x0) (async) syz_clone3(&(0x7f0000000200)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/22, 0x16, &(0x7f0000000100)=""/152, &(0x7f00000001c0)=[r2], 0x1, {r3}}, 0x58) (async) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), 0x0) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003740)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @remote}, 0x0, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="e08598e3b9972d5cd843ece644f00248046a6b1c4792e8d9e7b80951ec1209b9327fa022da068bcbcf20bf061af636948c8a3e761020b43c4d2a1468244e963bd7575fae2e69cc66564d070b57703de61f8174b62ab5ed8a5ba3f76e88b69ec04f68db8a6135639d18a8f9fd55c4c67c4dcad387b554d95eec496242fbe6b0011f3e9e8b975d10489cb5fb626d", 0x8d}, {&(0x7f0000000740)="a80a3b000c2de030b299d5fa21b70b06d760f279e4d8a0f45be3a01e3429594daae76162ba9dbed47dde2aae2884569f94482c9649514680a966cf7a52c1de9bc5cf00ed8b4d2be0ee407072da27b7e2863d3b34dc46349b7fca475f86f775ab9494793f14fafe7dbebbcc5edb3ab01d527589eb5ef3e9b9ad7b2f9a2e2fd25b92b6c28432fc2d7c7ee55154d1813ae81e99ac029f22927ea516edf9e0d7799101cc46f4bba19057ab815edd62", 0xad}, {&(0x7f0000000800)="230ec47adee14d59f7bc1780a4b1a15916347bb942e7e72ef68ee73a7f60ccc7e2e7927f3ba043bdb3c5437217b12cf30e6e7723395b3859c99aa38a41aa8812299301d4fa856b535890cbff1a92591294ddd7029a0821a6c859b56bcd8f07c3f9e7a42a8ddf65935165ebf0e2c7006b029113d61bc1b1843b9045fdadfd2acebee4e0", 0x83}, {&(0x7f00000008c0)="0765f00edcc6e521bdf0fd", 0xb}, {&(0x7f0000000980)="67fc53c5d45f7ae42b8e243cb92589cfe1fd1d838ae6db3bcadc134b3c1fcaaa2f9b286cd68f7f88317b55a5d3491334c662e2ed0cb42b85d49b6adbd43d83f5e9252b9b151a7bc303800122f2de4d3f83a0ab0c8cca8058a7e36a72b406bb4764cb781874d6b072540b", 0x6a}, {&(0x7f0000000a00)="ab62e7cae79a5f60fda2cff9e5533cefbb7b29b233effb37810d1f99633f81dfae1734506f44bf71e2742c2b82a9d0314d03da11237a2a76bc163084206b5e73ae90522ac527077988a1be80773e149d670a12f5afc2b87e6cf9f04eb1cd3169f38c056b676f78f4cf650ddc0b7526456e9dcee07a6ac03749d474", 0x7b}], 0x6}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002040)="747a7899926c95556169f3af5351d7ac9522dc2f9bf7dbc77745ef7bcfc1e898263bcd46f42696fdc12ecf1d60e0fdf3d6e3ebac2e99af82cf8f835077aeb3b28ac8ff8d34abced1843760cb3662540a2b3afe2300d4cc462fa6d502e594cd85e11cc7f1f3ccd98cae809a4dfc3c5a805fc5f0b0ef3b988e9866f8e2bc363769c9b6f117f5eb76e2c965591b2c5b7e09a903a6b279a6da1c9bec9c76671b3c4f6bbfd138a2334a317eebc3a5c33746ad656ac769dd50a3fda3a2204064b6f707fdb2", 0xc2}, {&(0x7f0000002140)="a24bf4ba1dd288d866043991fb622361e1e8f34208b97596ed9da2ef0ae465e4adceed53956506db0ae56ea8d2580dd7edd86f23371d867abbeb25d37496be4b0256d144d92764d0bfcf444a87a30b9b66661bc0b5c2847a526b6906a7b7ba069d92e4e91e0d49313b8f779fea35b4eb1fb37662557f350850c2c4f441e57dbf05b5703354ca1495745cb1dc5987e46d3533d9d8ea286fa7fc4875c71c386a686b3bc899f57a357cc9c05ca91ed6ec7ac2add7a9310b802837", 0xb9}], 0x2, &(0x7f0000002240)=[{0x4c, 0x11, 0x4, "87624567b2be6e893b2a29b1d9c4b6720e47b22f197484d7e3356e9000483602b6f22b1fbd518eb2af86e1b6eadd8a788d251cde2917d81fce2425b46e"}, {0x90, 0x10e, 0x5, "2d188da16c338f1a7ed02ba75fe98dceeb1d9f8a931ce23e403b82b68701e170ea927d19fe3e311307487b073567177804a511b2fefce94eadda9dab400c9132e7454f9e2c1bf84b53b0058f4047835f240a15ad5c16de79342e7e6aa11c373711ab460c09f9546113ddae3f179aedc52fa452b9ff2de0238cc9097df7434c4415"}, {0xb0, 0x104, 0x3, "3037d12b55f31950038b9543cc997bc07fa9de98a44bd4624433b30e897049f66561e6987765ca1211c06f05794e6b61252bdd1a7f5631a9291c3ac33a55b43615f7f17bbefbbee6f9fa36112482a8709bbc5b5472a8d8b701b5bfa61d38e74bbfb001da197fa57c5f6d646b77d874ca809c3def08890f09bdb34dd56e9dd32d2840d3b95599220404833698e836aa2ba9b109ed338065c479a62e097fb5a856bf06"}, {0xc4, 0x10f, 0x7fff, "ca80c1b59bd2dee2e2f5b4b0a19e0a8f119094b23ebefe5da0e79a92e739cbd42b170ac8d143e68285ecfea19f1f97eeca1c1b0c90271b9df65814fa5d8fba67eee793adbf6d45d307912b282365fea90784f5a3cbb7e30361c6f006550ef66350be72758158ce608e80b71f4b4b055114ce2ce9af864f5e5272f4281cd11bd2a28586dc01d1ce2b50eac68722c585ae57bc24ea1f1e00fd16365f99508e8e4feb2992c7d44b02a269f41ad2d32139942aa5b91183778cdd"}, {0x28, 0x10c, 0xff, "5a1fb005fa682937179677f800acd1b830e8f21803a973f06a5312f6"}, {0x54, 0x103, 0x3, "ed0af67d5c5bc2258ec416b5d35479ef650b36a7d3767c578172632f6d7cb22807a282dee65febcd74f1ad0707aa23265db50180e89a9717bfec17eb4154ce2102b79bffd376f3"}, {0xe0, 0x118, 0xfff, "7180a31cee0111ae1a0f56532c709602e3f61cfbc43871ebe4ba9027127213d946b3c50134fd9e2852fff20cffa161a768dfffb9f8e07cd9763cdccdfdc57f34cf7e704920e797faa45e7bed7d7ee5f881e19c20cac700727d09eaf46746514eb8d5b467376434c4974b4794684e0e8df21b6063f2293e1bf26d80af16a0bab555aa4e97a927c2603f5577a5d8d8256b491a12f2b4d1847a180b28983c91e5e25a26d7aed2af3f23c22dc5adb3a4a9c72c15108656bd3d0277bd46ecef6c6fb3671919b61697369dceb788141f0c9df28167"}, {0xf0, 0x112, 0x4, "1d9fdf164c5e839ddbd5fd00b6c4baf8f995fb892ea8286d516d580f1befc58a67093862c7a88480e0892093c89ab7af2303920829308696dda1aa9d74e15ad37d21296183a4acb8cda31a53e1986a31c61c022569db6503c0325b3f0fed92da46cb758dbe72a8d0fddf6302c674dd7bec95b44a50eb8b00713c848d53b959d97c37e6d3df148e5b8e0f9a0703a9320d5966f059d3ae787f1e1a67968a88529da25fb15f4c6490e1bbc18acc9ca98ccbfb1cf2ce848193fe1df88615d2337e9477f4abc8f0cff714c383fdd465df924b5ec2403d9f7e10f7cdd3ad555a22c7163c"}, {0x1c, 0x113, 0x68f, "29019a59202b9c2da37547e1c182"}, {0x100c, 0xff, 0x800, "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"}], 0x14c4}}], 0x2, 0x20041041) 18:23:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xe00}]}]}, 0x28}}, 0x0) [ 740.197616][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 740.222638][ T3675] usb 4-1: Using ep0 maxpacket: 16 18:23:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x900, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 740.303000][ T4313] rc_core: IR keymap rc-hauppauge not found [ 740.319129][ T4313] Registered IR keymap rc-empty [ 740.332841][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.342958][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.367967][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.383982][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.394198][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.401580][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 740.411428][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.428936][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.442923][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 740.465351][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input303 [ 740.481384][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.512610][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.543281][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.553012][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 740.562207][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 740.571625][ T3675] usb 4-1: Manufacturer: syz [ 740.576970][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.591412][ T3675] usb 4-1: config 0 descriptor?? [ 740.613000][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.620189][ T4314] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 740.666126][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.702559][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.742664][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.782820][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.813876][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 740.839320][T16793] UDC core: couldn't find an available UDC or it's busy: -16 [ 740.846946][T16793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.856012][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 740.860391][T16793] UDC core: couldn't find an available UDC or it's busy: -16 [ 740.868460][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 740.871649][T16793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.892630][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 740.896580][T16793] UDC core: couldn't find an available UDC or it's busy: -16 [ 740.903483][ T4313] usb 1-1: USB disconnect, device number 25 [ 740.911648][T16793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.922842][T16793] UDC core: couldn't find an available UDC or it's busy: -16 [ 740.930478][T16793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 740.946915][T16793] UDC core: couldn't find an available UDC or it's busy: -16 [ 740.968738][T16793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.022632][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.033029][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.044462][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 741.054721][ T4314] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 741.065566][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.153825][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.163177][ T4314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.171502][ T4314] usb 2-1: Manufacturer: syz [ 741.184803][ T4314] usb 2-1: config 0 descriptor?? [ 741.313663][ T4313] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 741.434055][T16804] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.441432][T16804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.450697][T16804] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.458153][T16804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.467386][T16804] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.475850][T16804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.484203][T16804] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.491700][T16804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.500856][T16804] UDC core: couldn't find an available UDC or it's busy: -16 [ 741.508429][T16804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 741.572724][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 741.592585][ T4314] rc_core: IR keymap rc-hauppauge not found [ 741.598766][ T4314] Registered IR keymap rc-empty [ 741.603945][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.633175][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.663501][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 741.679496][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input304 [ 741.697165][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.712815][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.723892][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.735244][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.742474][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 741.752174][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 741.762664][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.776026][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.813015][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.842526][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.882789][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.892157][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.899727][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.908293][ T4313] usb 1-1: Manufacturer: syz [ 741.921881][ T4313] usb 1-1: config 0 descriptor?? [ 741.932597][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 741.964661][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 742.003684][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 742.042682][ T4314] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 742.084428][ T4314] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 742.092976][ T4314] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 742.131946][ T4314] usb 2-1: USB disconnect, device number 76 [ 742.167587][T16808] UDC core: couldn't find an available UDC or it's busy: -16 18:23:32 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf00}]}]}, 0x28}}, 0x0) 18:23:32 executing program 5: shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 18:23:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xa00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 742.176100][T16808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 742.187189][T16808] UDC core: couldn't find an available UDC or it's busy: -16 [ 742.195187][T16808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 742.206139][T16808] UDC core: couldn't find an available UDC or it's busy: -16 18:23:32 executing program 5: shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) [ 742.239078][T16825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 742.256450][T16808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 742.285317][T16808] UDC core: couldn't find an available UDC or it's busy: -16 [ 742.314535][T16808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 742.324759][T16808] UDC core: couldn't find an available UDC or it's busy: -16 [ 742.332639][T16808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 742.353039][ T3675] rc_core: IR keymap rc-hauppauge not found [ 742.365650][ T3675] Registered IR keymap rc-empty [ 742.370577][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.402661][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.432907][ T3675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 742.448604][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input305 [ 742.464040][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.494274][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.523513][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.552616][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.582637][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.614671][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.643680][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.692865][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.722565][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.761177][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 742.794586][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 742.802630][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 742.822200][ T3675] usb 4-1: USB disconnect, device number 41 [ 743.192524][ T3675] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 743.442550][ T3675] usb 4-1: Using ep0 maxpacket: 16 18:23:33 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3f00}]}]}, 0x28}}, 0x0) 18:23:33 executing program 5: shmat(0x0, &(0x7f0000c00000/0x400000)=nil, 0x6000) (async) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 18:23:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xc00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:33 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915", @ANYRES64=r1]) [ 743.562668][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.575730][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.587130][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 18:23:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b070120aa0701000f620000000109021200010000000009047b3e"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0xa, 0x46, {0x46, 0x22, "7b1e58ff771ab4444ae57d229a741162b07b44150a4a94655b07c184963a84c551be549dc7693b21d4ab2357903e279cf34776aa363d6f4fde7c3b4b2fae59d06252002b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "ce9e3024bcb338470fc0aca4167b3a6e3023c467484d219a6a8e3641f76407f5cbed64ed0071ef938ed3915a4b98e1cc9d84063cf2b43520f91bfb7e6f4e11df2195c3f176e25083a57adf37dee6cc16acf89a2cc2ebe442e3e8a654812a7c1a1dbb0f9a75ecadb3e8"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x1, 0x7, "b51497a4", "871ab0c8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x60, 0x56, 0x6, 0x3f, 0x612b, 0x3}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0xd6f7c2e9ad3474a9, 0x15, 0x29, "cd3144382718e83cc191ccaecbb38d72fdd04da2f04a01a921ceb11a6e4d59a57138061c75a48f28b5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x100, 0x1, [0xee00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "50fb"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "06b9"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x600}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x85}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x80}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x40, 0x30, 0x68, {0x68, 0x23, "72a06ded5e72156cf7fd98c081c096ec4c4bcb459bc391c7290ed2a42c0d5e2a43dce2af5e36f4ae66ebec808e2f35defadd17abf68eec6aedbbfe645b94bdc1a04649fbf43416e914dc338c472227657709f08bbf121c3eaf59de5fc8b53f5a5dc105567b9c"}}, &(0x7f0000000740)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "eefd050953deceb420161fe278ef6ec52116ef1a092352853b2db6c43d57af8c3784fe08ddf4198db110dc998a2d9075f2dcfbcd5078d3651ee0a5e9008199f83b483cd459aa58d10b90d0833baf78c0187d429d5ac310b13d946a243674946d32f75654feb593fb289cb594839173b6ab08d9362752bf6e014618518c5aeda6a423bc44458f83331e1d77349c925761c2d0e6f3dd7e0fe4434f29e9bc865698e5f6ee56ccf7bcfbfb0e736490962727cbb905ff7505d8a183894d784fe137435fddc0a7a27b773554"}}, &(0x7f0000000840)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0xa8e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000900)={0x0, 0xa, 0xbe, "0e9445cfcda40cca41139637ed2a0d092df3bb6732ff8c9034855bae513aeb81820f02af9e6aaec3ef75ddcddd8c9b85b27d5494b662b75a84833169edb163c0e26944657e8f9d719b526fe813bd97638f83dbdbd3c87a4523d8f2d79b73f7a57237ad3935ceb69e75f7df14f403040533f5452cffeac4c86de00f810c3d9868a271cb202b708f24b19fcd89004ba7732a47f42ceea6c43b439c42c45c1e659325bf6abf6485b2d89f59784d6374833c496dab756abeafaa0883e2d8c765"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000a80)={0x20, 0x1, 0x5a, "0d07842234ba8001ce1b1a988b9551b8d53c0af18ab0056d3825eba81dda36ff7642cfd1c0e135659775e0f088410ee96529811edba363668ff2e2cfa9f25a608a6b9036d3f450e63b63fb89374c0ad66bc569f43bf62072db3d"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xb2}}) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x18, &(0x7f0000000b80)={0x9fe92bc66052300d, 0x9, 0xbb, {0xbb, 0x1b, "fdf1c051893156704855232eb4e1d5a07d4a8441eccd5054b12f8de3bc012ae31d0d28867b8159b5af011f1d6d47050a46755dbcff7c3008091a514115bf65fb19f7ebfeac130c9390c5bcdd947d0d98f2be3e7d9175503409ee87171a91cba511dd005a1fe80ad5e2e51e9df015cf1eb9a3e3b1af78a89db9d3466cd4af01526d8033e59140541fd6af8fa727a5f2d75fde1a1984d6f3b43e8e1c076730080bde869be91b42c66cb98d4738ce4b8e6436bd80fe09e4749de6"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000d00)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x7ff}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x1, 0x0, "efb82c1e", "2be57cb8"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb5, 0x8, 0x1, 0x1, 0x4, 0x7, 0x19ed}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000e00)={0x0, 0x2a, 0xbc, "ebb7c64307d27fe6672c0e94cfaa44d245861ed3cf9d50c62e1efd5267875c15afd1dbe838c16a7313f5d4faa9c597c828117fe7185a1a4bd16b83c3576b849d84d9e85ca68cdee89555caa48b4828f3465f86017516c211291095b133915471d00af109c452e0cd75c40368a2d90768edd9036837edc206b6fbae5fb1af387c6b9a7c35ee5d6370937edf4dbe769ba02b3a5772c4af71054118a103ba4783c6c202ed5677d33b42d4cdc4bcc718a841bd0827b8aa034f3dd6f39019"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0xb011}, &(0x7f0000001040)={0x40, 0x9, 0x1}, &(0x7f0000001080)={0x40, 0xb, 0x2, "ddfc"}, &(0x7f00000010c0)={0x40, 0xf, 0x2}, &(0x7f0000001100)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001140)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001180)={0x40, 0x19, 0x2, "ca4e"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 18:23:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6000}]}]}, 0x28}}, 0x0) [ 743.615870][T16840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 743.642494][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 743.652571][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.712588][ T4313] rc_core: IR keymap rc-hauppauge not found [ 743.718513][ T4313] Registered IR keymap rc-empty [ 743.742814][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.772665][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.781884][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.789760][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.798259][ T3675] usb 4-1: Manufacturer: syz [ 743.805270][ T3675] usb 4-1: config 0 descriptor?? [ 743.823137][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 743.837676][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input306 [ 743.855230][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.892597][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.923425][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.952647][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 743.962567][T14638] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 743.982677][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.012515][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.032678][ T3259] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 744.043177][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.057637][T16828] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.065099][T16828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.072928][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.077423][T16828] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.087780][T16828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.096981][T16828] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.104668][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.106025][T16828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.124257][T16828] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.131688][T16828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.132561][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 744.140721][T16828] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.154147][T16828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.186140][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 744.194191][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 744.207468][T14638] usb 2-1: Using ep0 maxpacket: 16 [ 744.215212][ T4313] usb 1-1: USB disconnect, device number 26 [ 744.322461][ T3259] usb 6-1: Using ep0 maxpacket: 32 [ 744.332567][T14638] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.343447][T14638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.354587][T14638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.364429][T14638] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.374531][T14638] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.462617][T14638] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 744.462662][ T3259] usb 6-1: config 0 has an invalid interface number: 123 but max is 0 [ 744.472094][T14638] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 744.488695][T14638] usb 2-1: Manufacturer: syz [ 744.489223][ T3259] usb 6-1: config 0 has no interface number 0 [ 744.503321][T14638] usb 2-1: config 0 descriptor?? [ 744.506939][ T3259] usb 6-1: config 0 interface 123 has no altsetting 0 [ 744.517521][ T3259] usb 6-1: New USB device found, idVendor=07aa, idProduct=0001, bcdDevice=62.0f [ 744.529051][ T3259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.542030][ T3259] usb 6-1: config 0 descriptor?? [ 744.592518][ T4313] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 744.746414][T16835] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.754334][T16835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.763101][T16835] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.770486][T16835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.779066][T16835] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.787516][T16835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.798631][T16835] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.806084][ T3259] kaweth 6-1:0.123: Firmware present in device. [ 744.812774][T16835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.821027][T16835] UDC core: couldn't find an available UDC or it's busy: -16 [ 744.837850][T16835] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 744.845436][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 744.912577][T14638] rc_core: IR keymap rc-hauppauge not found [ 744.918889][T14638] Registered IR keymap rc-empty [ 744.924218][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.952727][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 744.962698][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.973031][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.985137][T14638] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 744.998425][T16847] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.005871][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 745.006195][T16847] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.016597][T14638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input307 [ 745.044242][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 745.052614][ T3259] kaweth 6-1:0.123: Statistics collection: cf940e2c [ 745.062046][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.067087][ T3259] kaweth 6-1:0.123: Multicast filter limit: 45d2 [ 745.084316][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.085879][ T3259] kaweth 6-1:0.123: MTU: 17578 [ 745.096585][ T3259] kaweth 6-1:0.123: Read MAC address 43:07:d2:7f:e6:67 [ 745.112621][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.142674][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.162717][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 745.171768][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 745.180058][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.187352][ T4313] usb 1-1: Manufacturer: syz [ 745.194200][ T4313] usb 1-1: config 0 descriptor?? [ 745.222544][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.252565][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.282554][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.314140][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:35 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xe00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7606}]}]}, 0x28}}, 0x0) [ 745.342587][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 745.372512][T14638] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf000}]}]}, 0x28}}, 0x0) [ 745.401895][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.414600][T14638] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 745.432343][T14638] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 745.447360][T16843] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.460115][T16843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.479565][T14638] usb 2-1: USB disconnect, device number 77 [ 745.492565][ T3259] kaweth 6-1:0.123: Error setting SOFS wait 18:23:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xf00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 745.493794][T16843] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.503348][ T3259] kaweth: probe of 6-1:0.123 failed with error -5 [ 745.521744][T16843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.567432][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.572617][ T3675] rc_core: IR keymap rc-hauppauge not found [ 745.583800][T16843] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.593085][ T3259] usb 6-1: USB disconnect, device number 75 [ 745.594864][ T3675] Registered IR keymap rc-empty [ 745.605927][T16843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.619528][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.629273][T16843] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.638606][T16843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.656739][T16843] UDC core: couldn't find an available UDC or it's busy: -16 [ 745.667794][T16843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 745.670032][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.713531][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 745.726887][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input308 [ 745.741931][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.772541][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.802748][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.832553][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.872851][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.902747][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.932783][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.963994][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 745.992534][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 746.032526][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 746.063659][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 746.071686][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 746.088074][ T3675] usb 4-1: USB disconnect, device number 42 [ 746.472506][ T3675] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 746.712535][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 746.832630][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.842888][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 746.854707][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 746.864946][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 18:23:37 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xffff}]}]}, 0x28}}, 0x0) 18:23:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b070120aa0701000f620000000109021200010000000009047b3e"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0xa, 0x46, {0x46, 0x22, "7b1e58ff771ab4444ae57d229a741162b07b44150a4a94655b07c184963a84c551be549dc7693b21d4ab2357903e279cf34776aa363d6f4fde7c3b4b2fae59d06252002b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "ce9e3024bcb338470fc0aca4167b3a6e3023c467484d219a6a8e3641f76407f5cbed64ed0071ef938ed3915a4b98e1cc9d84063cf2b43520f91bfb7e6f4e11df2195c3f176e25083a57adf37dee6cc16acf89a2cc2ebe442e3e8a654812a7c1a1dbb0f9a75ecadb3e8"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x1, 0x7, "b51497a4", "871ab0c8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x60, 0x56, 0x6, 0x3f, 0x612b, 0x3}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0xd6f7c2e9ad3474a9, 0x15, 0x29, "cd3144382718e83cc191ccaecbb38d72fdd04da2f04a01a921ceb11a6e4d59a57138061c75a48f28b5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x100, 0x1, [0xee00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "50fb"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "06b9"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x600}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x85}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x80}}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x40, 0x30, 0x68, {0x68, 0x23, "72a06ded5e72156cf7fd98c081c096ec4c4bcb459bc391c7290ed2a42c0d5e2a43dce2af5e36f4ae66ebec808e2f35defadd17abf68eec6aedbbfe645b94bdc1a04649fbf43416e914dc338c472227657709f08bbf121c3eaf59de5fc8b53f5a5dc105567b9c"}}, &(0x7f0000000740)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "eefd050953deceb420161fe278ef6ec52116ef1a092352853b2db6c43d57af8c3784fe08ddf4198db110dc998a2d9075f2dcfbcd5078d3651ee0a5e9008199f83b483cd459aa58d10b90d0833baf78c0187d429d5ac310b13d946a243674946d32f75654feb593fb289cb594839173b6ab08d9362752bf6e014618518c5aeda6a423bc44458f83331e1d77349c925761c2d0e6f3dd7e0fe4434f29e9bc865698e5f6ee56ccf7bcfbfb0e736490962727cbb905ff7505d8a183894d784fe137435fddc0a7a27b773554"}}, &(0x7f0000000840)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0xa8e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000900)={0x0, 0xa, 0xbe, "0e9445cfcda40cca41139637ed2a0d092df3bb6732ff8c9034855bae513aeb81820f02af9e6aaec3ef75ddcddd8c9b85b27d5494b662b75a84833169edb163c0e26944657e8f9d719b526fe813bd97638f83dbdbd3c87a4523d8f2d79b73f7a57237ad3935ceb69e75f7df14f403040533f5452cffeac4c86de00f810c3d9868a271cb202b708f24b19fcd89004ba7732a47f42ceea6c43b439c42c45c1e659325bf6abf6485b2d89f59784d6374833c496dab756abeafaa0883e2d8c765"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000a80)={0x20, 0x1, 0x5a, "0d07842234ba8001ce1b1a988b9551b8d53c0af18ab0056d3825eba81dda36ff7642cfd1c0e135659775e0f088410ee96529811edba363668ff2e2cfa9f25a608a6b9036d3f450e63b63fb89374c0ad66bc569f43bf62072db3d"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xb2}}) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x18, &(0x7f0000000b80)={0x9fe92bc66052300d, 0x9, 0xbb, {0xbb, 0x1b, "fdf1c051893156704855232eb4e1d5a07d4a8441eccd5054b12f8de3bc012ae31d0d28867b8159b5af011f1d6d47050a46755dbcff7c3008091a514115bf65fb19f7ebfeac130c9390c5bcdd947d0d98f2be3e7d9175503409ee87171a91cba511dd005a1fe80ad5e2e51e9df015cf1eb9a3e3b1af78a89db9d3466cd4af01526d8033e59140541fd6af8fa727a5f2d75fde1a1984d6f3b43e8e1c076730080bde869be91b42c66cb98d4738ce4b8e6436bd80fe09e4749de6"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000d00)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x7ff}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x1, 0x0, "efb82c1e", "2be57cb8"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb5, 0x8, 0x1, 0x1, 0x4, 0x7, 0x19ed}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000e00)={0x0, 0x2a, 0xbc, "ebb7c64307d27fe6672c0e94cfaa44d245861ed3cf9d50c62e1efd5267875c15afd1dbe838c16a7313f5d4faa9c597c828117fe7185a1a4bd16b83c3576b849d84d9e85ca68cdee89555caa48b4828f3465f86017516c211291095b133915471d00af109c452e0cd75c40368a2d90768edd9036837edc206b6fbae5fb1af387c6b9a7c35ee5d6370937edf4dbe769ba02b3a5772c4af71054118a103ba4783c6c202ed5677d33b42d4cdc4bcc718a841bd0827b8aa034f3dd6f39019"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0xb011}, &(0x7f0000001040)={0x40, 0x9, 0x1}, &(0x7f0000001080)={0x40, 0xb, 0x2, "ddfc"}, &(0x7f00000010c0)={0x40, 0xf, 0x2}, &(0x7f0000001100)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001140)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001180)={0x40, 0x19, 0x2, "ca4e"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 18:23:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x19f8, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:37 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915", @ANYRES64=r1]) [ 746.874703][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.913794][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.920383][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.964709][T16871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 746.972846][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 746.990276][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 747.009279][ T3675] usb 4-1: Manufacturer: syz 18:23:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x1f00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0xf}}, 0x0) [ 747.017939][ T3675] usb 4-1: config 0 descriptor?? [ 747.052673][ T4313] rc_core: IR keymap rc-hauppauge not found [ 747.058880][ T4313] Registered IR keymap rc-empty [ 747.085622][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.121376][T16876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.142784][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.193098][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 747.218974][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input309 [ 747.235444][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.242658][ T14] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 747.270812][T16858] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.278481][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.285854][T14576] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 747.293589][T16858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.302346][T16858] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.310725][T16858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.319878][T16858] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.327579][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.335386][T16858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.344473][T16858] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.351986][T16858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.363411][T16858] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.370931][T16858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 747.378970][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.420789][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.452608][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.482642][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.492577][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 747.512889][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.542790][T14576] usb 2-1: Using ep0 maxpacket: 16 [ 747.552685][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.592808][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 747.633615][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 747.641726][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 747.652586][ T14] usb 6-1: config 0 has an invalid interface number: 123 but max is 0 [ 747.660780][ T14] usb 6-1: config 0 has no interface number 0 [ 747.662978][T14576] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.667243][ T14] usb 6-1: config 0 interface 123 has no altsetting 0 [ 747.679816][ T4313] usb 1-1: USB disconnect, device number 27 [ 747.691958][ T14] usb 6-1: New USB device found, idVendor=07aa, idProduct=0001, bcdDevice=62.0f [ 747.692267][T14576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.702085][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.713252][T14576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.743723][ T14] usb 6-1: config 0 descriptor?? [ 747.744894][T14576] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.767577][T14576] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.852786][T14576] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 747.861857][T14576] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 747.870024][T14576] usb 2-1: Manufacturer: syz [ 747.884402][T14576] usb 2-1: config 0 descriptor?? [ 747.986780][T16879] UDC core: couldn't find an available UDC or it's busy: -16 [ 747.996373][T16879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.012700][ T14] kaweth 6-1:0.123: Firmware present in device. [ 748.032658][ T14] kaweth 6-1:0.123: Error reading configuration (-71), no net device created [ 748.041824][ T14] kaweth: probe of 6-1:0.123 failed with error -5 [ 748.057465][ T14] usb 6-1: USB disconnect, device number 76 [ 748.124696][T16866] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.132496][T16866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.140644][T16866] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.148468][ T4313] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 748.148609][T16866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.170030][T16866] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.177879][T16866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.187651][T16866] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.195519][T16866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.204785][T16866] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.212568][T16866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.292586][T14576] rc_core: IR keymap rc-hauppauge not found [ 748.298501][T14576] Registered IR keymap rc-empty [ 748.303877][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.333927][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.363377][T14576] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 748.382759][T14576] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input310 [ 748.396186][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 748.404411][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.433679][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.463442][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.492677][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.512597][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.522960][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.530138][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 748.541517][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 748.551580][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 748.561393][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.568733][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:23:38 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x14}}, 0x0) 18:23:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x2000, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b070120aa0701000f620000000109021200010000000009047b3e"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0xa, 0x46, {0x46, 0x22, "7b1e58ff771ab4444ae57d229a741162b07b44150a4a94655b07c184963a84c551be549dc7693b21d4ab2357903e279cf34776aa363d6f4fde7c3b4b2fae59d06252002b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "ce9e3024bcb338470fc0aca4167b3a6e3023c467484d219a6a8e3641f76407f5cbed64ed0071ef938ed3915a4b98e1cc9d84063cf2b43520f91bfb7e6f4e11df2195c3f176e25083a57adf37dee6cc16acf89a2cc2ebe442e3e8a654812a7c1a1dbb0f9a75ecadb3e8"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x1, 0x7, "b51497a4", "871ab0c8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x60, 0x56, 0x6, 0x3f, 0x612b, 0x3}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0xd6f7c2e9ad3474a9, 0x15, 0x29, "cd3144382718e83cc191ccaecbb38d72fdd04da2f04a01a921ceb11a6e4d59a57138061c75a48f28b5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x100, 0x1, [0xee00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "50fb"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "06b9"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x600}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x85}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x80}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x40, 0x30, 0x68, {0x68, 0x23, "72a06ded5e72156cf7fd98c081c096ec4c4bcb459bc391c7290ed2a42c0d5e2a43dce2af5e36f4ae66ebec808e2f35defadd17abf68eec6aedbbfe645b94bdc1a04649fbf43416e914dc338c472227657709f08bbf121c3eaf59de5fc8b53f5a5dc105567b9c"}}, &(0x7f0000000740)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "eefd050953deceb420161fe278ef6ec52116ef1a092352853b2db6c43d57af8c3784fe08ddf4198db110dc998a2d9075f2dcfbcd5078d3651ee0a5e9008199f83b483cd459aa58d10b90d0833baf78c0187d429d5ac310b13d946a243674946d32f75654feb593fb289cb594839173b6ab08d9362752bf6e014618518c5aeda6a423bc44458f83331e1d77349c925761c2d0e6f3dd7e0fe4434f29e9bc865698e5f6ee56ccf7bcfbfb0e736490962727cbb905ff7505d8a183894d784fe137435fddc0a7a27b773554"}}, &(0x7f0000000840)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0xa8e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000900)={0x0, 0xa, 0xbe, "0e9445cfcda40cca41139637ed2a0d092df3bb6732ff8c9034855bae513aeb81820f02af9e6aaec3ef75ddcddd8c9b85b27d5494b662b75a84833169edb163c0e26944657e8f9d719b526fe813bd97638f83dbdbd3c87a4523d8f2d79b73f7a57237ad3935ceb69e75f7df14f403040533f5452cffeac4c86de00f810c3d9868a271cb202b708f24b19fcd89004ba7732a47f42ceea6c43b439c42c45c1e659325bf6abf6485b2d89f59784d6374833c496dab756abeafaa0883e2d8c765"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000a80)={0x20, 0x1, 0x5a, "0d07842234ba8001ce1b1a988b9551b8d53c0af18ab0056d3825eba81dda36ff7642cfd1c0e135659775e0f088410ee96529811edba363668ff2e2cfa9f25a608a6b9036d3f450e63b63fb89374c0ad66bc569f43bf62072db3d"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xb2}}) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x18, &(0x7f0000000b80)={0x9fe92bc66052300d, 0x9, 0xbb, {0xbb, 0x1b, "fdf1c051893156704855232eb4e1d5a07d4a8441eccd5054b12f8de3bc012ae31d0d28867b8159b5af011f1d6d47050a46755dbcff7c3008091a514115bf65fb19f7ebfeac130c9390c5bcdd947d0d98f2be3e7d9175503409ee87171a91cba511dd005a1fe80ad5e2e51e9df015cf1eb9a3e3b1af78a89db9d3466cd4af01526d8033e59140541fd6af8fa727a5f2d75fde1a1984d6f3b43e8e1c076730080bde869be91b42c66cb98d4738ce4b8e6436bd80fe09e4749de6"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000d00)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x7ff}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x1, 0x0, "efb82c1e", "2be57cb8"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb5, 0x8, 0x1, 0x1, 0x4, 0x7, 0x19ed}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000e00)={0x0, 0x2a, 0xbc, "ebb7c64307d27fe6672c0e94cfaa44d245861ed3cf9d50c62e1efd5267875c15afd1dbe838c16a7313f5d4faa9c597c828117fe7185a1a4bd16b83c3576b849d84d9e85ca68cdee89555caa48b4828f3465f86017516c211291095b133915471d00af109c452e0cd75c40368a2d90768edd9036837edc206b6fbae5fb1af387c6b9a7c35ee5d6370937edf4dbe769ba02b3a5772c4af71054118a103ba4783c6c202ed5677d33b42d4cdc4bcc718a841bd0827b8aa034f3dd6f39019"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0xb011}, &(0x7f0000001040)={0x40, 0x9, 0x1}, &(0x7f0000001080)={0x40, 0xb, 0x2, "ddfc"}, &(0x7f00000010c0)={0x40, 0xf, 0x2}, &(0x7f0000001100)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001140)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001180)={0x40, 0x19, 0x2, "ca4e"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b070120aa0701000f620000000109021200010000000009047b3e"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x0, 0xa, 0x46, {0x46, 0x22, "7b1e58ff771ab4444ae57d229a741162b07b44150a4a94655b07c184963a84c551be549dc7693b21d4ab2357903e279cf34776aa363d6f4fde7c3b4b2fae59d06252002b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "ce9e3024bcb338470fc0aca4167b3a6e3023c467484d219a6a8e3641f76407f5cbed64ed0071ef938ed3915a4b98e1cc9d84063cf2b43520f91bfb7e6f4e11df2195c3f176e25083a57adf37dee6cc16acf89a2cc2ebe442e3e8a654812a7c1a1dbb0f9a75ecadb3e8"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x1, 0x7, "b51497a4", "871ab0c8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x60, 0x56, 0x6, 0x3f, 0x612b, 0x3}}}, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0xd6f7c2e9ad3474a9, 0x15, 0x29, "cd3144382718e83cc191ccaecbb38d72fdd04da2f04a01a921ceb11a6e4d59a57138061c75a48f28b5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x100, 0x1, [0xee00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000003c0)={0x40, 0x9, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "50fb"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000500)={0x40, 0x19, 0x2, "06b9"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x600}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x85}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0xb9, 0x8, 0x1557, 0x7720, 0xb7eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x85, 0xe6}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x14, &(0x7f00000006c0)={0x40, 0x30, 0x68, {0x68, 0x23, "72a06ded5e72156cf7fd98c081c096ec4c4bcb459bc391c7290ed2a42c0d5e2a43dce2af5e36f4ae66ebec808e2f35defadd17abf68eec6aedbbfe645b94bdc1a04649fbf43416e914dc338c472227657709f08bbf121c3eaf59de5fc8b53f5a5dc105567b9c"}}, &(0x7f0000000740)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "eefd050953deceb420161fe278ef6ec52116ef1a092352853b2db6c43d57af8c3784fe08ddf4198db110dc998a2d9075f2dcfbcd5078d3651ee0a5e9008199f83b483cd459aa58d10b90d0833baf78c0187d429d5ac310b13d946a243674946d32f75654feb593fb289cb594839173b6ab08d9362752bf6e014618518c5aeda6a423bc44458f83331e1d77349c925761c2d0e6f3dd7e0fe4434f29e9bc865698e5f6ee56ccf7bcfbfb0e736490962727cbb905ff7505d8a183894d784fe137435fddc0a7a27b773554"}}, &(0x7f0000000840)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x7, "fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0xa8e}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000900)={0x0, 0xa, 0xbe, "0e9445cfcda40cca41139637ed2a0d092df3bb6732ff8c9034855bae513aeb81820f02af9e6aaec3ef75ddcddd8c9b85b27d5494b662b75a84833169edb163c0e26944657e8f9d719b526fe813bd97638f83dbdbd3c87a4523d8f2d79b73f7a57237ad3935ceb69e75f7df14f403040533f5452cffeac4c86de00f810c3d9868a271cb202b708f24b19fcd89004ba7732a47f42ceea6c43b439c42c45c1e659325bf6abf6485b2d89f59784d6374833c496dab756abeafaa0883e2d8c765"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8d}, &(0x7f0000000a80)={0x20, 0x1, 0x5a, "0d07842234ba8001ce1b1a988b9551b8d53c0af18ab0056d3825eba81dda36ff7642cfd1c0e135659775e0f088410ee96529811edba363668ff2e2cfa9f25a608a6b9036d3f450e63b63fb89374c0ad66bc569f43bf62072db3d"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xb2}}) (async) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x18, &(0x7f0000000b80)={0x9fe92bc66052300d, 0x9, 0xbb, {0xbb, 0x1b, "fdf1c051893156704855232eb4e1d5a07d4a8441eccd5054b12f8de3bc012ae31d0d28867b8159b5af011f1d6d47050a46755dbcff7c3008091a514115bf65fb19f7ebfeac130c9390c5bcdd947d0d98f2be3e7d9175503409ee87171a91cba511dd005a1fe80ad5e2e51e9df015cf1eb9a3e3b1af78a89db9d3466cd4af01526d8033e59140541fd6af8fa727a5f2d75fde1a1984d6f3b43e8e1c076730080bde869be91b42c66cb98d4738ce4b8e6436bd80fe09e4749de6"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000d00)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x7ff}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x1, 0x0, "efb82c1e", "2be57cb8"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb5, 0x8, 0x1, 0x1, 0x4, 0x7, 0x19ed}}}, &(0x7f00000012c0)={0x44, &(0x7f0000000e00)={0x0, 0x2a, 0xbc, "ebb7c64307d27fe6672c0e94cfaa44d245861ed3cf9d50c62e1efd5267875c15afd1dbe838c16a7313f5d4faa9c597c828117fe7185a1a4bd16b83c3576b849d84d9e85ca68cdee89555caa48b4828f3465f86017516c211291095b133915471d00af109c452e0cd75c40368a2d90768edd9036837edc206b6fbae5fb1af387c6b9a7c35ee5d6370937edf4dbe769ba02b3a5772c4af71054118a103ba4783c6c202ed5677d33b42d4cdc4bcc718a841bd0827b8aa034f3dd6f39019"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x40, 0x7, 0x2, 0xb011}, &(0x7f0000001040)={0x40, 0x9, 0x1}, &(0x7f0000001080)={0x40, 0xb, 0x2, "ddfc"}, &(0x7f00000010c0)={0x40, 0xf, 0x2}, &(0x7f0000001100)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001140)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001180)={0x40, 0x19, 0x2, "ca4e"}, &(0x7f00000011c0)={0x40, 0x1a, 0x2}, &(0x7f0000001200)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000001280)={0x40, 0x21, 0x1, 0x40}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) [ 748.602754][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.630735][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 748.640913][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.652856][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 748.661919][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 748.684114][ T4313] usb 1-1: Manufacturer: syz 18:23:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x44}}, 0x0) [ 748.713425][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.722811][ T4313] usb 1-1: config 0 descriptor?? [ 748.743383][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 748.753655][ T3675] rc_core: IR keymap rc-hauppauge not found [ 748.759569][ T3675] Registered IR keymap rc-empty [ 748.769929][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.793371][T14576] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 748.801533][T14576] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 748.816191][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.836482][T15470] usb 2-1: USB disconnect, device number 78 [ 748.853146][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 748.876174][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input311 [ 748.891913][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.902761][ T14] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 748.922845][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.952657][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 748.970780][T16873] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.978908][T16873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 748.990002][T16873] UDC core: couldn't find an available UDC or it's busy: -16 [ 748.992500][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.001096][T16873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.015049][T16873] UDC core: couldn't find an available UDC or it's busy: -16 [ 749.023118][T16873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.031268][T16873] UDC core: couldn't find an available UDC or it's busy: -16 [ 749.032561][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.041514][T16873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.057534][T16873] UDC core: couldn't find an available UDC or it's busy: -16 [ 749.065230][T16873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.102562][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.132520][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.162507][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 749.163222][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.202616][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.232637][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 749.263531][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 749.271549][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 749.282801][ T3675] usb 4-1: USB disconnect, device number 43 [ 749.302671][ T14] usb 6-1: config 0 has an invalid interface number: 123 but max is 0 [ 749.315500][ T14] usb 6-1: config 0 has no interface number 0 [ 749.322048][ T14] usb 6-1: config 0 interface 123 has no altsetting 0 [ 749.335177][ T14] usb 6-1: New USB device found, idVendor=07aa, idProduct=0001, bcdDevice=62.0f [ 749.349019][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.363467][ T14] usb 6-1: config 0 descriptor?? [ 749.632717][ T14] kaweth 6-1:0.123: Firmware present in device. [ 749.662611][ T3675] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 749.823366][T16888] UDC core: couldn't find an available UDC or it's busy: -16 [ 749.830775][T16888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 749.852683][ T14] kaweth 6-1:0.123: Statistics collection: cf940e2c [ 749.859306][ T14] kaweth 6-1:0.123: Multicast filter limit: 45d2 [ 749.865839][ T14] kaweth 6-1:0.123: MTU: 17578 [ 749.871498][ T14] kaweth 6-1:0.123: Read MAC address 43:07:d2:7f:e6:67 [ 749.902494][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 750.022698][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.033117][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.044177][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.053978][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 750.064065][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.152868][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 750.162041][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 750.170254][ T3675] usb 4-1: Manufacturer: syz [ 750.177203][ T3675] usb 4-1: config 0 descriptor?? 18:23:40 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000302000000"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x6b}}, 0x0) 18:23:40 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915", @ANYRES64=r1]) 18:23:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x2306, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 750.274361][T16888] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.279827][T16897] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.283817][T16888] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.298546][T16897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 18:23:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0xc00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0xc0}}, 0x0) [ 750.332692][ T14] kaweth 6-1:0.123: Error setting SOFS wait [ 750.342297][ T14] kaweth: probe of 6-1:0.123 failed with error -5 [ 750.356957][T16911] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x4800, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 750.401803][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.404383][ T14] usb 6-1: USB disconnect, device number 77 [ 750.421355][T16892] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.458873][T16892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.507719][T16892] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.528204][T16892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.542667][ T4313] rc_core: IR keymap rc-hauppauge not found [ 750.545827][T16892] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.550179][ T4313] Registered IR keymap rc-empty [ 750.561964][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 750.569483][T16892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.584284][T16892] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.586583][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.592185][T16892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.612721][T14576] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 750.615046][T16892] UDC core: couldn't find an available UDC or it's busy: -16 [ 750.634525][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.641232][T16892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 750.683106][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 750.696999][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input312 [ 750.712199][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.744488][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.772573][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.802615][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.832680][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.852575][T14576] usb 2-1: Using ep0 maxpacket: 16 [ 750.862557][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.893341][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.922658][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.952768][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.972560][T14576] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.982969][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.990282][T14576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.001759][T14576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.011616][T14576] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 751.022217][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 751.030328][T14576] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.043498][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 751.054483][ T4313] usb 1-1: USB disconnect, device number 28 [ 751.132730][T14576] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 751.142091][T14576] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 751.150625][T14576] usb 2-1: Manufacturer: syz [ 751.162275][T14576] usb 2-1: config 0 descriptor?? [ 751.406481][T16909] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.414049][T16909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.422731][T16909] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.430112][T16909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.432581][ T4313] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 751.439987][T16909] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.452650][T16909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.461809][T16909] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.469373][T16909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.478102][T16909] UDC core: couldn't find an available UDC or it's busy: -16 [ 751.485655][T16909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 751.562655][T14576] rc_core: IR keymap rc-hauppauge not found [ 751.568578][T14576] Registered IR keymap rc-empty [ 751.574195][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.602839][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.633276][T14576] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 751.646789][T14576] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input313 [ 751.662127][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.692634][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 751.697941][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.733697][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.762817][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.792663][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.822674][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.833607][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:42 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x1, 0x5000, 0x1000, &(0x7f0000579000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x10000, 0x3, 0x4000, 0x2000, &(0x7f000057b000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201}, 0x14}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') 18:23:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x4c00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0xec0}}, 0x0) [ 751.840841][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.852362][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.862538][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 751.872362][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.872625][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.920968][T16930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 751.922958][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x33fe0}}, 0x0) [ 751.973409][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 751.982710][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 751.990786][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 751.999293][ T4313] usb 1-1: Manufacturer: syz [ 752.010170][ T3675] rc_core: IR keymap rc-hauppauge not found [ 752.016630][T14576] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.024674][ T3675] Registered IR keymap rc-empty [ 752.029603][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.039910][ T4313] usb 1-1: config 0 descriptor?? [ 752.063487][T14576] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 752.071518][T14576] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.080131][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.126368][T14576] usb 2-1: USB disconnect, device number 79 [ 752.139361][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 752.156539][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input314 [ 752.219093][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.252724][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.282880][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.299586][T16917] UDC core: couldn't find an available UDC or it's busy: -16 [ 752.307314][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 752.312605][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.318148][T16917] UDC core: couldn't find an available UDC or it's busy: -16 [ 752.330954][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 752.340725][T16917] UDC core: couldn't find an available UDC or it's busy: -16 [ 752.348695][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.348829][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 752.366245][T16917] UDC core: couldn't find an available UDC or it's busy: -16 [ 752.374147][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 752.383385][T16917] UDC core: couldn't find an available UDC or it's busy: -16 [ 752.390964][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 752.398747][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.433426][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.462567][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.492540][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.523449][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 752.553964][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 752.562099][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.573493][ T3675] usb 4-1: USB disconnect, device number 44 [ 752.952465][ T3675] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 753.192475][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 753.312628][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.323956][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.335547][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.345534][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 753.355833][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.443019][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.452195][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.460775][ T3675] usb 4-1: Manufacturer: syz [ 753.474651][ T3675] usb 4-1: config 0 descriptor?? 18:23:43 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x1, 0x5000, 0x1000, &(0x7f0000579000/0x1000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x10000, 0x3, 0x4000, 0x2000, &(0x7f000057b000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201}, 0x14}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') 18:23:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x5865, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x7ffff000}}, 0x0) 18:23:43 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4", @ANYRES64=r1]) 18:23:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0xfffffdef}}, 0x0) 18:23:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6000, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 753.681536][T16947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 753.719104][T16934] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.744885][T16934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.754076][T16934] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.762012][T16934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.762553][ T4313] rc_core: IR keymap rc-hauppauge not found [ 753.773518][T16934] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.784095][T16934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.793889][T16934] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.801467][T16934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.807106][ T4313] Registered IR keymap rc-empty [ 753.810405][T16934] UDC core: couldn't find an available UDC or it's busy: -16 [ 753.821529][T16934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 753.830316][T16957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 753.843502][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 753.872826][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 753.923567][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 753.937062][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input315 [ 753.942509][ T14] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 753.960792][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 753.992707][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.023073][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.052524][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.082562][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.112524][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.147363][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.184345][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.202685][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 754.212864][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.242644][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 754.280361][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 754.288566][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 754.304049][ T4313] usb 1-1: USB disconnect, device number 29 [ 754.342848][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.358074][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.369827][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 754.380526][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 754.391013][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.512612][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 754.521886][ T14] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 754.530257][ T14] usb 2-1: Manufacturer: syz [ 754.537202][ T14] usb 2-1: config 0 descriptor?? [ 754.682525][ T4313] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 754.797023][T16945] UDC core: couldn't find an available UDC or it's busy: -16 [ 754.805240][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 754.814690][T16945] UDC core: couldn't find an available UDC or it's busy: -16 [ 754.822081][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 754.830605][T16945] UDC core: couldn't find an available UDC or it's busy: -16 [ 754.838117][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 754.846928][T16945] UDC core: couldn't find an available UDC or it's busy: -16 [ 754.854384][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 754.863213][T16945] UDC core: couldn't find an available UDC or it's busy: -16 [ 754.870692][T16945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 754.922538][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 754.942555][ T14] rc_core: IR keymap rc-hauppauge not found [ 754.948634][ T14] Registered IR keymap rc-empty [ 754.954065][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.992702][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.023975][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 755.042636][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input316 [ 755.042974][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.068217][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.072156][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:45 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0x2}, 0x0) 18:23:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6558, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x1, 0x5000, 0x1000, &(0x7f0000579000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x10000, 0x3, 0x4000, 0x2000, &(0x7f000057b000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201}, 0x14}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') [ 755.079669][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 755.098747][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 755.129496][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0x8}, 0x0) [ 755.132560][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.152485][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.192765][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.232891][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.263212][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.264595][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 755.279662][ T3675] rc_core: IR keymap rc-hauppauge not found [ 755.285895][ T3675] Registered IR keymap rc-empty [ 755.291199][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.299727][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 755.305079][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.312104][ T4313] usb 1-1: Manufacturer: syz [ 755.331674][ T4313] usb 1-1: config 0 descriptor?? [ 755.336819][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.352633][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.373151][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 755.390422][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input317 [ 755.408231][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.412701][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.442673][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.452539][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.472666][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.492660][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.502743][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.533840][ T14] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 755.534526][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.542030][ T14] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 755.560253][ T14] usb 2-1: USB disconnect, device number 80 [ 755.582736][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.604433][T16953] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.611846][T16953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.619544][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.622297][T16953] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.637262][T16953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.648129][T16953] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.652622][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.657391][T16953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.675827][T16953] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.683479][T16953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.691762][T16953] UDC core: couldn't find an available UDC or it's busy: -16 [ 755.699449][T16953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 755.707018][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.742571][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 755.773829][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 755.781912][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 755.810337][ T3675] usb 4-1: USB disconnect, device number 45 [ 756.172609][ T3675] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 756.412542][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 756.532580][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.543455][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 756.554537][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 756.564492][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 756.574525][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.662753][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 756.671827][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 756.680227][ T3675] usb 4-1: Manufacturer: syz [ 756.689518][ T3675] usb 4-1: config 0 descriptor?? 18:23:47 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0x44}, 0x0) 18:23:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6800, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)=ANY=[], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) copy_file_range(r2, &(0x7f00000000c0)=0x1, r3, &(0x7f0000000100)=0x9, 0x3ff, 0x0) 18:23:47 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4", @ANYRES64=r1]) 18:23:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x6c00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)=ANY=[], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) copy_file_range(r2, &(0x7f00000000c0)=0x1, r3, &(0x7f0000000100)=0x9, 0x3ff, 0x0) [ 756.961299][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 756.973338][T16970] UDC core: couldn't find an available UDC or it's busy: -16 [ 756.984656][T16970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.030085][T16970] UDC core: couldn't find an available UDC or it's busy: -16 [ 757.067218][T16995] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 757.077553][ T4313] rc_core: IR keymap rc-hauppauge not found [ 757.083811][T16970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.091372][ T4313] Registered IR keymap rc-empty [ 757.100598][T16970] UDC core: couldn't find an available UDC or it's busy: -16 [ 757.112570][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.118296][T16970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.133986][T16970] UDC core: couldn't find an available UDC or it's busy: -16 [ 757.142364][T16970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.152646][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.165202][T16970] UDC core: couldn't find an available UDC or it's busy: -16 [ 757.175842][T16970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.183114][ T4313] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 757.201798][ T4313] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input318 [ 757.221627][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.253747][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.282508][T15470] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 757.290465][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.332589][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.362502][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.392603][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.422505][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.454142][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.492736][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.522539][T15470] usb 2-1: Using ep0 maxpacket: 16 [ 757.527856][ T4313] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 757.564658][ T4313] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 757.572895][ T4313] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 757.584440][ T4313] usb 1-1: USB disconnect, device number 30 [ 757.642721][T15470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.653786][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 757.665166][T15470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 757.675113][T15470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 757.685106][T15470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.772549][T15470] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.781723][T15470] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.790159][T15470] usb 2-1: Manufacturer: syz [ 757.797320][T15470] usb 2-1: config 0 descriptor?? [ 757.962493][ T4313] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 758.045338][T16986] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.053597][T16986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.062950][T16986] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.070403][T16986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.079245][T16986] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.086785][T16986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.095514][T16986] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.103042][T16986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.111269][T16986] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.118691][T16986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.192565][T15470] rc_core: IR keymap rc-hauppauge not found [ 758.198717][T15470] Registered IR keymap rc-empty [ 758.204301][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 758.209998][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.245040][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.273286][T15470] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 758.287764][T15470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input319 [ 758.303214][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.322564][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.333082][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 18:23:48 executing program 3: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0x6b}, 0x0) 18:23:48 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)=ANY=[], 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) copy_file_range(r2, &(0x7f00000000c0)=0x1, r3, &(0x7f0000000100)=0x9, 0x3ff, 0x0) epoll_create1(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) dup3(r2, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000940), 0x80) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000240)=ANY=[], 0x18, 0xfffffffffffffffd) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) (async) copy_file_range(r2, &(0x7f00000000c0)=0x1, r3, &(0x7f0000000100)=0x9, 0x3ff, 0x0) (async) [ 758.340283][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.351760][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.361924][ T4313] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.372903][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.380232][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 18:23:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x7400, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0x300}, 0x0) [ 758.425260][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.438706][T17004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.472829][ T4313] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.482754][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.496800][ T4313] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.522488][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.531637][ T4313] usb 1-1: Manufacturer: syz [ 758.545245][ T4313] usb 1-1: config 0 descriptor?? [ 758.566935][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.592600][ T3675] rc_core: IR keymap rc-hauppauge not found [ 758.598554][ T3675] Registered IR keymap rc-empty [ 758.606891][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.614225][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.643829][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.651158][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.682520][T15470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 758.690631][ T3675] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 758.704404][ T3675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input320 [ 758.722195][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.733602][T15470] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 758.741603][T15470] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 758.757780][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.768329][T15470] usb 2-1: USB disconnect, device number 81 [ 758.797538][T16993] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.802538][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.812157][T16993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.824330][T16993] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.831971][T16993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.842534][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.845742][T16993] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.863633][T16993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.872708][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.872857][T16993] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.887605][T16993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.899615][T16993] UDC core: couldn't find an available UDC or it's busy: -16 [ 758.902701][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.907186][T16993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 758.943001][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 758.972609][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 759.002663][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 759.032520][ T3675] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 759.063242][ T3675] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 759.071241][ T3675] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 759.083509][ T3675] usb 4-1: USB disconnect, device number 46 [ 759.465966][ T3675] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 759.732568][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 759.872958][ T3675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.883146][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.894810][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.905567][ T3675] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.915319][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.033054][ T3675] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 760.042446][ T3675] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 760.050711][ T3675] usb 4-1: Manufacturer: syz [ 760.058510][ T3675] usb 4-1: config 0 descriptor?? 18:23:50 executing program 0: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030200000002"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4df353f47472c2ba6279449a5220c9f", @ANYRES64=r1]) 18:23:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x7a00, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) 18:23:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x10003) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x80000}) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) splice(r0, 0x0, r4, 0x0, 0x4fee0, 0x0) 18:23:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}, 0xffffff1f}, 0x0) 18:23:50 executing program 1: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x8e, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x0, 0xe6, 0x54, 0x14, 0x0, 0xcf2, 0x6250, 0x55bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa5, 0xd9, 0xb8}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="0466917dd5a19a5ae442e66ba5f4e5ff42e36bacd48a7a347fe2b84536a0e21b43d0e89c09fd5e51a3c5d892d0f2c083db833cb7994c15d429df553e653fcfd0b6aa5f86d563e60bc66a400d472162832448d91904029330e9ea233915286e6e55a8670cc0195b8ffa98b9a4", @ANYRES64=r1]) 18:23:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) [ 760.177603][T17023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x80fe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) [ 760.309169][T17017] UDC core: couldn't find an available UDC or it's busy: -16 [ 760.314068][T17035] [ 760.319079][T17035] ============================================ [ 760.320830][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.