Warning: Permanently added '[localhost]:53440' (ED25519) to the list of known hosts. 1970/01/01 00:05:08 fuzzer started 1970/01/01 00:05:17 dialing manager at localhost:30004 syzkaller login: [ 321.183920][ T3012] cgroup: Unknown subsys name 'net' [ 321.768848][ T3012] cgroup: Unknown subsys name 'rlimit' [ 366.613936][ T3012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:06:06 syscalls: 211 1970/01/01 00:06:06 code coverage: enabled 1970/01/01 00:06:06 comparison tracing: enabled 1970/01/01 00:06:06 extra coverage: enabled 1970/01/01 00:06:06 delay kcov mmap: enabled 1970/01/01 00:06:06 setuid sandbox: enabled 1970/01/01 00:06:06 namespace sandbox: enabled 1970/01/01 00:06:06 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:06 fault injection: enabled 1970/01/01 00:06:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:06 net packet injection: enabled 1970/01/01 00:06:06 net device setup: enabled 1970/01/01 00:06:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:06 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:06 USB emulation: enabled 1970/01/01 00:06:06 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:06 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:06 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:06 swap file: enabled 1970/01/01 00:06:06 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:12 fetching corpus: 50, signal 32137/34761 (executing program) 1970/01/01 00:06:15 fetching corpus: 100, signal 40238/43711 (executing program) 1970/01/01 00:06:19 fetching corpus: 150, signal 44498/48684 (executing program) 1970/01/01 00:06:21 fetching corpus: 200, signal 47527/52418 (executing program) 1970/01/01 00:06:24 fetching corpus: 250, signal 49979/55531 (executing program) 1970/01/01 00:06:27 fetching corpus: 300, signal 52217/58296 (executing program) 1970/01/01 00:06:29 fetching corpus: 350, signal 53709/60411 (executing program) 1970/01/01 00:06:31 fetching corpus: 400, signal 55456/62673 (executing program) 1970/01/01 00:06:34 fetching corpus: 450, signal 56947/64686 (executing program) 1970/01/01 00:06:38 fetching corpus: 500, signal 58671/66769 (executing program) 1970/01/01 00:06:39 fetching corpus: 550, signal 59889/68451 (executing program) 1970/01/01 00:06:42 fetching corpus: 600, signal 60909/69876 (executing program) 1970/01/01 00:06:46 fetching corpus: 650, signal 61780/71174 (executing program) 1970/01/01 00:06:50 fetching corpus: 700, signal 62758/72500 (executing program) 1970/01/01 00:06:53 fetching corpus: 750, signal 63428/73589 (executing program) 1970/01/01 00:06:55 fetching corpus: 800, signal 64392/74846 (executing program) 1970/01/01 00:06:58 fetching corpus: 850, signal 65381/76109 (executing program) 1970/01/01 00:07:02 fetching corpus: 900, signal 66115/77154 (executing program) 1970/01/01 00:07:04 fetching corpus: 950, signal 67048/78324 (executing program) 1970/01/01 00:07:07 fetching corpus: 1000, signal 67684/79206 (executing program) 1970/01/01 00:07:09 fetching corpus: 1050, signal 68595/80200 (executing program) 1970/01/01 00:07:12 fetching corpus: 1100, signal 69169/81053 (executing program) 1970/01/01 00:07:15 fetching corpus: 1150, signal 69958/81925 (executing program) 1970/01/01 00:07:18 fetching corpus: 1200, signal 70646/82730 (executing program) 1970/01/01 00:07:21 fetching corpus: 1250, signal 71216/83479 (executing program) 1970/01/01 00:07:23 fetching corpus: 1300, signal 71790/84177 (executing program) 1970/01/01 00:07:25 fetching corpus: 1350, signal 72522/84911 (executing program) 1970/01/01 00:07:28 fetching corpus: 1400, signal 73049/85546 (executing program) 1970/01/01 00:07:31 fetching corpus: 1450, signal 73562/86117 (executing program) 1970/01/01 00:07:33 fetching corpus: 1500, signal 74110/86750 (executing program) 1970/01/01 00:07:36 fetching corpus: 1550, signal 74621/87297 (executing program) 1970/01/01 00:07:38 fetching corpus: 1600, signal 75122/87834 (executing program) 1970/01/01 00:07:41 fetching corpus: 1650, signal 75647/88377 (executing program) 1970/01/01 00:07:44 fetching corpus: 1700, signal 75944/88839 (executing program) 1970/01/01 00:07:46 fetching corpus: 1750, signal 76492/89349 (executing program) 1970/01/01 00:07:49 fetching corpus: 1800, signal 76881/89750 (executing program) 1970/01/01 00:07:52 fetching corpus: 1850, signal 77314/90154 (executing program) 1970/01/01 00:07:54 fetching corpus: 1900, signal 77750/90567 (executing program) 1970/01/01 00:07:57 fetching corpus: 1950, signal 78181/90966 (executing program) 1970/01/01 00:07:59 fetching corpus: 2000, signal 78504/91348 (executing program) 1970/01/01 00:08:02 fetching corpus: 2050, signal 78882/91737 (executing program) 1970/01/01 00:08:04 fetching corpus: 2100, signal 79150/92082 (executing program) 1970/01/01 00:08:07 fetching corpus: 2150, signal 79518/92400 (executing program) 1970/01/01 00:08:09 fetching corpus: 2200, signal 79752/92722 (executing program) 1970/01/01 00:08:12 fetching corpus: 2250, signal 80024/93015 (executing program) 1970/01/01 00:08:15 fetching corpus: 2300, signal 80448/93196 (executing program) 1970/01/01 00:08:17 fetching corpus: 2350, signal 81198/93196 (executing program) 1970/01/01 00:08:20 fetching corpus: 2400, signal 81512/93196 (executing program) 1970/01/01 00:08:22 fetching corpus: 2450, signal 81871/93196 (executing program) 1970/01/01 00:08:25 fetching corpus: 2500, signal 82263/93196 (executing program) 1970/01/01 00:08:28 fetching corpus: 2550, signal 82703/93196 (executing program) 1970/01/01 00:08:30 fetching corpus: 2600, signal 82949/93196 (executing program) 1970/01/01 00:08:32 fetching corpus: 2650, signal 83205/93196 (executing program) 1970/01/01 00:08:34 fetching corpus: 2700, signal 83547/93196 (executing program) 1970/01/01 00:08:38 fetching corpus: 2750, signal 84011/93197 (executing program) 1970/01/01 00:08:41 fetching corpus: 2799, signal 84312/93197 (executing program) 1970/01/01 00:08:43 fetching corpus: 2849, signal 84516/93197 (executing program) 1970/01/01 00:08:46 fetching corpus: 2898, signal 84783/93197 (executing program) 1970/01/01 00:08:48 fetching corpus: 2947, signal 85293/93197 (executing program) 1970/01/01 00:08:52 fetching corpus: 2997, signal 85607/93197 (executing program) 1970/01/01 00:08:55 fetching corpus: 3047, signal 85857/93197 (executing program) 1970/01/01 00:08:58 fetching corpus: 3097, signal 86112/93197 (executing program) 1970/01/01 00:09:01 fetching corpus: 3147, signal 86420/93197 (executing program) 1970/01/01 00:09:04 fetching corpus: 3197, signal 86727/93197 (executing program) 1970/01/01 00:09:07 fetching corpus: 3247, signal 86942/93199 (executing program) 1970/01/01 00:09:10 fetching corpus: 3297, signal 87337/93199 (executing program) 1970/01/01 00:09:13 fetching corpus: 3347, signal 87605/93200 (executing program) 1970/01/01 00:09:15 fetching corpus: 3397, signal 87890/93200 (executing program) 1970/01/01 00:09:19 fetching corpus: 3446, signal 88134/93200 (executing program) 1970/01/01 00:09:22 fetching corpus: 3495, signal 88315/93201 (executing program) 1970/01/01 00:09:24 fetching corpus: 3545, signal 88518/93204 (executing program) 1970/01/01 00:09:26 fetching corpus: 3595, signal 88836/93204 (executing program) 1970/01/01 00:09:29 fetching corpus: 3644, signal 89017/93204 (executing program) 1970/01/01 00:09:32 fetching corpus: 3693, signal 89175/93204 (executing program) 1970/01/01 00:09:35 fetching corpus: 3743, signal 89331/93204 (executing program) 1970/01/01 00:09:38 fetching corpus: 3791, signal 89578/93209 (executing program) 1970/01/01 00:09:42 fetching corpus: 3841, signal 89778/93209 (executing program) 1970/01/01 00:09:45 fetching corpus: 3890, signal 90017/93209 (executing program) 1970/01/01 00:09:47 fetching corpus: 3939, signal 90320/93212 (executing program) 1970/01/01 00:09:51 fetching corpus: 3989, signal 90567/93212 (executing program) 1970/01/01 00:09:54 fetching corpus: 4038, signal 90793/93212 (executing program) 1970/01/01 00:09:56 fetching corpus: 4087, signal 90975/93216 (executing program) 1970/01/01 00:09:59 fetching corpus: 4137, signal 91240/93233 (executing program) 1970/01/01 00:10:01 fetching corpus: 4187, signal 91426/93233 (executing program) 1970/01/01 00:10:05 fetching corpus: 4237, signal 91754/93234 (executing program) 1970/01/01 00:10:08 fetching corpus: 4287, signal 92102/93234 (executing program) 1970/01/01 00:10:11 fetching corpus: 4337, signal 92301/93234 (executing program) 1970/01/01 00:10:14 fetching corpus: 4385, signal 92558/93234 (executing program) 1970/01/01 00:10:16 fetching corpus: 4434, signal 92751/93234 (executing program) 1970/01/01 00:10:20 fetching corpus: 4484, signal 93026/93234 (executing program) 1970/01/01 00:10:21 fetching corpus: 4519, signal 93165/93234 (executing program) 1970/01/01 00:10:21 fetching corpus: 4519, signal 93165/93234 (executing program) 1970/01/01 00:11:47 starting 2 fuzzer processes [ 730.481445][ T3025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.753631][ T3025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.525599][ T3023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.655837][ T3023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.710285][ T3025] hsr_slave_0: entered promiscuous mode [ 738.754995][ T3025] hsr_slave_1: entered promiscuous mode [ 740.734861][ T3023] hsr_slave_0: entered promiscuous mode [ 740.754338][ T3023] hsr_slave_1: entered promiscuous mode [ 740.769464][ T3023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.773500][ T3023] Cannot create hsr debugfs directory [ 746.025540][ T3025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 746.193997][ T3025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 746.277104][ T3025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 746.381473][ T3025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 747.961020][ T3023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 748.046829][ T3023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 748.135291][ T3023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 748.538794][ T3023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 756.240483][ T3025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.954705][ T3023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.034075][ T3025] veth0_vlan: entered promiscuous mode [ 787.391574][ T3023] veth0_vlan: entered promiscuous mode [ 787.573550][ T3025] veth1_vlan: entered promiscuous mode [ 787.987136][ T3023] veth1_vlan: entered promiscuous mode [ 789.816542][ T3025] veth0_macvtap: entered promiscuous mode [ 790.144053][ T3025] veth1_macvtap: entered promiscuous mode [ 790.262771][ T3023] veth0_macvtap: entered promiscuous mode [ 790.563299][ T3023] veth1_macvtap: entered promiscuous mode [ 792.000797][ T3025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.004494][ T3025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.006586][ T3025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.025051][ T3025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.262238][ T3023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.264020][ T3023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.265566][ T3023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.267006][ T3023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:13:14 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) 00:13:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) [ 796.736780][ T3655] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 797.060518][ T3655] usb 1-1: Using ep0 maxpacket: 32 [ 797.591179][ T3655] usb 1-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 797.595400][ T3655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.596978][ T3655] usb 1-1: Product: syz [ 797.610766][ T3655] usb 1-1: Manufacturer: syz [ 797.612139][ T3655] usb 1-1: SerialNumber: syz [ 797.781157][ T3655] usb 1-1: config 0 descriptor?? [ 798.007271][ T3655] usbtest 1-1:0.0: EZ-USB device [ 798.041382][ T3655] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 798.643619][ T8] usb 1-1: USB disconnect, device number 2 00:13:20 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) 00:13:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) [ 802.620303][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 802.899828][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 803.250291][ T8] usb 1-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 803.252037][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.254168][ T8] usb 1-1: Product: syz [ 803.255249][ T8] usb 1-1: Manufacturer: syz [ 803.256483][ T8] usb 1-1: SerialNumber: syz [ 803.326416][ T8] usb 1-1: config 0 descriptor?? [ 803.487361][ T8] usbtest 1-1:0.0: EZ-USB device [ 803.501719][ T8] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 803.782160][ T906] usb 1-1: USB disconnect, device number 3 00:13:25 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) 00:13:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) [ 807.989698][ T906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 808.240076][ T906] usb 1-1: Using ep0 maxpacket: 32 [ 808.711976][ T906] usb 1-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 808.713881][ T906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.715282][ T906] usb 1-1: Product: syz [ 808.716401][ T906] usb 1-1: Manufacturer: syz [ 808.728545][ T906] usb 1-1: SerialNumber: syz [ 808.840955][ T906] usb 1-1: config 0 descriptor?? [ 808.956704][ T906] usbtest 1-1:0.0: EZ-USB device [ 808.968800][ T906] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 809.343391][ T3656] usb 1-1: USB disconnect, device number 4 00:13:31 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) 00:13:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) [ 813.039546][ T906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 813.309229][ T906] usb 1-1: Using ep0 maxpacket: 32 [ 813.647147][ T906] usb 1-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 813.655708][ T906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.657226][ T906] usb 1-1: Product: syz [ 813.662860][ T906] usb 1-1: Manufacturer: syz [ 813.663945][ T906] usb 1-1: SerialNumber: syz [ 813.765480][ T906] usb 1-1: config 0 descriptor?? [ 813.934530][ T906] usbtest 1-1:0.0: EZ-USB device [ 813.936262][ T906] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 814.394665][ T33] usb 1-1: USB disconnect, device number 5 00:13:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:13:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:24 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) [ 866.550019][ T3655] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 866.831685][ T3655] usb 2-1: Using ep0 maxpacket: 32 [ 867.322102][ T3655] usb 2-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 867.324038][ T3655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.325624][ T3655] usb 2-1: Product: syz [ 867.327226][ T3655] usb 2-1: Manufacturer: syz [ 867.346819][ T3655] usb 2-1: SerialNumber: syz [ 867.529846][ T3655] usb 2-1: config 0 descriptor?? [ 867.679513][ T3655] usbtest 2-1:0.0: EZ-USB device [ 867.680839][ T3655] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 868.511323][ T3656] usb 2-1: USB disconnect, device number 2 00:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:30 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) [ 873.720185][ T3632] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 874.020427][ T3632] usb 2-1: Using ep0 maxpacket: 32 [ 874.473246][ T3632] usb 2-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 874.474999][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.476288][ T3632] usb 2-1: Product: syz [ 874.500427][ T3632] usb 2-1: Manufacturer: syz [ 874.502580][ T3632] usb 2-1: SerialNumber: syz [ 874.594226][ T3632] usb 2-1: config 0 descriptor?? [ 874.761740][ T3632] usbtest 2-1:0.0: EZ-USB device [ 874.764146][ T3632] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 875.405238][ T906] usb 2-1: USB disconnect, device number 3 00:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_socket_connect_nvme_tcp() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x404200, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100008, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() openat$cgroup_freezer_state(r2, &(0x7f0000000480), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x480) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) 00:14:37 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x29, 0xfa, 0x20, 0x547, 0x80, 0xd92d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0xb9, 0xcd}}]}}]}}, 0x0) [ 880.151330][ T906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 880.441447][ T906] usb 2-1: Using ep0 maxpacket: 32 [ 880.894255][ T906] usb 2-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=d9.2d [ 880.896912][ T906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.901578][ T906] usb 2-1: Product: syz [ 880.903126][ T906] usb 2-1: Manufacturer: syz [ 880.904270][ T906] usb 2-1: SerialNumber: syz [ 881.016500][ T906] usb 2-1: config 0 descriptor?? [ 881.166625][ T906] usbtest 2-1:0.0: EZ-USB device [ 881.179923][ T906] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 881.785325][ T3656] usb 2-1: USB disconnect, device number 4 00:14:43 executing program 0: syz_emit_ethernet(0x11a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60faa8c200e42c81d450cbd8acc0e9477b6c41afe1dbf5abfe8000000004003f00000000000000aab4fec5"], 0x0) 00:14:44 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="5e7934c6cf45", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 00:14:46 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8642, 0x0) 00:14:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x5}}}}}}]}}, 0x0) [ 888.699479][ T33] usb 2-1: new high-speed USB device number 5 using dummy_hcd 00:14:48 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8642, 0x0) [ 889.000379][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 889.130833][ T33] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.133228][ T33] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.136159][ T33] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.340870][ T33] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.342900][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.344782][ T33] usb 2-1: Product: syz [ 889.346006][ T33] usb 2-1: Manufacturer: syz [ 889.347221][ T33] usb 2-1: SerialNumber: syz [ 889.524870][ T33] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 889.526980][ T33] cdc_ncm 2-1:1.0: bind() failure [ 889.911873][ T906] usb 2-1: USB disconnect, device number 5 00:14:50 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8642, 0x0) 00:14:51 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8642, 0x0) 00:14:51 executing program 1: syz_usb_connect(0x0, 0x7e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x5e, 0x11, 0x85, 0x10, 0x5050, 0xa00, 0xe133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x8, 0xbd, 0x2f, 0x78, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x20}}, {{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x7, 0x3, 0x10}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x2}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "b3516a86e904e8"}]}}, {}, {}]}}]}}]}}, 0x0) [ 893.359700][ T3632] usb 2-1: new high-speed USB device number 6 using dummy_hcd 00:14:53 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f00000000000905830300b3"], 0x0) [ 893.730275][ T3632] usb 2-1: Using ep0 maxpacket: 16 [ 893.919309][ T3632] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 893.921087][ T3632] usb 2-1: config 0 has an invalid interface number: 179 but max is 0 [ 893.922620][ T3632] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 893.924134][ T3632] usb 2-1: config 0 has no interface number 1 [ 893.926445][ T3632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 893.959258][ T3632] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 893.961274][ T3632] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 893.965830][ T3632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 893.978671][ T3632] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 893.980614][ T3632] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 893.982332][ T3632] usb 2-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 893.984166][ T3632] usb 2-1: too many endpoints for config 0 interface 179 altsetting 81: 106, using maximum allowed: 30 [ 893.986206][ T3632] usb 2-1: config 0 interface 179 altsetting 81 has an invalid endpoint with address 0x0, skipping [ 894.008941][ T3632] usb 2-1: config 0 interface 179 altsetting 81 has an invalid endpoint with address 0x0, skipping [ 894.012211][ T3632] usb 2-1: config 0 interface 179 altsetting 81 has 2 endpoint descriptors, different from the interface descriptor's value: 106 [ 894.015503][ T3632] usb 2-1: config 0 interface 179 has no altsetting 0 [ 894.239619][ T3632] usb 2-1: New USB device found, idVendor=5050, idProduct=0a00, bcdDevice=e1.33 [ 894.241537][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.242952][ T3632] usb 2-1: Product: syz [ 894.243986][ T3632] usb 2-1: Manufacturer: syz [ 894.245122][ T3632] usb 2-1: SerialNumber: syz [ 894.522448][ T3632] usb 2-1: config 0 descriptor?? [ 894.744099][ T3632] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 894.903406][ T3632] ftdi_sio ttyUSB0: unknown device type: 0xe133 [ 895.270341][ T3632] ftdi_sio 2-1:0.179: FTDI USB Serial Device converter detected [ 895.339231][ T3632] ftdi_sio ttyUSB1: unknown device type: 0xe133 [ 895.443204][ T3632] usb 2-1: USB disconnect, device number 6 [ 895.582855][ T3632] ftdi_sio 2-1:0.0: device disconnected [ 895.675234][ T3632] ftdi_sio 2-1:0.179: device disconnected [ 896.280663][ T33] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 896.629849][ T33] usb 1-1: Using ep0 maxpacket: 8 [ 896.843625][ T33] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 896.846872][ T33] usb 1-1: config 179 has no interface number 0 [ 896.852032][ T33] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 896.853942][ T33] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 896.855528][ T33] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 896.857358][ T33] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 896.864115][ T33] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 896.869843][ T33] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 896.874758][ T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.132008][ T33] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 897.150526][ T33] xpad: probe of 1-1:179.65 failed with error -5 [ 897.412904][ T33] usb 1-1: USB disconnect, device number 6 00:14:57 executing program 1: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x0, "c5"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "254113", 's'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x40, 0x1, {0x7, 0x25, 0x1, 0x82, 0x1}}}}}}}]}}, 0x0) [ 898.893437][ T906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 899.159798][ T906] usb 2-1: Using ep0 maxpacket: 32 [ 899.284294][ T906] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 899.288791][ T906] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 899.291218][ T906] usb 2-1: config 1 has no interface number 1 [ 899.292899][ T906] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.295760][ T906] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 899.316259][ T906] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.319170][ T906] usb 2-1: config 1 interface 2 has no altsetting 0 [ 899.520537][ T906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 899.522356][ T906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.523744][ T906] usb 2-1: Product: syz [ 899.524852][ T906] usb 2-1: Manufacturer: syz [ 899.526024][ T906] usb 2-1: SerialNumber: syz 00:14:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 900.115222][ T906] usb 2-1: selecting invalid altsetting 0 [ 900.925624][ T906] usb 2-1: USB disconnect, device number 7 [ 901.940063][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 902.219766][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 902.354498][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.356705][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 902.681197][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.682983][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.684317][ T8] usb 1-1: Product: syz [ 902.685462][ T8] usb 1-1: Manufacturer: syz [ 902.686518][ T8] usb 1-1: SerialNumber: syz 00:15:02 executing program 1: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x0, "c5"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "254113", 's'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x40, 0x1, {0x7, 0x25, 0x1, 0x82, 0x1}}}}}}}]}}, 0x0) [ 903.286755][ T4058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 903.673047][ T8] cdc_ncm 1-1:1.0: bind() failure [ 903.790243][ T8] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 903.920566][ T8] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 904.010912][ T8] usbtest: probe of 1-1:1.1 failed with error -71 [ 904.230105][ T8] usb 1-1: USB disconnect, device number 7 [ 905.789643][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 906.068777][ T8] usb 2-1: Using ep0 maxpacket: 32 00:15:05 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 906.252772][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 906.254619][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 906.256511][ T8] usb 2-1: config 1 has no interface number 1 [ 906.283826][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 906.286053][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 906.290186][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.293516][ T8] usb 2-1: config 1 interface 2 has no altsetting 0 [ 906.510988][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.512725][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.514741][ T8] usb 2-1: Product: syz [ 906.515890][ T8] usb 2-1: Manufacturer: syz [ 906.516983][ T8] usb 2-1: SerialNumber: syz [ 907.383863][ T8] usb 2-1: selecting invalid altsetting 0 [ 907.896731][ T8] usb 2-1: USB disconnect, device number 8 [ 908.001021][ T33] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 908.349499][ T33] usb 1-1: Using ep0 maxpacket: 8 [ 908.541980][ T33] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.544371][ T33] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 908.740617][ T33] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.743673][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.745226][ T33] usb 1-1: Product: syz [ 908.746418][ T33] usb 1-1: Manufacturer: syz [ 908.760395][ T33] usb 1-1: SerialNumber: syz [ 910.000164][ T4081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 910.392489][ T33] cdc_ncm 1-1:1.0: bind() failure 00:15:10 executing program 1: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x0, "c5"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "254113", 's'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x40, 0x1, {0x7, 0x25, 0x1, 0x82, 0x1}}}}}}}]}}, 0x0) [ 910.589793][ T33] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 910.634055][ T33] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 910.703509][ T33] usbtest: probe of 1-1:1.1 failed with error -71 [ 910.814756][ T33] usb 1-1: USB disconnect, device number 8 [ 912.249738][ T3632] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 912.529645][ T3632] usb 2-1: Using ep0 maxpacket: 32 [ 912.684832][ T3632] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 912.686708][ T3632] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 912.706230][ T3632] usb 2-1: config 1 has no interface number 1 [ 912.725137][ T3632] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 912.741022][ T3632] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 912.746140][ T3632] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.752589][ T3632] usb 2-1: config 1 interface 2 has no altsetting 0 [ 913.011019][ T3632] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.012896][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.014294][ T3632] usb 2-1: Product: syz [ 913.015393][ T3632] usb 2-1: Manufacturer: syz [ 913.016496][ T3632] usb 2-1: SerialNumber: syz 00:15:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 913.803512][ T3632] usb 2-1: selecting invalid altsetting 0 [ 914.192016][ T3632] usb 2-1: USB disconnect, device number 9 [ 915.180374][ T3632] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 915.474324][ T3632] usb 1-1: Using ep0 maxpacket: 8 [ 915.610945][ T3632] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.614422][ T3632] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 915.941397][ T3632] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.944410][ T3632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.946070][ T3632] usb 1-1: Product: syz [ 915.947236][ T3632] usb 1-1: Manufacturer: syz [ 915.950478][ T3632] usb 1-1: SerialNumber: syz 00:15:15 executing program 1: syz_usb_connect$uac1(0x0, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x0, "c5"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x2, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "254113", 's'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x40, 0x1, {0x7, 0x25, 0x1, 0x82, 0x1}}}}}}}]}}, 0x0) [ 916.595522][ T4142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 916.880921][ T3632] cdc_ncm 1-1:1.0: bind() failure [ 917.040369][ T3632] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 917.074256][ T3632] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 917.120968][ T3632] usbtest: probe of 1-1:1.1 failed with error -71 [ 917.214920][ T3632] usb 1-1: USB disconnect, device number 9 [ 918.309760][ T3632] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 918.579617][ T3632] usb 2-1: Using ep0 maxpacket: 32 [ 918.701336][ T3632] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 918.703258][ T3632] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 918.704846][ T3632] usb 2-1: config 1 has no interface number 1 [ 918.706350][ T3632] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 918.716982][ T3632] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 918.726439][ T3632] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 918.748509][ T3632] usb 2-1: config 1 interface 2 has no altsetting 0 [ 919.043316][ T3632] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.045775][ T3632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.051840][ T3632] usb 2-1: Product: syz [ 919.054034][ T3632] usb 2-1: Manufacturer: syz [ 919.056000][ T3632] usb 2-1: SerialNumber: syz 00:15:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 919.626656][ T3632] usb 2-1: selecting invalid altsetting 0 [ 920.111738][ T3632] usb 2-1: USB disconnect, device number 10 [ 921.059703][ T3655] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 921.311190][ T3655] usb 1-1: Using ep0 maxpacket: 8 [ 921.440717][ T3655] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.442979][ T3655] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 921.699684][ T3655] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 921.701533][ T3655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.702932][ T3655] usb 1-1: Product: syz [ 921.704033][ T3655] usb 1-1: Manufacturer: syz [ 921.705141][ T3655] usb 1-1: SerialNumber: syz 00:15:21 executing program 1: socketpair$unix(0x11, 0x3, 0x0, &(0x7f0000000040)) [ 922.573393][ T4184] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 922.966813][ T3655] cdc_ncm 1-1:1.0: bind() failure [ 923.258812][ T3655] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 923.339039][ T3655] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 923.421560][ T3655] usbtest: probe of 1-1:1.1 failed with error -71 [ 923.621944][ T3655] usb 1-1: USB disconnect, device number 10 00:15:24 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300090501ff"], 0x0) 00:15:25 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 927.232152][ T3086] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 927.620174][ T3086] usb 2-1: Using ep0 maxpacket: 8 [ 927.873378][ T3086] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 927.881974][ T3086] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 927.884037][ T3086] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 927.885561][ T3086] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 927.886885][ T3086] usb 2-1: config 250 has no interface number 0 [ 927.896706][ T3086] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 927.902718][ T3086] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 927.904294][ T3086] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 927.906163][ T3086] usb 2-1: config 250 interface 228 has no altsetting 0 [ 928.061974][ T3086] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 928.064253][ T3086] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 928.071502][ T3086] usb 2-1: Product: syz [ 928.072503][ T3086] usb 2-1: SerialNumber: syz 00:15:27 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 928.334941][ T3086] hub 2-1:250.228: bad descriptor, ignoring hub [ 928.336710][ T3086] hub: probe of 2-1:250.228 failed with error -5 [ 928.710578][ T3086] usb 2-1: USB disconnect, device number 11 [ 930.240660][ T3656] usb 1-1: new high-speed USB device number 11 using dummy_hcd 00:15:30 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300090501ff"], 0x0) [ 930.891853][ T3656] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 930.893822][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.956023][ T3656] usb 1-1: config 0 descriptor?? [ 931.440698][ T3656] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 931.443662][ T3656] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 931.459669][ T3656] [drm:udl_init] *ERROR* Selecting channel failed [ 931.573330][ T3656] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 931.575306][ T3656] [drm] Initialized udl on minor 2 [ 931.642421][ T3656] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 931.665901][ T3656] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 931.791633][ T3656] usb 1-1: USB disconnect, device number 11 [ 932.740979][ T3655] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 933.098976][ T3655] usb 2-1: Using ep0 maxpacket: 8 [ 933.221240][ T3655] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 933.223190][ T3655] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 933.224715][ T3655] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 933.228949][ T3655] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 933.230542][ T3655] usb 2-1: config 250 has no interface number 0 [ 933.232905][ T3655] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 933.235783][ T3655] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 933.250213][ T3655] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 933.259834][ T3655] usb 2-1: config 250 interface 228 has no altsetting 0 [ 933.553676][ T3655] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 933.555583][ T3655] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 933.557160][ T3655] usb 2-1: Product: syz [ 933.570827][ T3655] usb 2-1: SerialNumber: syz [ 933.873323][ T3655] hub 2-1:250.228: bad descriptor, ignoring hub [ 933.875594][ T3655] hub: probe of 2-1:250.228 failed with error -5 00:15:33 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 934.375453][ T3656] usb 2-1: USB disconnect, device number 12 [ 935.389470][ T3632] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 935.904804][ T3632] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 935.906720][ T3632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.002803][ T3632] usb 1-1: config 0 descriptor?? [ 936.547163][ T3632] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 936.550434][ T3632] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 936.610845][ T3632] [drm:udl_init] *ERROR* Selecting channel failed 00:15:36 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300090501ff"], 0x0) [ 937.000725][ T3632] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 937.016839][ T3632] [drm] Initialized udl on minor 2 [ 937.065516][ T3632] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 937.096653][ T3632] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 937.199278][ T3632] usb 1-1: USB disconnect, device number 12 [ 938.350011][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 938.691595][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 938.863022][ T8] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 938.864847][ T8] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 938.866389][ T8] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 938.879786][ T8] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 938.881730][ T8] usb 2-1: config 250 has no interface number 0 [ 938.883374][ T8] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 938.885526][ T8] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 938.887205][ T8] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 938.909166][ T8] usb 2-1: config 250 interface 228 has no altsetting 0 00:15:38 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 939.270493][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 939.272555][ T8] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 939.274006][ T8] usb 2-1: Product: syz [ 939.275117][ T8] usb 2-1: SerialNumber: syz [ 939.502539][ T8] hub 2-1:250.228: bad descriptor, ignoring hub [ 939.504241][ T8] hub: probe of 2-1:250.228 failed with error -5 [ 940.043802][ T3655] usb 2-1: USB disconnect, device number 13 [ 940.869144][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 941.241215][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 941.243145][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.407300][ T8] usb 1-1: config 0 descriptor?? [ 942.010316][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 942.011822][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 942.059837][ T8] [drm:udl_init] *ERROR* Selecting channel failed 00:15:41 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300090501ff"], 0x0) [ 942.249737][ T8] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 942.251296][ T8] [drm] Initialized udl on minor 2 [ 942.279953][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.284400][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 942.575336][ T8] usb 1-1: USB disconnect, device number 13 [ 944.089667][ T3087] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 944.389138][ T3087] usb 2-1: Using ep0 maxpacket: 8 [ 944.600860][ T3087] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 944.602926][ T3087] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 944.604424][ T3087] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 944.606022][ T3087] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 944.620215][ T3087] usb 2-1: config 250 has no interface number 0 [ 944.629684][ T3087] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 944.633532][ T3087] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 944.635207][ T3087] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 944.637088][ T3087] usb 2-1: config 250 interface 228 has no altsetting 0 [ 944.809482][ T3087] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 944.811535][ T3087] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 944.813068][ T3087] usb 2-1: Product: syz [ 944.814301][ T3087] usb 2-1: SerialNumber: syz 00:15:44 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) [ 944.973944][ T3087] hub 2-1:250.228: bad descriptor, ignoring hub [ 944.987331][ T3087] hub: probe of 2-1:250.228 failed with error -5 [ 945.522251][ T3087] usb 2-1: USB disconnect, device number 14 [ 946.121537][ T3087] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 946.724229][ T3087] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 946.727001][ T3087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.804619][ T3087] usb 1-1: config 0 descriptor?? [ 947.284842][ T3087] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 947.286542][ T3087] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 947.333461][ T3087] [drm:udl_init] *ERROR* Selecting channel failed [ 947.573723][ T3087] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 947.575529][ T3087] [drm] Initialized udl on minor 2 [ 947.623013][ T3087] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.626694][ T3087] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 947.720978][ T3087] usb 1-1: USB disconnect, device number 14 00:15:47 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, "ada9880b"}}}}, 0x0) 00:15:50 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8042, 0x0) mount$bind(&(0x7f0000001140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2002000, 0x0) 00:15:50 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, "ada9880b"}}}}, 0x0) 00:15:53 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:15:53 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, "ada9880b"}}}}, 0x0) 00:15:55 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, "ada9880b"}}}}, 0x0) 00:15:56 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:15:57 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:15:58 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:16:01 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:16:03 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 00:16:05 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) [ 966.568030][ C0] hrtimer: interrupt took 642900 ns 00:16:08 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000700)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2777a", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "2bfd79490df705e6"}}}}}}}, 0x0) 00:16:10 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2e, 0x96, 0xc1, 0x8, 0x1199, 0x6815, 0x7aca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x5, 0x4b, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xc}}, {}]}}]}}]}}, 0x0) 00:16:11 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000700)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2777a", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "2bfd79490df705e6"}}}}}}}, 0x0) [ 972.755024][ T33] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 973.030534][ T33] usb 2-1: Using ep0 maxpacket: 8 [ 973.210254][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 973.212263][ T33] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 973.215397][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 973.217117][ T33] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 00:16:12 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000700)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2777a", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "2bfd79490df705e6"}}}}}}}, 0x0) [ 973.562061][ T33] usb 2-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=7a.ca [ 973.563993][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.565479][ T33] usb 2-1: Product: syz [ 973.567056][ T33] usb 2-1: Manufacturer: syz [ 973.581179][ T33] usb 2-1: SerialNumber: syz [ 973.660698][ T33] usb 2-1: config 0 descriptor?? [ 973.796512][ T33] sierra 2-1:0.0: Sierra USB modem converter detected [ 974.242189][ T33] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 974.392970][ T33] usb 2-1: USB disconnect, device number 15 [ 974.635683][ T33] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 974.673557][ T33] sierra 2-1:0.0: device disconnected 00:16:14 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000700)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2777a", 0x0, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], "2bfd79490df705e6"}}}}}}}, 0x0) 00:16:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00170c0000000c0002a4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x4, "57119503"}, 0x0, 0x0, 0x0, 0x0}) 00:16:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000704949404c05c30653f2010203010902240001000000000904000002a2755a0009000002000000000009058b02"], 0x0) [ 977.931835][ T3656] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 978.179674][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 978.201105][ T3656] usb 2-1: Using ep0 maxpacket: 32 [ 978.381056][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 978.383199][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 978.386940][ T3656] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 978.397158][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.512785][ T3656] usb 2-1: config 0 descriptor?? [ 978.594366][ T4410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 978.723363][ T3656] hub 2-1:0.0: USB hub found [ 978.803987][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 978.806317][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 978.818824][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.931487][ T3656] hub 2-1:0.0: 2 ports detected [ 978.991742][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=f2.53 [ 978.996027][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.019556][ T8] usb 1-1: Product: syz [ 979.021640][ T8] usb 1-1: Manufacturer: syz [ 979.022758][ T8] usb 1-1: SerialNumber: syz [ 979.112620][ T8] usb 1-1: config 0 descriptor?? [ 979.204272][ T8] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 979.720170][ T3087] usb 1-1: USB disconnect, device number 15 00:16:21 executing program 0: syz_emit_ethernet(0xb87, &(0x7f00000010c0)={@broadcast, @random="0a0ee55d2dd8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e70e", 0xb51, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "d3c650c8bfe62337df28fa40249eab4f7de9ba9a04948570739d53144178bef43fd83b10457ae762d66544d769b39d6e073ba84e908415225f5a8b30851929caa750cb9a601efbadcbdca1bc1767aa4f9de28f5107186cce55de83300f562319a48a04c2c207d1fc63e8c9ab39f1ad9b49d0c1eae443defb2cba5e6824a5f36f0fdf70867f9f7ad95dd25bb5561948ba1339729dc22255bf110683f108e69f570f68c64ee750d84fa8550d6415d025561dbbb5fb154aecb522e7d21a08f02d7860e484a5e04991fd7ce816ccbf91957c2e694d50621f91988cd46988c1df2519272e909cfa2bcc28aa9097ee4ee3f86baa4c3d63ea472b4951366486b522cc2e68ddde149f720d06ddef0cd0636d4e36996430498b2e7b783e7ff2193e8cfc8fdeebceb9433c820365bfd6e0624cde22deddc2a0998c600e4b17329808d9817a4c3d003c51e22edf96d847e9448d18583fa48d05cd0e439a4e42ffb92d7e81074dafdd6d99514a9b2849fa4ff92fb14ec8c36825d1cf31f665d8966096b1b75ea29176aa9099e4cb6ccef6c85cbc9d9f2e49bc5bf83220c502b680984d987e85b4606342e8b89e5017114a861b1ca7a41a086edc1371ddabfba30c8735ad01206143693f56c4c5370503947941ebd05edfd95d590021cf50548572d93c318fcf643640e86ab6899fc40ef054d195fcff517073706b434854597e3273c38b46f4ada5157cb01d45bb1d09a4eff8a2049dec251e45cd55d42a7cd4e866e36e2d5b283e9215498d2b71bc3a1e5b0a5b3fcea4c74242a54d738443bd71363c4d16e47c1f6206dd978f982d1144e39d0541a81347045b313201764da5cdcb3f2335eb1f906c4cecf14623c349822457d8cdfef00749e1011fc1be387c5e3bc8b824f12704d4ad9fb931075baab0ff143420bf9a4bdf072fa6bc4325f8fe7ce2868644f0fae41d79f3dfeca2a4739700f8e71b6844b26a5a5487f42e9a425adc3f364b2e1fca31e3e46d4093c54f4679e2494af0232d4e8235c0f1f1636cb91e345bdf3d4f5fddf87afa2d22b03bc9f285eba308d6d4030ac0759ba548fff93b70ed0c6718bf5ac04492f1a966e24744e9e263af62a02bc79dd268a2ef24acdf261a648271cbfe8e5e53501292a0a8f878eb5bc4758ef534da26b84526c3df3a2f7466fd34633c6e72761e14daacbf1935b8c030ba824d4e09e1e0ce9298f9056933aa85f15ca4ce3f39df655a7530398e5acf504fdaf87b686a84a2b662c0b05368abeabfc08d1e8422267d0f5cc088a6da02cfe9a56d3900c77d1f8e42b8d895ae6cfc9a8830ea5d86531c6de14209fadfc6e97d00b22bbd8e2e2ea25da01581ff34ca45b14cbba5f0b03d28ea3c898e8dfe0f97449b0014dad3192926e6f83041ecdb66cebee866002dc0e82cc975bcd48a29faab580f1940fde4a3488962710ba0036b18bcbca9108dadf0ce1b15e2140714d6f4d2cc9eef8d95b6ee17f5450944a719a1f7f08cd4d76b37686598af84fa3edfcacb205eafa8d6856cddd987484f92055df9abbe7aebc7367b9475372ec6d770a5ce80b6c6cf9c474d704b5f2965664636326a93c5feea7281909b0a0720cfa33729faa269b5b34ec1599e67e9820de3652386a7d926bec0116c1cef220c722d0166da920966e4ee45990d9e8a572131ef8205c898f58e6371dfbd1a3dc2b401f6ba63ebd3d4f8e93920663fe6fe5756caeda371e05277b1c6b579e380f03c1427b36c7c64282c9c64b2f4ad7fb502e344e355321c357dc9283a1a18f0db38bb6efd65a4aa2625be640e4ffc00c4840d17244cef05e3a2573a4881498c73e4b6d57311439d3e28ef4aab5a4c2e4327df07d7b73ade8253e4fc67fa3e8ffa67d568242cb07ec53bd8f1879af38fc2499dbcc2461a8bd258114e5f63c52a5026670968b9215a2033c72fb605634396de96cb661212a86f367f8e91592dc3d8c80771fecf3cfb68ee0e1f61b7b56f89919aa2c6884ef27b4754f6b9d18ac2aef79cd89afeac5f1e4c81a04b9c91551f41d66a6fd850b01e4090ae5ecec55fbb12a47e3d8ce6a96687265c7749f1c4c3b410a6c4f99ccb392e6e1a72afc00e374e324f46550ef68308da727608e18e6baffda146388fa3e237895ced58cfb04e9ea7517ee41daf3bc4bf8201d0c985ec76c0ec585bebf7c69306016d092ec3ea4285bf43e2db1d3485fff850ca817e57b99602911901f3db67122cd439e84a3dda6b7a08ec910df7ac79cbf4983c2a6b613594508b2ddd3ead68a166436f7db8bcf4f5ccdc86187075a19bb0d06e652ebb3f23c511c9ae071001e24598196b586dd269970402a03d26259783d763726af16afe628aa41467a05673b7113bb0ad695c65c22438f6c801b332d04119d955b45596845879982754c7161682ca572c8fe6a5ea269e204d658e00f9bef82bc50248d7e9d151e493d909b7f78150129467ec3aa06662517f87efc7b8d998421c1ab355d5ed2e34b44419478f662bed0199b1637cd841f588d17c226a8be327d1808e2a56477c123e9e369f401b0e8c39ee6c7a4f442fbff0afcc2767acef2d1b410d7263b5c32d95e64bb471334b71ba6ce0496f0e7d291f77ccc42182b99d4d211f4fd03a08c78bc1d5b3e50d88186226cf33f9f4355303fd1276f163443402c5d41942bbe26abac7b0ea1cfa5de14ae491b33508ae08d6f75bac3d91c65d923774aa20d2e385f321238d91c2665dd940598e2b12086a503f91dd0eaba0fef94b261facddb00a4fda501396956b6affbdbdbd4fa6b399cbee847e1b79c66135c35b4db8fccf0e57ccf41f5a2781d0f3cc7447a726ccbad2a1f86a6fadf1daa42e09b2c3ee59de99d47ea898439c4639b9f34d54824d4d8136e565e320bb4a2ed703213bcd896035197fdbf130eb9e3975ffccb73cf0e39a65faade931dfd1404a943174ec0f68ed5ec93fd628bb267b4d9053c771ab46367058c2bd52c1b721b70d2681feb15f61a8d3b91cf032073cf5729e33edea438b4b43d683af92758e2313278ee4ecfbe609ff808020262e77878517fc1dd916f0babf00b59e78b49be0e723cc36fb8a6fe9232fe626db0438fdb27d97b1dfdb316cec1825ceedd2be0fd4aa1958f04718b8e0f8217e2859bbee41f2fb33f62180f17500e304fa99263fe082cf1955baa9cdd0c91635e41ece082cf251ba9d0c347c6378f6bd99ecc25ecbd6d14b3b335a2915b07baa5d9e430094ccd7fbe522df4d074eeab21cf2fa8f4f77a6cd1a74a2494cfbe8ae77e8da157ded48daedd6c6c3197899e95bb0a1824ce89d082184bca41df22f394473382d843598d63e8ff0dd2582186f6ad7412fa36641f6a65f8b4fb7e828e83fc350d31b89ffc3f33a30ddcb3e4500170488ca1fc8e5b00029e1c1ea84f1923bcb63fb9e626bbda4dcabb331662d704d417084f9e8ccbf4b6efc3b6f3033000f33207c2956314a601b013cad44b29fc42925574d82b89f796b9c0620d225aee650f98d43cd9f4fabf3442a2fd25b65b22b1e8f0883aedd9db0e830db92fb40e6447eb8f2168b7d222cb205790e5add92765543b24cc5343f902e5709f53a5d1a732c1cecf6e9dab58b73eb07245c1ca957e9691f40a9880635fd2f609de4551d1cafb84c9f1d5966e66226c76774af0fadab356235ea17e844a2bae374a01bba4f7d15c9f30e69c3f425b50e8c9f2014e8a242e04724f1b5d7636f86bec6b4b5a490347df7e98e43289571b59a08e4336e9b53f4575688232953b0b9bd6e309f517a8796d605d6939b8edc6fd3b6d1637c15f82d134f7b26923a75f2088ee897c98f00d8c15a780681df55fe2d83f5b731eb2ea2ab54e3a9c1c4d5f5ca35e5a7001e98f6806fa2e305b6e0dda482b72375740cb5d1b28b4a92fd43aaaff282942ab2a4a704a087f48d6aa831903073f5812465dbbe4c87079215d6355f3436e1ca7407c049fea50f71fd1b6f2fc32830d98301c6064ed922cd4453e428a2857564462a5c1b749fa98626733043a1deef435b903a1cb9721410b333efde9c59cdddb5d828b3ef88241dc10532da3139087cae48eb9b3f4a9d1d1d3b"}}}}}}, 0x0) [ 982.258894][ T3655] usb 2-1: USB disconnect, device number 16 [ 982.309334][ T3087] hub 2-1:0.0: activate --> -19 00:16:22 executing program 0: syz_emit_ethernet(0xb87, &(0x7f00000010c0)={@broadcast, @random="0a0ee55d2dd8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e70e", 0xb51, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) 00:16:24 executing program 0: syz_emit_ethernet(0xb87, &(0x7f00000010c0)={@broadcast, @random="0a0ee55d2dd8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e70e", 0xb51, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) 00:16:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00170c0000000c0002a4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x4, "57119503"}, 0x0, 0x0, 0x0, 0x0}) 00:16:26 executing program 0: syz_emit_ethernet(0xb87, &(0x7f00000010c0)={@broadcast, @random="0a0ee55d2dd8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e70e", 0xb51, 0x3a, 0x0, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) [ 986.750142][ T33] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 987.019550][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 987.171156][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 987.173364][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 987.175545][ T33] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 987.177258][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.323255][ T33] usb 2-1: config 0 descriptor?? [ 987.383593][ T4446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 987.499246][ T33] hub 2-1:0.0: USB hub found [ 987.900507][ T33] hub 2-1:0.0: 2 ports detected 00:16:27 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 00:16:30 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006ae1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc882, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 991.050790][ T3087] usb 2-1: USB disconnect, device number 17 [ 991.180130][ T33] hub 2-1:0.0: activate --> -19 [ 991.679194][ T3655] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 992.091250][ T3655] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 992.100406][ T3655] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 992.114224][ T3655] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.124577][ T3655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.320697][ T4463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 993.274034][ T8] usb 1-1: USB disconnect, device number 16 00:16:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00170c0000000c0002a4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x4, "57119503"}, 0x0, 0x0, 0x0, 0x0}) [ 994.539273][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 994.973913][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 994.991174][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 995.000513][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.002604][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.035660][ T3656] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 995.136435][ T4463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 995.301202][ T3656] usb 2-1: Using ep0 maxpacket: 32 [ 995.500997][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 995.503559][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 995.505749][ T3656] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 995.517390][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.694669][ T3656] usb 2-1: config 0 descriptor?? [ 995.805836][ T4503] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 995.906408][ T3656] hub 2-1:0.0: USB hub found [ 996.130301][ T8] usb 1-1: USB disconnect, device number 17 [ 996.299725][ T3656] hub 2-1:0.0: 2 ports detected 00:16:37 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006ae1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc882, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 999.329615][ T3087] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 999.839189][ T3087] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 999.843863][ T3087] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 999.846028][ T3087] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 999.855888][ T3087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.174243][ T3656] hub 2-1:0.0: set hub depth failed [ 1000.184937][ T906] usb 2-1: USB disconnect, device number 18 [ 1000.459414][ T4540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1001.573218][ T906] usb 1-1: USB disconnect, device number 18 00:16:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="00170c0000000c0002a4"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x4, "57119503"}, 0x0, 0x0, 0x0, 0x0}) [ 1002.939588][ T3087] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1003.238924][ T3087] usb 2-1: Using ep0 maxpacket: 32 [ 1003.385975][ T3087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1003.391376][ T3087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1003.394771][ T3087] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1003.402520][ T3087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.513740][ T3087] usb 2-1: config 0 descriptor?? [ 1003.540834][ T4573] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1003.609836][ T3087] hub 2-1:0.0: USB hub found [ 1003.839526][ T3087] hub 2-1:0.0: 2 ports detected [ 1007.342797][ T3655] usb 2-1: USB disconnect, device number 19 [ 1007.411283][ T3656] hub 2-1:0.0: activate --> -19 00:16:49 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006ae1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc882, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 1012.050539][ T4540] sound midiC3D0: rawmidi drain error (avail = 4043, buffer_size = 4096) [ 1012.081394][ T3655] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1012.631136][ T3655] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1012.633403][ T3655] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1012.637402][ T3655] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1012.664633][ T3655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.992351][ T4590] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1013.272195][ T3655] Insufficient stack space to handle exception! [ 1013.275658][ T3655] Task stack: [0xff20000007968000..0xff2000000796c000] [ 1013.276745][ T3655] Overflow stack: [0xff6000007cce8070..0xff6000007cce9070] [ 1013.278956][ T3655] CPU: 0 PID: 3655 Comm: kworker/0:4 Not tainted 6.8.0-rc1-syzkaller-00008-g3951f6add519 #0 [ 1013.280849][ T3655] Hardware name: riscv-virtio,qemu (DT) [ 1013.282270][ T3655] Workqueue: usb_hub_wq hub_event [ 1013.283948][ T3655] epc : mark_lock+0x2e/0x1ad2 [ 1013.285768][ T3655] ra : __lock_acquire+0xaa8/0x784c [ 1013.287798][ T3655] epc : ffffffff802120ba ra : ffffffff80214fa2 sp : ff20000007967f30 [ 1013.289125][ T3655] gp : ffffffff8863e380 tp : 0000000000000000 t0 : 0000000000000000 [ 1013.290538][ T3655] t1 : ff60000032c32660 t2 : ff60000032c324f8 s0 : ff200000079680e0 [ 1013.291923][ T3655] s1 : ffffffff8866b780 a0 : ff60000032c31a00 a1 : ff60000032c32660 [ 1013.293708][ T3655] a2 : 0000000000000008 a3 : 0000000041b58ab3 a4 : 00000000000d001a [ 1013.295136][ T3655] a5 : ff20000007968070 a6 : ffffffff89a752a0 a7 : ffffffff85c4d444 [ 1013.296798][ T3655] s2 : 0000000000000009 s3 : ff6000007cce9444 s4 : ff20000007968060 [ 1013.299166][ T3655] s5 : 1fec00000658649e s6 : ffffffff8864aee0 s7 : ffffffff886acca0 [ 1013.300474][ T3655] s8 : ff60000032c324dc s9 : 0000000000000001 s10: 0000000000000003 [ 1013.301906][ T3655] s11: ff60000032c31a00 t3 : 0000000000000004 t4 : 1fec00000658649b [ 1013.303424][ T3655] t5 : 0000000000000002 t6 : 1fec0000065864d0 [ 1013.304558][ T3655] status: 0000000200000100 badaddr: ff20000007967f80 cause: 000000000000000f [ 1013.306621][ T3655] Kernel panic - not syncing: Kernel stack overflow [ 1013.308709][ T3655] CPU: 0 PID: 3655 Comm: kworker/0:4 Not tainted 6.8.0-rc1-syzkaller-00008-g3951f6add519 #0 [ 1013.310133][ T3655] Hardware name: riscv-virtio,qemu (DT) [ 1013.311754][ T3655] Workqueue: usb_hub_wq hub_event [ 1013.313930][ T3655] Call Trace: [ 1013.314843][ T3655] [] dump_backtrace+0x2e/0x3c [ 1013.316912][ T3655] [] show_stack+0x34/0x40 [ 1013.318633][ T3655] [] dump_stack_lvl+0xe8/0x154 [ 1013.320083][ T3655] [] dump_stack+0x1c/0x24 [ 1013.321454][ T3655] [] panic+0x33c/0x77a [ 1013.322630][ T3655] [] handle_bad_stack+0xe0/0xf4 [ 1013.323995][ T3655] [] __lock_acquire+0xaa8/0x784c [ 1013.325875][ T3655] SMP: stopping secondary CPUs [ 1013.328748][ T3655] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:54:39 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff85884e66 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85928c8c vstvec 0000000000000000 mepc ffffffff8001d396 sepc 00000000000582f8 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000008 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080036000 sscratch 0000000000000000 satp a013f000000b1dc9 x0/zero 0000000000000000 x1/ra ffffffff80319d64 x2/sp ff20000006a538d0 x3/gp ffffffff8863e380 x4/tp ff60000014b9ce00 x5/t0 ddf54961c2c9070f x6/t1 ffe3ffff00d4a6f8 x7/t2 ff60000014b9d8f8 x8/s0 ff20000006a538e0 x9/s1 1fe4000000d4a6f8 x10/a0 ff60000014b9d928 x11/a1 0000000000040000 x12/a2 00000000000e0040 x13/a3 fffffffff2f2f200 x14/a4 0000000000000000 x15/a5 ff60000014b9de00 x16/a6 ffffffff89a752a0 x17/a7 0000000000000040 x18/s2 ffffffff88936340 x19/s3 0000000000000001 x20/s4 0000000000000000 x21/s5 ffffffff8779ca88 x22/s6 ffffffff80319d64 x23/s7 ff20000006a53860 x24/s8 ffffffff85c4d6c8 x25/s9 ffffffff8864aee0 x26/s10 ff60000014b9ce00 x27/s11 1fec000002973b1e x28/t3 0000000000000004 x29/t4 1fec000002973b1b x30/t5 ffffffff88677cc0 x31/t6 1fec000002973b28 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80278afe mhartid 0000000000000001 mstatus 0000000a00000180 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85928c8c vstvec 0000000000000000 mepc ffffffff803d0352 sepc ffffffff802120ba vsepc 0000000000000000 mcause 8000000000000003 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ff20000007967f80 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080034000 sscratch 0000000000000000 satp a024a000000b3921 x0/zero 0000000000000000 x1/ra ffffffff80237230 x2/sp ff6000007cce8750 x3/gp ffffffff8863e380 x4/tp ff60000032c31a00 x5/t0 ff6000007cce81e8 x6/t1 ffebffff0f99d084 x7/t2 0000000000000000 x8/s0 ff6000007cce8790 x9/s1 ffffffff87694960 x10/a0 ffffffff87694960 x11/a1 0000000000000000 x12/a2 0000000000040000 x13/a3 ffffffff8021c2ac x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000000003 x17/a7 ff6000007cce8427 x18/s2 00000000000004f1 x19/s3 0000000200000100 x20/s4 1ffffffff0fbd93e x21/s5 0000000000000000 x22/s6 ff6000007cce8840 x23/s7 ffffffff87deca38 x24/s8 0000000000000001 x25/s9 dfffffff00000000 x26/s10 0000000000000000 x27/s11 ff6000007cce88a0 x28/t3 ffffffff8021db9e x29/t4 ffebffff0f99d084 x30/t5 ffebffff0f99d085 x31/t6 ff6000007cce8438 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000